
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json)
Hash identifier: HZlQG2e/zUx6KKvmnAHd1WXL0XyEbpYCXpsmg7T55Gs=
Subject key identifier: 39:0D:3A:21:D1:59:E3:A9:36:A9:CA:A4:99:65:0C:CA:52:C0:80:C4
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial: 05C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
Manifest number: 05BA
Signing time: Tue 24 Mar 2026 22:48:36 +0000
Manifest this update: Tue 24 Mar 2026 22:48:35 +0000
Manifest next update: Tue 31 Mar 2026 22:48:35 +0000
Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: VkVSiDfgOdmsh4qpEsHhZXCQRqyAWxxOKpjLCbbtl88=)
2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: ndTpDZlPiwVPJ1O58HOrjE/VLnQNPEmSoyFLTx+c11g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Validity
Not Before: Mar 24 22:48:35 2026 GMT
Not After : Mar 31 22:48:35 2026 GMT
Subject: CN=69c314c4-1ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:8a:76:65:04:b7:01:d4:cb:1f:ea:3a:7b:
06:6a:08:e6:21:99:74:aa:4b:a2:9a:3f:73:31:fb:
34:58:18:cd:f8:17:c6:ed:61:09:74:f7:7c:03:62:
fc:58:e6:67:04:90:9d:f6:d5:b9:8e:b7:6e:80:d1:
04:79:97:74:8f:12:29:1d:66:07:43:d0:c4:e7:71:
b6:aa:00:03:34:dc:6e:b3:ae:36:90:a4:03:eb:a9:
f1:47:5e:8a:02:4b:1f:94:e9:b5:08:1c:e3:43:e1:
7f:e4:49:c1:6d:75:d1:15:cb:9a:57:5e:46:b9:2f:
67:a2:aa:ff:20:e2:01:4b:2e:a8:73:61:c0:da:2d:
79:0d:13:d8:54:2d:94:58:33:41:28:dd:38:d0:e9:
35:95:40:a6:18:78:7b:9a:40:f4:14:e3:e7:a8:92:
0f:ea:ac:7d:13:51:f4:a3:e5:3f:c6:fe:5f:41:ed:
36:f2:a9:03:c4:49:14:22:a6:f7:ff:6a:44:47:53:
11:74:36:ea:61:5a:89:b3:12:8a:5f:41:a9:9c:d3:
1f:4a:34:05:43:ae:2d:2a:a8:2c:59:e4:eb:14:8f:
07:53:f9:02:8d:dd:f9:22:11:a9:9b:3c:98:81:a5:
6a:2f:65:ee:1b:e8:19:cb:c3:ef:0b:fb:00:29:48:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0D:3A:21:D1:59:E3:A9:36:A9:CA:A4:99:65:0C:CA:52:C0:80:C4
X509v3 Authority Key Identifier:
keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1b:81:95:7f:8e:c6:03:c1:5f:ac:66:16:25:06:7e:68:f1:
c9:13:ba:58:42:be:2e:96:90:e6:e9:3f:83:4e:18:12:c6:4a:
e5:67:02:b3:c6:8f:b9:c3:c2:35:b7:22:f3:8c:ae:78:9a:2a:
36:7f:30:1c:85:f5:f4:30:dd:42:a0:ac:45:8a:31:fa:86:d2:
04:61:15:21:c9:9b:14:8c:ff:34:cf:26:8e:13:33:c1:30:98:
38:1b:28:b8:b2:1a:2d:70:68:39:7c:d5:ee:92:14:46:84:fd:
4e:c6:18:81:d5:40:ee:14:13:7b:22:99:69:64:24:fa:ef:0d:
05:40:bc:42:35:2f:3b:93:52:4d:2a:a4:d6:3f:5f:e1:30:08:
73:32:11:c2:1f:84:c3:ea:e1:00:72:e6:b1:9a:a3:33:cc:b1:
aa:2b:9e:20:4e:f6:ca:5e:a0:9e:df:8f:07:7a:03:3e:d5:bd:
ed:9e:6c:8c:9f:2c:be:f4:c2:7a:19:93:14:7a:5f:9d:0f:e6:
7e:88:34:fa:a6:4e:a0:db:c5:2d:b2:67:c9:ae:cf:75:52:d1:
ad:ca:c5:a3:c4:d8:eb:ea:0b:dc:82:34:d8:72:19:db:b0:51:
e5:09:da:31:68:4e:83:3a:60:8b:b7:23:f0:c7:ee:57:d6:f8:
d0:2d:c4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:58:05 2026 by rpki-client