
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json)
Hash identifier: 00Lfguwfu/l04qUJuxK47TJylSiDwo0pp2RsJASlMF8=
Subject key identifier: 1B:0C:EB:05:98:5F:C6:C7:E1:BD:A2:51:52:C0:10:A9:6B:65:9A:CE
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial: 04C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
Manifest number: 04B2
Signing time: Thu 16 Apr 2026 23:49:46 +0000
Manifest this update: Thu 16 Apr 2026 23:49:46 +0000
Manifest next update: Thu 23 Apr 2026 23:49:46 +0000
Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: iaGhJRM68MmhsPP1vLIyEU/TrJKU5aRqPZdUORZ8lik=)
2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NKpHZuQ/N0jLaQzAiOuAL4/fFnsnoJjcA6Dbue2XBI4=)
3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: P6yrox/YyLpm+oDoNWNTBLiNb1B32zelHzp9aiWiXkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Validity
Not Before: Apr 16 23:49:46 2026 GMT
Not After : Apr 23 23:49:46 2026 GMT
Subject: CN=69e1759a-d3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:a1:d0:f9:5e:1c:0f:a5:17:a7:e4:03:cb:
cf:57:05:94:07:6a:24:b4:30:f4:fd:5c:2b:7c:79:
84:3c:dc:2f:15:f6:5b:02:d5:b1:91:af:48:f9:36:
4d:b7:d8:b6:98:dd:1d:79:cb:fe:83:a1:fd:67:3d:
e9:a8:c7:3f:1d:66:26:56:d3:c5:a0:f7:31:ec:dd:
f0:90:47:ee:e3:95:01:94:35:8b:fc:60:0a:ca:f2:
e6:f0:f0:b2:b1:79:43:8e:f6:50:bd:f5:ca:8c:39:
9c:1c:c7:b1:16:d7:1a:e5:fb:37:e9:75:9b:a9:89:
5f:f0:2a:f3:93:cb:e6:6a:f7:52:05:71:5b:4a:18:
8d:a3:0f:ed:9e:62:e5:25:0d:ab:39:8e:6f:eb:da:
66:81:88:50:2f:fc:1f:4b:0d:d7:96:ac:13:af:57:
45:d2:2f:27:c5:7d:0e:7e:bd:97:2f:f1:56:50:07:
0d:70:ab:8b:90:0c:a1:12:b7:22:b1:38:54:8b:e9:
86:27:de:d1:ed:a8:29:ee:7e:82:be:2e:45:ad:11:
00:f0:ec:a2:6d:96:13:78:b0:8c:a5:f7:c9:1e:6e:
2a:b2:35:24:6b:11:63:43:34:d7:c4:31:5b:8e:fd:
86:81:bb:dc:34:1c:1c:7b:65:8b:38:8a:f2:73:41:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0C:EB:05:98:5F:C6:C7:E1:BD:A2:51:52:C0:10:A9:6B:65:9A:CE
X509v3 Authority Key Identifier:
keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:02:39:6d:bc:a6:93:f0:ae:0a:53:66:c8:cf:c3:e1:1c:43:
ef:5a:75:95:3c:d3:93:85:a4:57:30:e4:3f:ed:56:f2:9e:10:
5d:db:cb:ec:5c:a7:1f:b5:99:dc:70:1f:e1:f7:49:ad:7c:50:
17:65:80:4d:06:da:2b:77:80:54:47:9f:88:3f:15:1b:42:58:
d0:7f:b6:d2:bc:bd:a4:f8:58:1d:e1:cf:e9:db:be:88:34:2c:
97:8a:96:6e:70:52:7e:8e:65:73:01:d9:a2:7e:4e:e5:ff:88:
bd:8b:b5:16:39:8a:f5:fc:2a:68:1e:3b:9c:bf:89:7b:d6:df:
83:7a:73:49:06:11:37:7f:b6:55:e6:67:19:3c:ed:d5:42:3e:
d6:5c:ea:0f:83:7a:06:2d:64:06:85:f6:15:68:cb:61:60:12:
60:f6:20:9a:43:c1:c9:87:09:52:37:c4:80:83:08:30:fa:a7:
21:33:ba:24:36:a9:5e:3b:f6:fd:3a:da:fe:9a:83:32:9d:54:
65:58:95:df:0f:50:63:df:82:b6:e8:1e:91:cc:54:ff:2f:78:
48:e3:31:aa:60:d0:40:d9:75:c9:b8:3a:86:ac:5f:39:34:e9:
61:31:e2:c1:54:04:21:da:19:bf:8e:e5:44:1e:b9:a1:c8:b7:
51:5d:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:11 2026 by rpki-client