
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File: yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier: 0+eEPzN0eBF7qzB+NGsBMSsg2plRAtN01QmJZYCkYqA=
Subject key identifier: 53:8F:A8:6D:BA:A0:E5:67:25:AD:08:D7:D4:D9:A0:8B:10:68:E1:D5
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer: /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial: 0BAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number: 0BAC
Signing time: Sat 28 Feb 2026 19:11:37 +0000
Manifest this update: Sat 28 Feb 2026 19:11:36 +0000
Manifest next update: Sat 07 Mar 2026 19:11:36 +0000
Files and hashes: 1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: GhVmI+2bTJl1XfKJSL3zXhY4t/I2KNIkmZjSifQSzSI=)
2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: 3u5hviV9wYqSDD6MZKgqds2XhBaPvlTgTPQdfbhFev0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Validity
Not Before: Feb 28 19:11:36 2026 GMT
Not After : Mar 7 19:11:36 2026 GMT
Subject: CN=69a33de9-6cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:05:e3:e3:e6:61:00:cb:81:05:d0:02:e5:
25:73:d5:4a:da:11:c3:18:e1:3f:b6:e9:94:54:f7:
a5:3c:50:04:26:07:37:cf:bf:4a:50:c0:a7:30:59:
2b:47:6f:a3:28:c1:ae:13:95:73:80:80:37:36:21:
92:15:02:0f:64:82:a3:12:fd:9b:ac:f6:d3:12:68:
6f:03:ab:7c:4d:66:72:e6:6f:e6:cb:b8:d4:63:d2:
79:ff:a1:65:ac:61:aa:32:a7:5b:a5:5f:31:e7:1b:
b5:4c:83:80:74:97:a0:50:96:6e:59:3e:7f:85:e6:
d2:cc:1c:f8:de:7a:77:b8:6b:a0:b7:f9:f0:18:9d:
a4:ef:95:d3:04:92:9d:1e:dc:b2:46:5c:a9:d8:a6:
97:19:26:31:8c:16:06:26:fb:0a:a6:0e:15:80:58:
a9:81:cc:a8:f5:72:5a:a5:9e:1f:ff:97:74:86:2d:
d0:42:b5:7c:bf:b2:40:71:a5:41:18:1e:a5:a4:f7:
b6:a6:a7:76:9b:1b:68:27:06:46:b3:37:ae:e0:ff:
92:c4:0d:cd:a6:00:b8:76:50:51:6d:c3:26:cc:bc:
76:47:6a:86:42:69:29:49:33:06:15:b5:90:f7:a8:
f3:12:25:b1:fc:cb:50:e5:e1:6c:ff:d0:b9:1d:82:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8F:A8:6D:BA:A0:E5:67:25:AD:08:D7:D4:D9:A0:8B:10:68:E1:D5
X509v3 Authority Key Identifier:
keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:65:8d:ef:6a:39:a4:0e:04:63:00:9c:0c:2b:73:28:84:
ca:87:32:df:ed:70:b5:0b:28:48:57:0b:ca:f2:32:b9:f3:cb:
a4:9c:69:a9:2e:37:47:9e:00:77:53:8e:16:67:36:d0:b9:56:
f7:15:7c:88:f9:0d:5c:5b:15:a0:50:78:5f:8d:94:3a:63:63:
92:e8:a2:6c:97:01:42:82:03:79:34:dc:89:9e:aa:40:4e:58:
50:1c:22:1d:32:c6:3b:a1:a5:03:1d:b9:5c:fd:88:ed:be:55:
01:62:d1:36:27:00:a9:37:bf:bf:13:f2:a6:65:76:ed:1f:d0:
61:60:21:59:af:8f:ea:6b:d4:d9:d8:30:3f:0e:89:91:c1:ce:
ed:90:56:aa:4b:b9:ad:96:74:ab:42:c4:8b:b4:17:95:c1:22:
29:cf:d3:8f:ac:7b:50:31:61:9b:28:52:de:ef:50:c2:55:20:
97:d9:c1:0d:dd:73:36:73:b1:5c:eb:58:2f:dc:1a:15:f6:e2:
be:57:9b:27:96:22:a9:7a:82:3f:da:5a:b4:b2:e1:38:f9:b9:
e5:3f:2e:f3:15:9a:8b:68:4a:cc:ef:f2:ae:6c:8b:53:69:7b:
dd:12:bf:82:b2:ce:bb:5b:31:37:9c:14:c8:94:3a:29:c2:1f:
b8:98:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:23 2026 by rpki-client