
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json)
Hash identifier: VO4oh8goroLFS6zr1bbewaHFnfV+QLtmg7Fv1pI1sXI=
Subject key identifier: CC:C8:D5:2D:B8:D6:A4:FA:13:27:A6:60:9D:73:06:85:24:72:E4:B0
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial: 04AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
Manifest number: 049A
Signing time: Mon 02 Mar 2026 00:38:59 +0000
Manifest this update: Mon 02 Mar 2026 00:38:57 +0000
Manifest next update: Mon 09 Mar 2026 00:38:57 +0000
Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: /dJLZEqimgxo878zVJmoDGIdZUYL0kkGw3Q8pY/mdPQ=)
2: 204CB89672C011EC809A5933C4F9AE02.roa (hash: P6yrox/YyLpm+oDoNWNTBLiNb1B32zelHzp9aiWiXkk=)
3: E4804004737211EC866EAC24C4F9AE02.roa (hash: NKpHZuQ/N0jLaQzAiOuAL4/fFnsnoJjcA6Dbue2XBI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Validity
Not Before: Mar 2 00:38:57 2026 GMT
Not After : Mar 9 00:38:57 2026 GMT
Subject: CN=69a4dc23-ae16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:20:87:90:3d:ff:76:d3:53:97:a8:61:8a:
57:05:0b:18:0e:36:57:11:5e:9e:3d:b4:2c:52:37:
a5:dd:65:89:5f:b7:55:89:83:fa:6c:37:3c:fa:8d:
f0:df:cf:04:e7:ff:34:2d:87:7c:8b:fa:d6:95:ab:
20:41:5c:fc:94:03:db:55:ee:39:17:b6:0a:b9:98:
fb:73:2c:70:1f:91:ac:12:53:4b:1c:f9:23:af:e5:
5e:ad:2a:71:e4:1c:75:ac:b8:da:26:22:e5:9a:a7:
ac:0e:ad:4c:dd:73:58:2a:ca:2f:5e:ec:f5:87:39:
7b:61:9f:72:26:a1:80:5b:a1:84:c1:65:bd:a6:7c:
74:e2:9f:1f:84:78:3b:a7:42:b5:4b:fe:58:20:fb:
20:1b:40:7e:09:5f:44:97:21:81:64:ec:15:aa:a4:
77:de:c4:2d:22:62:e5:d6:a0:e2:ac:ed:cc:57:e2:
be:45:51:35:d1:6f:64:55:b8:b9:2c:c6:7c:05:6c:
1d:49:98:92:2b:dc:27:3c:f5:7d:7d:64:8b:29:0c:
89:f4:b4:81:4a:39:a5:3d:23:9f:b5:04:48:19:18:
1b:31:14:76:9e:c5:1f:3f:bc:5c:11:91:04:de:f6:
a9:ec:61:d6:44:d6:1e:9f:5a:b0:41:f0:ee:90:db:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C8:D5:2D:B8:D6:A4:FA:13:27:A6:60:9D:73:06:85:24:72:E4:B0
X509v3 Authority Key Identifier:
keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:19:01:3b:b1:e0:89:ea:d1:60:58:ed:f5:ef:90:0e:31:f3:
77:a2:85:12:d2:e3:4a:72:2e:5b:5c:15:5e:e3:69:33:2c:37:
7a:ab:12:14:a5:f6:22:70:0a:21:a2:4d:e0:2a:ad:19:4f:e5:
f0:90:9a:89:1a:21:3f:83:54:61:7b:4f:64:cb:00:06:d3:a7:
02:65:79:2f:5d:f3:cf:03:98:30:db:72:85:21:cd:5e:41:4e:
d4:f4:64:5d:de:8d:cb:1c:d1:eb:7e:af:46:6d:6a:49:60:2a:
e2:ad:d2:42:56:9b:df:2d:99:eb:13:2f:2a:0b:a6:c6:77:6e:
e7:5c:7a:ba:47:4d:a6:d5:4e:ba:bf:b3:1f:69:ef:05:40:0d:
36:45:50:36:e2:c0:2d:6f:c9:c7:d9:1c:cd:f8:bb:60:7f:31:
ac:4d:f1:5c:48:3a:9c:b4:49:58:6d:dd:38:72:15:a8:15:9f:
bc:d2:49:76:6f:5a:09:a2:90:22:13:b5:fa:1e:93:62:e7:4e:
8c:26:df:85:cc:9c:b2:26:0c:6a:8c:63:e1:d8:7e:eb:cb:d2:
0e:ae:bb:b5:09:9a:d8:d1:21:7d:0e:ab:df:b8:b6:8e:b8:d7:
e2:75:04:43:8f:63:ea:ae:fa:32:36:0e:44:63:08:ec:3e:71:
06:83:d0:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG
REZBNzI2MzQwHhcNMjYwMzAyMDAzODU3WhcNMjYwMzA5MDAzODU3WjAYMRYwFAYD
VQQDEw02OWE0ZGMyMy1hZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9Ygh5A9/3bTU5eoYYpXBQsYDjZXEV6ePbQsUjel3WWJX7dViYP6bDc8+o3w
388E5/80LYd8i/rWlasgQVz8lAPbVe45F7YKuZj7cyxwH5GsElNLHPkjr+VerSpx
5Bx1rLjaJiLlmqesDq1M3XNYKsovXuz1hzl7YZ9yJqGAW6GEwWW9pnx04p8fhHg7
p0K1S/5YIPsgG0B+CV9ElyGBZOwVqqR33sQtImLl1qDirO3MV+K+RVE10W9kVbi5
LMZ8BWwdSZiSK9wnPPV9fWSLKQyJ9LSBSjmlPSOftQRIGRgbMRR2nsUfP7xcEZEE
3vap7GHWRNYen1qwQfDukNvmNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzI1S24
1qT6EyemYJ1zBoUkcuSwMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy
QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ
SEFKZFJxT2haX3o5LW5KalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXRkBO7HgierRYFjt9e+QDjHzd6KFEtLjSnIuW1wVXuNpMyw3eqsSFKX2InAK
IaJN4CqtGU/l8JCaiRohP4NUYXtPZMsABtOnAmV5L13zzwOYMNtyhSHNXkFO1PRk
Xd6NyxzR636vRm1qSWAq4q3SQlab3y2Z6xMvKgumxndu51x6ukdNptVOur+zH2nv
BUANNkVQNuLALW/Jx9kczfi7YH8xrE3xXEg6nLRJWG3dOHIVqBWfvNJJdm9aCaKQ
IhO1+h6TYudOjCbfhcycsiYMaoxj4dh+68vSDq67tQma2NEhfQ6r37i2jrjX4nUE
Q49j6q76MjYORGMI7D5xBoPQng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:51 2026 by rpki-client