
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
File: yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json)
Hash identifier: fA5p9fQGr42wyGHIYS4wI+MrTvNq1lDtXh0O9CRR/mQ=
Subject key identifier: 14:9D:61:D2:2D:C8:B6:C8:BF:7C:50:6D:C5:88:19:A3:74:79:9F:FF
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Certificate issuer: /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
Manifest number: BB
Signing time: Wed 25 Mar 2026 06:14:31 +0000
Manifest this update: Wed 25 Mar 2026 06:14:31 +0000
Manifest next update: Wed 01 Apr 2026 06:14:31 +0000
Files and hashes: 1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: Uhwz/rlJwerD4abzAyyFHvRfA7Z1PxATqFxPvULaIO4=)
2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: ZgPtES9Kb7/bZDuku74P3oPXELpqML+BgkqSggVYIcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Validity
Not Before: Mar 25 06:14:31 2026 GMT
Not After : Apr 1 06:14:31 2026 GMT
Subject: CN=69c37d47-199b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:8a:3a:e7:e7:5d:c1:b6:f8:e4:d4:49:d8:
e7:1c:be:ec:09:95:47:26:12:47:9c:b4:79:1d:f1:
91:69:10:02:f9:5d:d4:3a:e8:61:69:b2:c8:62:58:
b7:64:c8:fd:12:ad:d5:3e:8a:1b:9c:bd:fb:37:2e:
b7:d9:96:36:cd:be:77:f0:ff:88:61:1a:cc:14:38:
64:4b:f9:49:2f:04:9b:55:7f:99:b7:7d:f8:e4:79:
6d:10:c6:fc:c3:85:63:bc:00:28:19:e5:61:bf:c6:
3c:e7:11:43:1a:9f:ee:0e:69:99:d3:48:6a:71:32:
c5:43:54:6f:a3:c3:b0:2e:79:74:9b:41:2a:96:22:
14:48:fb:6b:bf:18:5a:ad:03:21:da:8d:35:0b:f0:
5e:1d:a2:89:24:7c:72:03:1d:f6:75:dd:d8:3e:b0:
57:f2:78:a3:47:be:6d:03:d9:2e:59:0e:f2:33:ad:
cd:a8:99:a6:c1:06:63:3f:d5:00:af:32:17:19:a8:
70:a1:bf:35:b7:df:41:59:78:b3:c7:c9:47:75:47:
76:b4:c7:f9:ac:32:02:8d:2c:27:c8:7e:c7:59:4b:
43:dc:e1:71:b8:0f:e8:a8:1f:db:01:f7:51:2b:c1:
de:f1:c2:02:9f:1e:80:65:28:a0:78:7c:f8:ca:f7:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9D:61:D2:2D:C8:B6:C8:BF:7C:50:6D:C5:88:19:A3:74:79:9F:FF
X509v3 Authority Key Identifier:
keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:36:78:a5:05:89:a5:c8:a2:94:d6:ab:05:7a:60:69:02:4d:
c3:b6:38:aa:62:9c:e9:b9:41:61:48:49:e8:b3:8b:5a:52:7e:
e0:64:50:40:a6:79:c1:0f:b3:35:4c:6f:17:08:29:ee:6d:f4:
d2:be:d7:10:b5:63:dd:b4:96:81:af:2b:17:02:17:32:12:61:
1d:d4:49:43:b9:84:ea:49:75:ab:d0:b6:17:be:8a:23:29:73:
55:66:c5:8b:07:1b:44:50:d3:c3:8a:42:02:3f:0b:33:1a:60:
04:a8:ba:93:a7:b4:83:1e:fc:3a:da:df:b7:c9:4d:5e:03:7a:
16:ab:1f:e4:ba:48:c9:d9:49:4b:72:e5:03:df:31:f9:3a:5e:
b9:23:bf:f8:36:6e:1b:92:bf:b3:07:42:69:b3:07:92:55:3d:
3c:ad:f8:b8:b3:dc:db:f2:c2:42:c3:32:70:f6:7d:b4:b8:a4:
af:ac:70:14:1c:a3:95:6f:8f:2a:d5:39:dd:02:fd:19:d7:46:
3d:c8:df:9e:f4:cc:3d:92:46:cc:85:2e:ec:43:9d:a7:c0:5b:
82:4f:c8:74:c3:da:bd:82:95:50:f9:0f:85:55:5b:05:ef:4a:
62:37:31:9c:e9:36:e2:3e:21:e2:b4:14:ba:f6:5e:44:7d:10:
e7:5f:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:16 2026 by rpki-client