
$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json)
Hash identifier: ih6Y+Hh1qkfLrn5kYCHl2dMld6NFs0S5sR8sTa5FWFA=
Subject key identifier: 47:42:5D:D9:E5:24:70:64:04:17:8B:92:3B:48:49:BD:BD:4E:94:38
Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
Manifest number: 012F
Signing time: Fri 17 Apr 2026 05:13:43 +0000
Manifest this update: Fri 17 Apr 2026 05:13:42 +0000
Manifest next update: Fri 24 Apr 2026 05:13:42 +0000
Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: umxG1qm5bsX7sqabe56j6BGVYlfNpC+BZ819HfCDm64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl
rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Validity
Not Before: Apr 17 05:13:42 2026 GMT
Not After : Apr 24 05:13:42 2026 GMT
Subject: CN=69e1c186-2f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:67:eb:6a:15:0d:d3:32:78:35:62:19:21:
e0:91:6b:07:7b:a7:63:67:2e:04:39:05:f2:a1:ad:
b9:0f:67:93:1b:14:af:e4:ef:25:91:d7:56:d3:d5:
9d:5b:ed:26:ca:a3:11:19:c4:6b:e1:ba:a5:16:b0:
28:a9:0f:1c:71:21:c1:43:3b:3a:10:f6:6a:1b:bc:
eb:d0:0e:2f:8f:d8:02:dd:f3:03:cf:d5:f9:b8:c3:
6c:09:4b:f0:c0:f8:f8:c7:dd:3e:09:10:be:91:ed:
7c:76:49:28:aa:90:98:07:27:a8:15:6c:32:f4:48:
1a:25:3d:7a:ac:f4:77:e1:a5:61:91:95:93:e4:11:
97:73:9e:cd:b1:a8:d8:38:cd:7c:ce:12:0b:2a:57:
1a:fd:63:63:36:cd:0a:05:db:cf:43:61:a1:ed:45:
fb:9f:25:c5:4c:26:56:bf:d5:58:35:be:bf:70:a0:
4d:c9:e3:c3:a0:e7:82:a3:01:7e:9a:10:9e:6b:7a:
c3:55:d9:4c:3e:74:2b:24:cc:93:47:3a:47:e8:44:
b1:8f:af:43:c7:0b:7c:63:58:62:5c:50:bf:cd:9d:
c4:89:17:27:0a:c1:4c:3b:c0:14:64:ad:e8:42:29:
7b:27:1e:05:bc:5a:5e:f5:d4:fb:f3:79:2d:b0:8b:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:42:5D:D9:E5:24:70:64:04:17:8B:92:3B:48:49:BD:BD:4E:94:38
X509v3 Authority Key Identifier:
keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0e:08:97:4e:11:2e:e1:f4:f4:ad:bb:87:69:ea:f3:e2:b0:
b9:08:3d:0a:43:cd:f2:ca:46:f6:d6:e5:7d:4a:bd:29:bc:34:
21:5d:00:8c:ce:68:cc:32:d8:ed:78:42:2a:46:c2:aa:fe:0c:
e7:96:b3:c2:7f:91:11:15:ba:b9:23:23:09:d8:df:83:53:77:
6f:e2:7b:f3:5a:d8:23:c3:13:36:81:10:50:67:dc:a8:97:41:
5b:56:d0:43:90:ee:0d:fa:98:37:84:ef:e8:8a:22:d8:15:a5:
a8:69:c3:bd:cd:58:ac:04:48:4e:cb:27:70:08:76:a8:9d:90:
12:11:ba:9f:84:09:28:90:c1:6c:da:b2:0e:a6:5b:75:7b:3b:
ac:d1:d1:8e:0c:ed:c9:6e:7e:1b:ea:4c:61:fc:95:b2:6a:e3:
49:d4:9a:84:6b:5b:ec:8e:a8:69:c7:b9:09:a9:4a:5f:23:eb:
f9:45:77:d6:33:57:47:19:af:b3:50:08:91:26:27:34:f6:f8:
ea:8c:4d:66:fa:d6:41:12:b8:37:81:71:6f:59:e4:86:88:de:
dc:9d:b6:2c:4f:13:bb:69:d8:0a:9a:56:ba:be:82:a5:d8:b0:
05:f2:66:7c:2e:3f:ef:a1:43:3e:83:37:dc:7e:a9:c8:43:4f:
2f:3a:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:26 2026 by rpki-client