
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier: b+l04KlKgDf7HN3QJ40RCVLOU/3hTPoLUjTZk3wbpCg=
Subject key identifier: E5:ED:E9:1C:CD:AF:A4:DC:60:D1:4C:00:F5:94:C9:88:68:7F:C1:8C
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial: 1021
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number: 100B
Signing time: Thu 16 Apr 2026 17:23:21 +0000
Manifest this update: Thu 16 Apr 2026 17:23:21 +0000
Manifest next update: Thu 23 Apr 2026 17:23:21 +0000
Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: I0DonoNkt2VHFcVmpCUjHzAEohokvfvIxsZ1tZiXcCk=)
2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: b4RHmMbFBRWJFcnsmHpleiRHLLRNwyJ8lJiARBOoS8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4129 (0x1021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Validity
Not Before: Apr 16 17:23:21 2026 GMT
Not After : Apr 23 17:23:21 2026 GMT
Subject: CN=69e11b09-9db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:10:35:58:65:18:4d:e1:df:c3:ec:f3:5a:
2a:d3:78:de:ca:83:4c:6a:ab:43:99:56:61:a9:0a:
dd:a2:ec:6b:28:70:50:70:75:8c:0d:32:28:ae:6a:
08:b7:d9:90:cc:52:28:75:2b:56:0e:a1:71:db:b9:
bb:83:86:ea:08:ca:7a:6a:bc:c2:19:53:6e:82:95:
a1:29:54:30:3d:8b:f8:8b:6a:bd:98:8c:22:7d:99:
d4:7a:7a:56:e5:cc:43:a4:25:d5:b7:1b:da:7f:bb:
00:16:37:31:41:d9:de:87:24:4f:a8:5f:6a:b6:79:
e7:2c:ad:9f:ca:83:fb:f4:31:ec:b1:be:d1:15:de:
95:6e:09:12:27:1e:27:77:ae:0a:e0:98:e8:bd:f2:
8a:d5:51:8c:28:a2:96:03:c9:5c:3a:cc:7b:5b:fd:
2a:34:d2:a5:e8:31:70:90:2e:14:f7:db:bf:28:ed:
f9:8f:2b:14:17:a5:e1:3e:53:53:53:d2:e1:df:e0:
5c:d7:fe:a4:d7:30:88:15:58:3c:6f:99:88:ec:00:
83:e4:53:d2:72:36:71:a8:96:ec:07:0a:e4:c3:4d:
a5:35:53:70:fd:ff:da:c2:97:12:e2:1b:34:38:ec:
7b:f3:41:e5:0b:db:45:a5:35:00:cc:4e:3e:eb:7e:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:E9:1C:CD:AF:A4:DC:60:D1:4C:00:F5:94:C9:88:68:7F:C1:8C
X509v3 Authority Key Identifier:
keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:a6:2d:4c:da:04:52:32:16:4a:4a:90:ab:8a:85:3f:42:
ce:b7:48:55:5b:29:0f:b2:8e:93:ac:07:67:f0:ce:c1:4c:99:
76:15:60:41:73:7d:0d:7e:e5:5e:5c:47:52:fd:8e:2a:f8:a6:
ef:5c:61:56:f5:16:24:0c:e1:37:31:5f:a9:3e:ea:17:df:03:
79:9b:de:44:4a:35:4d:d6:eb:d6:5b:7c:bd:93:94:1e:11:b4:
60:3b:0d:3a:35:9d:b5:72:a5:be:b2:e1:d3:a9:c0:46:c4:bd:
5e:c4:2a:98:6e:db:a1:a1:36:f2:04:48:ba:a2:fa:a5:6b:b5:
96:07:8d:06:9b:97:fa:85:1f:6e:18:f2:c5:a6:bc:59:36:5e:
4b:ad:03:8c:8e:47:54:29:0e:06:23:56:62:07:ac:af:af:50:
ca:b0:3b:09:88:77:7d:79:eb:bc:f2:f3:0e:5f:7a:dc:bc:98:
b2:ed:1f:83:48:2a:23:a5:44:24:ef:23:9c:08:fd:80:f5:22:
5b:7f:45:3b:93:e7:e9:5d:ac:24:8c:44:15:40:3d:e0:b3:47:
2e:e8:c5:f3:bd:e3:20:36:33:f4:0d:ad:41:bb:cf:b9:8e:66:
c8:4e:a9:59:e1:a7:a4:bf:59:d8:0b:9e:5f:af:1b:8b:ea:9a:
16:59:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:46 2026 by rpki-client