
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json)
Hash identifier: MickySTecClr0P52ANHzYeF7NIbo/3/jayrg7jMRFHM=
Subject key identifier: 56:79:52:D2:4B:59:33:EE:1E:B5:1B:52:C4:D1:1A:87:D6:10:F0:62
Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
Manifest number: 0212
Signing time: Wed 25 Mar 2026 02:17:30 +0000
Manifest this update: Wed 25 Mar 2026 02:17:29 +0000
Manifest next update: Wed 01 Apr 2026 02:17:29 +0000
Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: t53HwGLEZNgKuUiD5UeZDBcP+bPPtQXidOuokvWDxIg=)
2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: Cd3ka8bb5R3DYUTF/v0b6ivGnboKPrlUrUoM7/Vgbdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Validity
Not Before: Mar 25 02:17:29 2026 GMT
Not After : Apr 1 02:17:29 2026 GMT
Subject: CN=69c345ba-879c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:a7:53:49:f1:38:c9:69:2c:37:06:04:1f:
5b:48:9b:b7:cf:76:e7:10:6f:61:e8:f6:d8:37:45:
64:b1:b5:1d:75:13:e0:3b:57:86:0d:ce:1e:79:ef:
bc:b7:c4:ec:4f:0f:b9:55:2e:19:c6:09:f9:b4:3b:
82:0a:4f:93:5c:22:d8:74:59:1c:82:33:ff:8f:ba:
1a:57:55:91:75:24:76:df:06:90:e3:0a:46:4d:b7:
05:0c:e1:47:1b:6b:44:f8:e6:8c:0f:f5:98:5b:2a:
9f:b5:06:3b:06:fc:68:eb:06:76:13:03:c1:c0:a3:
ae:ce:d4:a3:cc:43:33:c7:49:6b:d8:04:ac:a6:32:
01:bf:e9:ea:d4:f8:94:ec:26:82:9d:45:48:ef:b8:
a0:e9:72:69:8e:2b:aa:45:28:3f:9d:35:0d:44:be:
0e:c8:f5:af:34:75:db:11:47:ff:60:2b:c7:b3:74:
ea:4c:f6:df:5e:6f:f7:56:a3:e7:47:ba:18:81:2d:
26:3a:b5:4d:ef:63:d2:39:d1:4c:21:7f:7b:4d:ad:
95:8a:84:a8:76:e1:0a:0b:14:94:cb:04:98:36:86:
d0:d7:dd:9a:cf:1c:5e:7b:ed:eb:b2:36:7e:3d:5c:
a8:c8:71:33:b3:94:41:80:56:e1:6c:94:60:b3:bc:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:79:52:D2:4B:59:33:EE:1E:B5:1B:52:C4:D1:1A:87:D6:10:F0:62
X509v3 Authority Key Identifier:
keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:13:ff:fb:4e:1e:64:a0:37:a7:95:7d:7e:5c:92:34:1f:ba:
d3:f1:4f:7b:d8:27:51:59:c8:b8:33:40:77:58:35:7a:4a:58:
55:f1:da:da:80:3d:b2:2e:23:ac:c0:eb:d2:5b:96:c7:87:15:
ee:3f:0e:2f:cd:22:1f:74:22:9e:d6:f0:f2:43:d3:5a:15:f4:
f3:06:6e:22:40:86:55:f9:56:ad:85:43:cd:ee:42:8b:20:12:
24:86:e5:ce:cb:27:82:ad:11:34:2a:54:74:05:c8:9b:3b:46:
9a:f6:b9:18:6c:af:e3:e9:6d:51:30:47:33:3c:ff:77:73:18:
e2:a1:07:91:0a:de:f8:78:b5:11:db:36:2d:d0:94:d5:44:3e:
88:aa:20:7f:05:2a:76:31:64:08:3d:1f:5f:1a:de:1a:05:7b:
de:a6:e9:76:de:8c:b8:2b:8b:a7:87:c5:52:0c:f6:0b:ab:ac:
1b:d4:50:db:5d:6b:13:ac:ee:97:5c:3e:98:1d:90:88:47:0c:
06:32:1e:39:69:b5:2c:cf:c0:b4:c0:30:b9:55:84:85:f2:e2:
91:e2:ca:d5:67:f9:15:35:14:2d:7d:1f:a2:b9:87:51:a2:d1:
2c:44:e2:c8:d1:76:6e:9a:3d:07:f5:cd:0c:35:be:c2:3b:e3:
27:cc:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:49 2026 by rpki-client