
$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json)
Hash identifier: 4z1O2VRPwy/Wqaf1jHwrxFy99aHJPLeYYa5SRUbxjhE=
Subject key identifier: 0E:7F:8C:F0:F7:BF:33:DB:3E:51:6C:20:8C:65:06:76:B6:73:C1:04
Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Certificate serial: 3576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
Manifest number: 353F
Signing time: Mon 02 Mar 2026 01:52:48 +0000
Manifest this update: Mon 02 Mar 2026 01:52:47 +0000
Manifest next update: Mon 09 Mar 2026 01:52:47 +0000
Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: j0p1Mnp7hVDtdRUMb125vdHRGzoHUI7MZoRA4uf6ot0=)
2: E3D2704667FC11F0AC42A91FC4F9AE02.roa (hash: ptlT7u2MhuBbu24nscPM+vqHy0ITbmTpmlMUOppZHGo=)
3: D257C8F88FAB11F0A7F64E1AC4F9AE02.roa (hash: G9rHcPIfPgJicicRoBaQDI5mj2H6x4dCQr+TJm0s7O8=)
4: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: iWSJFLIeKe7hugY4ZJti1OftvD87R1nmtGDBBmbzeUA=)
5: BAD49C82AA9611F098799D0CC4F9AE02.roa (hash: pM9Clvnn4qCGji2jYA6fF0liiqMDQEIYWKiiYCa6P/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13686 (0x3576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Validity
Not Before: Mar 2 01:52:47 2026 GMT
Not After : Mar 9 01:52:47 2026 GMT
Subject: CN=69a4ed6f-d3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:94:00:6d:6e:7a:24:7a:f1:ea:56:62:cb:
11:78:c4:63:c0:0d:3e:dc:5b:7f:30:6c:8c:dc:bd:
ea:45:26:15:0b:15:6c:cf:92:88:99:0f:2a:4a:41:
12:67:0f:95:c3:24:e6:7f:24:13:ec:cd:af:db:a2:
da:73:35:e9:92:f5:cb:3e:67:ec:94:e4:15:52:1b:
38:fd:06:15:fd:7b:3e:43:33:c3:b9:ad:ff:0f:2e:
21:5e:5b:53:43:d5:d3:2d:2e:c1:f5:04:cc:68:74:
95:ec:f1:af:d4:30:63:ec:43:f5:c4:db:ea:f4:ec:
8e:43:a2:3a:54:66:f5:89:b7:86:56:4a:dd:0e:65:
26:39:20:f3:f4:e2:d2:6c:5f:45:9c:15:a3:cb:35:
0b:eb:82:44:2c:34:c8:e8:d8:9e:cb:f3:1a:26:40:
df:cc:e7:1d:63:72:d7:a4:35:0e:3e:38:97:c9:53:
34:d4:67:15:8c:1f:df:98:8a:ff:a0:ca:b0:92:3b:
24:76:45:5c:0a:02:a1:ec:fa:4f:ef:a6:f0:8a:0f:
ff:73:dd:ff:02:90:5e:df:9d:87:03:0b:d5:a2:f4:
c8:de:e1:ea:70:96:fe:49:d4:68:46:c2:79:8a:b8:
d5:25:3f:8f:66:9d:1b:59:ee:95:fe:2f:6b:21:c5:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7F:8C:F0:F7:BF:33:DB:3E:51:6C:20:8C:65:06:76:B6:73:C1:04
X509v3 Authority Key Identifier:
keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:32:c4:ae:d5:2c:8f:2f:83:df:2a:7e:34:a8:72:8b:e8:1d:
d9:f9:75:c4:66:ea:16:98:21:81:94:2e:a5:38:27:69:70:ca:
3f:ed:c8:64:6a:d7:d7:29:83:f5:03:c5:4c:d3:d5:d8:b6:3d:
a3:6e:e9:d8:25:12:60:e8:27:73:a8:21:a5:9d:0d:31:fe:b8:
df:3b:a6:42:d7:2c:3b:7a:11:32:cf:a2:b0:3f:d6:b8:95:4d:
b0:93:a2:bb:93:fb:a5:83:ef:db:5c:9e:65:30:84:61:ec:e0:
55:e3:a6:77:b2:c7:ab:e7:7c:f7:3b:bc:1e:97:94:1b:9d:7d:
d5:c0:d0:ef:36:20:fd:9a:85:14:c1:bd:4d:43:93:90:6f:ad:
92:22:b9:33:88:8e:6a:4f:ca:9f:ea:c9:74:e7:fa:d7:fe:c9:
40:f3:2e:98:f1:c8:ab:60:ff:f2:d4:c5:47:44:57:61:84:b7:
54:27:b0:a9:4c:83:c5:bd:35:bf:5a:b6:2c:75:1b:7a:c0:7b:
92:8f:60:c4:b0:c2:00:0c:c7:a0:05:53:a1:e8:cb:d8:f7:ae:
47:4a:c5:29:74:9d:94:19:9c:40:bb:60:5c:97:dc:0f:db:bd:
be:cd:80:f6:19:69:09:9c:32:10:74:0d:3a:bd:02:28:99:c7:
e0:5b:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:59 2026 by rpki-client