
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json)
Hash identifier: +NMFHf9mmuAd9lmj3kdlGOn7gjvzkSbZrrt52f6nqTc=
Subject key identifier: 91:DE:D4:D6:78:E4:EC:03:DF:D6:E8:53:69:31:45:B4:B7:17:CA:FD
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
Manifest number: 0265
Signing time: Sun 01 Mar 2026 23:36:19 +0000
Manifest this update: Sun 01 Mar 2026 23:36:17 +0000
Manifest next update: Sun 08 Mar 2026 23:36:17 +0000
Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: LLDuXUSdqPzYuNiozMkqv2RpUZXtIm/RuoWGaUqpAxc=)
2: EF9D5BBCE94211F08F77753A3C6F56BC.roa (hash: dSdyOI3NKroBXRPK4g3/VXBd5t/AgAoW4VERy4gWDHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Validity
Not Before: Mar 1 23:36:17 2026 GMT
Not After : Mar 8 23:36:17 2026 GMT
Subject: CN=69a4cd72-de54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:3a:a7:8e:6a:3d:ec:fc:53:c9:8a:89:75:
29:f2:47:47:62:47:17:42:97:67:58:dd:05:41:b1:
ad:5d:ad:ba:b2:15:39:48:3e:01:8a:e2:a7:e5:57:
59:e0:36:aa:be:e0:70:a7:02:43:10:04:5e:0f:08:
cc:4d:90:f8:a3:d2:05:6f:06:fc:64:aa:fd:d5:b6:
e6:b2:76:57:98:c3:3d:41:d1:21:eb:cc:58:6e:cf:
35:dc:81:f1:d7:9d:5d:94:45:d8:4d:55:29:28:a7:
b2:14:3f:02:fd:82:fb:70:99:f7:76:dc:3f:d0:c0:
07:47:5d:28:f0:1a:48:15:3f:02:59:1d:76:ff:9b:
72:92:7d:b6:5e:16:d4:72:7f:53:6a:88:ed:e8:73:
75:4d:46:ea:69:f3:57:97:56:97:0b:57:a4:91:ce:
7e:14:c2:70:43:19:19:86:97:30:a4:25:0e:af:3c:
f4:f2:1c:ef:ae:fd:f9:1f:d8:29:fa:7d:20:d0:47:
98:f3:3c:88:8c:0f:ea:d9:e4:83:d2:e6:c7:93:36:
d3:0e:85:6a:89:5c:7b:cf:03:11:44:11:de:1b:4a:
56:a8:68:89:00:c2:74:3d:3c:10:7e:98:3c:1b:44:
4c:57:ae:35:19:54:dd:f7:db:71:c7:86:e3:ea:ca:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:D4:D6:78:E4:EC:03:DF:D6:E8:53:69:31:45:B4:B7:17:CA:FD
X509v3 Authority Key Identifier:
keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fb:f8:eb:6f:1a:a4:41:5b:cd:8f:18:1d:9e:49:98:bc:8f:
9e:b9:fb:94:c6:3e:ee:7b:13:26:cf:40:de:18:72:25:9f:6d:
31:98:5a:1d:46:4b:2a:64:fe:01:25:0c:0f:25:3a:a3:ff:a6:
0a:e4:9b:65:88:53:9a:d4:a9:30:74:82:8c:c1:9b:90:ac:80:
05:3a:ab:48:a7:3f:47:f6:f4:cc:a3:eb:0e:e1:6c:0a:aa:ab:
48:17:4b:42:b5:08:a2:6d:17:7d:a6:79:76:03:36:9c:c7:7a:
12:92:e6:c4:7c:58:35:9b:66:cc:c9:46:6f:d6:43:52:64:2b:
1f:28:12:0e:20:dd:25:46:4f:ec:23:d9:30:c5:e7:51:16:19:
0a:89:ce:02:38:d5:7f:3b:93:a0:86:7f:a7:d6:25:e1:85:41:
5d:ff:3b:77:f0:38:8b:bf:80:ec:51:7b:e8:8d:00:fd:cd:dd:
fc:5a:0a:cf:92:96:d1:46:30:2d:6b:80:ee:dc:e0:56:36:e4:
fa:63:37:79:49:b1:cb:09:9a:30:67:6e:f2:7d:07:bc:1c:60:
b3:b4:79:0a:11:2c:fd:ed:26:d3:6a:48:9f:9e:39:a2:9c:aa:
fd:da:ed:4e:84:fa:df:0c:36:d7:d2:41:e6:87:fc:4b:87:fd:
4f:a2:3d:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz
MzBFMzIwOTYwHhcNMjYwMzAxMjMzNjE3WhcNMjYwMzA4MjMzNjE3WjAYMRYwFAYD
VQQDEw02OWE0Y2Q3Mi1kZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw086p45qPez8U8mKiXUp8kdHYkcXQpdnWN0FQbGtXa26shU5SD4BiuKn5VdZ
4DaqvuBwpwJDEAReDwjMTZD4o9IFbwb8ZKr91bbmsnZXmMM9QdEh68xYbs813IHx
151dlEXYTVUpKKeyFD8C/YL7cJn3dtw/0MAHR10o8BpIFT8CWR12/5tykn22XhbU
cn9Taojt6HN1TUbqafNXl1aXC1ekkc5+FMJwQxkZhpcwpCUOrzz08hzvrv35H9gp
+n0g0EeY8zyIjA/q2eSD0ubHkzbTDoVqiVx7zwMRRBHeG0pWqGiJAMJ0PTwQfpg8
G0RMV641GVTd99txx4bj6spk9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHe1NZ4
5OwD39boU2kxRbS3F8r9MB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB
QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjkwNy9CNTZBN0NCMDdBQjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2
YW5kYXBTWFZQWTR6RGpJSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATfv4628apEFbzY8YHZ5JmLyPnrn7lMY+7nsTJs9A3hhyJZ9tMZhaHUZLKmT+
ASUMDyU6o/+mCuSbZYhTmtSpMHSCjMGbkKyABTqrSKc/R/b0zKPrDuFsCqqrSBdL
QrUIom0XfaZ5dgM2nMd6EpLmxHxYNZtmzMlGb9ZDUmQrHygSDiDdJUZP7CPZMMXn
URYZConOAjjVfzuToIZ/p9Yl4YVBXf87d/A4i7+A7FF76I0A/c3d/FoKz5KW0UYw
LWuA7tzgVjbk+mM3eUmxywmaMGdu8n0HvBxgs7R5ChEs/e0m02pIn545opyq/drt
ToT63ww219JB5of8S4f9T6I92A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:33 2026 by rpki-client