
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File: yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier: brxMeb4fLZlby3CmcWwbG3SsrXShHjmJBDY9NwYO0Iw=
Subject key identifier: A1:73:E2:CC:7B:76:03:20:2F:B3:5C:D9:28:DC:C6:44:A7:B2:42:A6
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer: /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial: 0BD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number: 0BC7
Signing time: Thu 16 Apr 2026 18:51:34 +0000
Manifest this update: Thu 16 Apr 2026 18:51:33 +0000
Manifest next update: Thu 23 Apr 2026 18:51:33 +0000
Files and hashes: 1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: MMDCPARQ5D4QGaoeD38W0N7xaZFNyM+OWmo/dEEs7gw=)
2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: nsk1UqBSMxXhAmerfIUuT9a9NoDkCJE2EAsvPLMgex8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3024 (0xbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Validity
Not Before: Apr 16 18:51:33 2026 GMT
Not After : Apr 23 18:51:33 2026 GMT
Subject: CN=69e12fb6-6421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:f2:17:35:fb:3d:12:11:2b:b5:06:2a:c4:
4d:18:ce:80:93:09:20:77:a4:38:50:0e:56:84:8c:
2c:c5:ca:76:63:77:25:fd:ca:f6:b5:e5:2d:bb:63:
85:f4:4b:9b:c8:09:b3:68:42:a7:53:80:a9:b7:7d:
7c:44:1e:91:83:4a:ff:bb:f1:14:aa:56:c5:45:c2:
95:d4:38:4e:70:48:d4:fe:ef:96:ad:f9:1f:f3:61:
c0:4e:10:9a:f9:e4:9d:c7:d3:b2:8c:b0:d3:10:83:
6f:f4:e8:15:3b:c0:42:12:07:df:e1:7f:9c:9a:6f:
6b:bf:ef:7d:c3:50:af:e3:32:78:ac:aa:1e:08:94:
b1:47:66:ae:90:6f:fb:e7:4b:71:36:1e:18:02:ae:
0e:6f:00:84:aa:35:72:fb:4c:70:20:09:e8:b0:7f:
d4:a6:1e:86:68:6f:8a:f2:15:a5:a3:cb:e0:06:d3:
23:7d:8f:5f:11:31:a2:24:72:ce:94:36:38:be:29:
74:39:e1:a9:dd:6c:0b:23:04:cc:40:97:ae:8e:f1:
ed:4e:0d:60:e4:80:a6:74:8a:e0:f5:f3:c8:d7:a4:
b9:d3:2c:fc:bc:9f:3d:20:38:58:e6:18:78:5a:8f:
1d:bd:d8:4a:9e:93:44:95:54:77:f7:3a:0e:3c:ab:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:E2:CC:7B:76:03:20:2F:B3:5C:D9:28:DC:C6:44:A7:B2:42:A6
X509v3 Authority Key Identifier:
keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:61:dc:ad:6b:30:f0:77:3a:95:20:f2:65:03:95:2a:d3:e0:
5c:f7:80:79:4d:54:41:ff:36:9f:65:fa:05:0d:2e:9b:fc:3f:
d7:ba:f1:3e:e6:d4:64:f9:66:3b:df:20:f5:02:92:8e:e9:b4:
b4:ad:ec:81:9b:59:81:73:22:58:a6:1e:af:50:06:d3:54:96:
0c:9c:82:38:de:7b:48:88:55:07:ac:18:c5:9b:6d:c3:45:77:
37:93:c7:14:9a:96:61:82:43:92:8d:67:d7:6b:54:4d:96:52:
42:0b:b5:dd:43:90:a9:18:fc:a7:57:ca:39:38:2d:9c:70:ac:
6a:a1:5d:71:71:e1:ae:5c:05:c3:6b:0b:b6:42:8d:e6:e8:8e:
f5:77:fe:9d:3b:64:8a:86:89:9e:43:59:44:d6:e7:e8:f6:86:
3d:d0:4e:73:7a:72:e5:22:26:61:0d:9d:db:14:13:7b:9d:d5:
68:bf:21:e8:33:23:b1:a5:fc:01:23:e3:6a:fc:b1:ec:e9:bf:
1b:38:6e:9b:26:a0:1b:4b:95:7a:4f:c7:c4:97:1d:d5:52:41:
45:c4:1f:bc:8b:47:d2:4f:79:19:db:72:72:1e:e5:03:4c:91:
4d:23:d7:20:4c:f7:83:da:41:5d:13:ed:2c:40:2f:46:0d:14:
c0:fc:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:11:26 2026 by rpki-client