
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
File: YqwbuVgKcRmBnntrbrLDUVNHh_0.mft (raw, json)
Hash identifier: C3pjnhJAccNGUy5JIvourxE8PT9K+5hI5M68aHMfyjw=
Subject key identifier: CE:63:31:8A:8B:2E:0C:DD:B8:16:F7:C3:E6:1E:B7:DE:87:E0:C0:51
Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
Certificate issuer: /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
Manifest number: 013E
Signing time: Fri 17 Apr 2026 05:03:30 +0000
Manifest this update: Fri 17 Apr 2026 05:03:29 +0000
Manifest next update: Fri 24 Apr 2026 05:03:29 +0000
Files and hashes: 1: YqwbuVgKcRmBnntrbrLDUVNHh_0.crl (hash: JzNSeWbqRXqSb2mbC4kBrJNm9hJ3ZV7jfLMvpaNinZU=)
2: 652283665B1A11EFA78B847EC4F9AE02.roa (hash: UsVYh0cMVNRpr+Gc87SWu7LilmsEheyEv/IWx8kKIpA=)
3: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (hash: BuxXyoL8osjsOVkcemiUlr0GNXekE0nxlamBP/kmyXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Validity
Not Before: Apr 17 05:03:29 2026 GMT
Not After : Apr 24 05:03:29 2026 GMT
Subject: CN=69e1bf21-6976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4d:4d:9b:57:f4:31:45:60:f9:11:ad:96:62:
01:a1:93:8f:45:cd:3c:30:20:9c:f3:b2:29:bf:13:
c7:c6:7f:74:9a:65:5a:94:21:88:59:01:8e:be:c3:
ec:6a:d9:ed:fe:43:57:26:b3:90:9c:74:7d:3a:ec:
9f:8b:1a:ce:11:09:cb:fb:ab:80:43:75:c2:df:c1:
4d:a9:a3:96:42:36:fb:df:ce:23:33:ea:1c:92:ba:
ed:26:0f:aa:c4:a5:7a:90:b5:a9:bf:5c:e4:a5:1a:
89:c5:1e:ed:60:ba:8e:5b:a7:f7:d0:fa:8d:fc:f1:
f5:d0:49:29:9a:b2:30:3f:18:34:43:78:6e:fa:8e:
e5:46:d4:ce:6e:35:6c:01:a6:40:12:9d:a1:c3:ad:
46:cb:54:df:de:a8:82:5c:35:cc:59:a6:04:a4:b6:
b3:b6:8c:a8:a5:62:e3:b6:e8:c4:7b:b2:d1:b0:4a:
72:fb:83:05:0b:bc:f2:0d:64:98:a2:bd:22:ed:a4:
05:74:4b:52:84:1b:3a:f9:b7:f4:16:2a:4f:9a:78:
f2:6b:00:1a:14:47:99:f0:7d:b7:eb:8a:eb:30:ca:
76:c7:24:ae:69:7e:81:b3:3a:aa:83:1b:05:3e:26:
07:0e:8c:4a:d2:21:62:c1:e0:49:a1:14:3e:6f:24:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:31:8A:8B:2E:0C:DD:B8:16:F7:C3:E6:1E:B7:DE:87:E0:C0:51
X509v3 Authority Key Identifier:
keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:95:ee:83:b5:da:65:7c:d5:c6:8f:b0:10:22:ab:6e:7b:a1:
8a:fa:4a:85:da:64:a6:30:d5:99:eb:ca:40:55:5e:bd:46:f8:
66:62:22:bd:84:cf:4a:81:a1:10:66:fd:b2:13:18:16:17:a0:
4e:68:17:d9:a3:0e:95:d6:60:3a:5e:5a:ec:ce:6c:b2:3b:7f:
71:af:11:0f:c6:32:39:f3:2f:0f:f9:fc:c0:01:79:48:51:1a:
53:8c:2b:4b:0c:e6:6b:ac:8d:40:60:18:4b:5b:9a:a8:7b:73:
1e:d7:1b:84:92:9c:3b:23:cd:39:08:4b:93:a1:f2:02:de:04:
66:d9:67:1f:cd:ff:b4:c5:f1:3c:af:3f:61:b7:b2:fa:00:25:
11:d8:5a:75:6f:37:1c:21:9a:97:04:49:51:6d:77:25:2a:cb:
db:8a:08:d0:ee:3c:86:68:ca:6f:8e:b1:0c:4c:43:8a:48:fa:
16:01:b3:aa:36:99:c8:2f:31:a6:a0:1e:31:98:06:b3:f7:8a:
39:06:52:aa:a7:e1:eb:b1:ba:94:a0:b8:d1:aa:72:b0:0f:1e:
cc:17:38:71:fd:a8:1c:6a:e9:33:81:64:80:e4:dc:4d:ae:d1:
61:61:ae:a5:24:86:f2:2c:fc:29:eb:e1:06:05:cc:9e:8f:8e:
ff:3e:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:41:10 2026 by rpki-client