
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
File: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft (raw, json)
Hash identifier: t9NlhjeHUcL4k3mY+EGGDvGpAbkT6j28vCEYLO7NQpo=
Subject key identifier: F8:56:48:32:6A:AC:11:A5:5C:3C:C8:43:9F:46:B3:6B:1C:F0:2F:C6
Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
Certificate issuer: /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
Manifest number: 3A
Signing time: Sun 01 Mar 2026 22:24:14 +0000
Manifest this update: Sun 01 Mar 2026 22:24:13 +0000
Manifest next update: Sun 08 Mar 2026 22:24:13 +0000
Files and hashes: 1: Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl (hash: mxa4BlylDCx+wRlaEMxtcwHiOiBHrsSeFx3Dmcv1qiU=)
2: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (hash: fz0PyQO3dpe/zq5PphDn6te7WEMaib2lqFLapkHh2Ws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl
rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB
Validity
Not Before: Mar 1 22:24:13 2026 GMT
Not After : Mar 8 22:24:13 2026 GMT
Subject: CN=69a4bc8e-d603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:59:8c:2e:c6:ff:13:14:ea:69:15:aa:c0:
93:d0:16:e7:fc:80:0f:43:cd:d0:83:cc:b5:90:3a:
67:f6:75:d6:65:99:d1:80:08:1e:23:3f:5d:23:44:
97:a9:1a:8e:55:3f:bf:73:94:cc:f6:50:f4:38:38:
ee:49:cc:9e:87:2d:cd:65:cd:be:f6:81:f9:29:77:
04:34:9a:12:8b:60:8a:7d:0e:cd:67:0c:c6:76:e5:
9b:3a:e0:a1:91:2b:a6:2f:e2:fa:0c:8b:dd:b7:25:
de:15:18:cd:e2:ed:c2:4d:49:9e:4b:95:cf:cf:bd:
84:8a:e0:49:19:46:84:22:cd:fe:72:80:4c:4d:57:
b2:5e:22:de:65:16:8d:63:c0:e6:5e:f4:bd:01:3b:
16:7e:87:28:89:2e:97:8c:c3:04:cb:91:f6:35:17:
50:aa:17:3d:e5:ae:3e:6b:a6:de:c3:e7:0c:90:b5:
85:3c:4f:8e:38:71:76:d8:1b:e5:8d:0c:73:4d:64:
95:f1:8b:7e:d6:9b:6e:fe:67:2c:93:0a:1f:73:15:
89:e0:35:db:a3:36:8d:49:28:93:22:57:8c:68:c9:
e5:ea:02:b6:e1:6a:ca:02:6f:0d:95:a9:fd:90:a9:
a8:62:3c:ff:ba:98:3f:be:f7:8f:9b:6f:c2:8c:f0:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:56:48:32:6A:AC:11:A5:5C:3C:C8:43:9F:46:B3:6B:1C:F0:2F:C6
X509v3 Authority Key Identifier:
keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e4:56:33:1a:f3:61:a5:16:eb:b8:d2:69:8f:fd:e1:b8:e1:
56:3c:fe:24:9b:3a:32:51:7f:f5:13:46:81:1f:b6:66:a7:f3:
57:30:8c:21:5b:e9:20:5f:6d:8e:80:55:30:1b:19:67:c8:ff:
6e:b0:01:35:0a:00:0b:58:70:a3:1d:86:b6:5b:ca:cb:f9:c6:
96:56:3a:30:65:4a:9d:72:9b:58:cb:d8:5f:03:7c:80:74:d7:
e4:37:f1:03:69:dc:c4:75:5b:5c:6a:ca:ac:08:d3:dd:da:0d:
9c:f5:d1:b2:5a:90:96:70:10:96:93:01:c8:c7:c0:c9:23:81:
68:2c:3e:2a:6c:fc:3c:c3:4a:72:b1:bc:94:60:9c:17:ba:35:
0f:23:86:2a:5e:4a:e6:7c:bd:c5:84:ef:8c:9e:c3:cc:d1:64:
9b:67:34:e3:81:a5:48:00:57:a8:d7:97:26:25:44:34:97:7f:
0e:68:9e:f9:b7:48:ed:fa:83:88:7a:b8:2a:3d:fb:3e:54:53:
9e:af:8b:27:1b:1e:6d:f2:0c:1e:e2:31:8b:77:bf:53:20:90:
ad:78:1e:cc:6e:ab:20:19:3b:bb:80:81:e3:c1:07:fc:6c:41:
36:ec:ee:2c:7d:96:b6:1e:85:e9:fc:8a:18:32:bc:c0:57:03:
59:2c:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:04 2026 by rpki-client