
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
File: YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json)
Hash identifier: 1WTaOUd9ziE9IgsxlJN25p5O6wDsyOUSlftcvHA17e8=
Subject key identifier: 97:20:06:0A:6A:22:1D:5F:8A:79:A9:8A:5B:E1:C5:DE:BC:D7:29:92
Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
Certificate issuer: /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
Manifest number: 0138
Signing time: Wed 25 Mar 2026 04:38:36 +0000
Manifest this update: Wed 25 Mar 2026 04:38:35 +0000
Manifest next update: Wed 01 Apr 2026 04:38:35 +0000
Files and hashes: 1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: rM2SPlEVBxdhs2U77F8kSo2+HYeDy5DPr6Qfdj9XAqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD1F9, serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Validity
Not Before: Mar 25 04:38:35 2026 GMT
Not After : Apr 1 04:38:35 2026 GMT
Subject: CN=69c366cc-3a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:f9:7b:33:61:05:58:62:ab:26:98:6d:9a:
0c:37:52:d0:45:b4:d5:34:f0:c0:99:ac:ad:be:94:
73:64:ec:31:63:99:43:7e:4b:09:63:8c:a0:1f:09:
1d:ee:b4:d8:53:21:b3:cc:17:5a:3d:47:e4:52:a8:
53:9f:b1:7d:0b:ec:09:a1:1f:56:c8:0e:7f:92:22:
be:b1:c5:63:93:38:53:34:e6:39:86:50:34:5c:13:
bc:20:9c:f2:6b:a9:40:7f:d9:20:61:45:01:1b:1a:
8b:52:f2:05:22:26:2b:6b:d4:2e:30:cd:3f:9a:33:
54:cb:1e:ba:86:b5:dc:a1:4f:98:2f:71:56:9f:5b:
4b:0b:cb:13:aa:7b:11:89:f0:79:ab:de:8e:04:c4:
5b:c5:6f:e7:bc:56:1c:8e:f4:a9:65:2c:6c:ff:9f:
b5:de:ac:ab:ad:47:ae:0e:b4:e5:a1:73:2f:e7:ac:
25:35:ca:f7:a2:c0:fa:7b:92:00:82:59:2c:07:27:
b5:ca:19:30:8e:21:2a:81:d0:8b:e7:17:07:4a:93:
a6:c7:e5:86:e8:77:16:30:a5:41:d5:33:18:e0:08:
ff:04:0d:ca:01:61:05:76:00:37:ad:0f:cf:ee:a1:
9f:ca:92:e3:63:0c:aa:85:f0:22:d3:49:c4:cb:5b:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:20:06:0A:6A:22:1D:5F:8A:79:A9:8A:5B:E1:C5:DE:BC:D7:29:92
X509v3 Authority Key Identifier:
keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:75:1b:c7:1d:53:1c:5c:af:49:5b:78:37:76:28:24:d2:64:
0c:62:4d:b3:2f:f4:27:34:b6:f3:96:b0:c5:53:a9:cd:9d:4d:
d0:c1:14:61:be:f1:52:9f:04:7f:1d:59:ce:51:e3:aa:83:1d:
6f:6b:fb:b5:0c:75:08:29:30:5b:95:27:a6:de:9b:4a:18:1e:
81:41:ad:dd:bc:11:0c:42:d9:5e:5c:a6:0f:fd:a3:9b:27:1a:
ad:57:ba:6e:79:42:df:de:e6:2d:0a:23:10:1e:45:36:29:d2:
30:34:ef:a5:37:8f:55:96:76:f5:d8:2b:7d:e9:a8:03:97:b9:
4a:fb:4e:3f:98:39:c6:dd:7f:9a:b5:90:c7:af:00:8b:8e:ca:
e1:79:d0:4c:6d:a1:59:23:e7:46:a6:26:d2:96:63:ad:f0:2f:
87:a7:7c:9f:39:e7:3a:6a:5c:df:04:9a:14:22:97:cc:37:a3:
9f:35:06:37:0b:e8:22:3d:34:5d:bf:cd:58:c9:78:55:11:f4:
fe:3a:6a:02:ea:e5:c7:e4:dc:7a:af:bf:63:1f:88:f1:a1:ff:
24:ab:50:5a:b6:73:24:13:14:3b:1d:6d:23:5c:21:88:c2:c7:
7c:a1:bb:44:85:b8:e2:3f:a2:2e:9e:aa:a8:e6:c3:09:a7:98:
ed:94:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:12 2026 by rpki-client