
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File: yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier: ptemDKKFpwPlXVFJ4yhhPAgvgtnTWyGBi2OfyzgRMfQ=
Subject key identifier: 5E:79:21:26:7B:2C:EA:72:F9:E0:77:74:CA:97:67:FE:CF:F0:1F:91
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer: /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial: 0C90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number: 0C84
Signing time: Mon 02 Mar 2026 00:51:27 +0000
Manifest this update: Mon 02 Mar 2026 00:51:25 +0000
Manifest next update: Mon 09 Mar 2026 00:51:25 +0000
Files and hashes: 1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: HN1R0vsX5LZV2Jd1M7HD1f8MxEPzPHn9+/hoC9xMXws=)
2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: k4o/xpl05MWpxfINsWsD9ge7BlRuKXGB+2xC5Rxqzp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3216 (0xc90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Validity
Not Before: Mar 2 00:51:25 2026 GMT
Not After : Mar 9 00:51:25 2026 GMT
Subject: CN=69a4df0e-c332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:88:3e:e3:40:72:35:be:d4:9a:6a:c8:cf:ef:
39:5d:9e:f1:b8:1c:ca:ca:55:9f:b0:52:bb:96:f8:
69:90:07:77:52:ac:6d:86:b7:16:b8:f0:b5:2c:0d:
82:d8:52:df:52:24:67:ed:d8:b2:4c:36:2b:c9:1d:
eb:42:fb:3d:cf:4c:74:3f:a7:be:1d:7d:6f:44:6d:
bb:f1:f7:83:5a:d8:12:f0:57:07:3b:bb:b6:8d:a2:
56:be:ec:28:38:92:46:97:c3:54:cd:1f:fe:97:1b:
37:35:92:10:a4:96:43:c1:01:5d:a6:36:53:99:51:
9a:12:3f:f3:72:38:42:87:d8:63:9d:b5:3d:98:7e:
d3:9b:fb:18:cd:fd:87:05:d7:eb:d9:2b:ca:44:60:
af:4f:6d:81:83:4b:74:02:03:21:8f:92:5f:db:8e:
d1:e1:fb:6a:75:26:a1:df:47:2d:0e:42:b1:1a:e7:
27:41:6c:b9:8b:06:f8:69:19:1f:d7:87:ce:9b:bb:
7e:43:0b:df:40:31:93:77:11:8a:6e:1f:81:05:fc:
fb:f8:fb:12:97:df:20:7c:06:29:28:7a:4b:cb:06:
ed:41:7f:00:93:32:a0:b6:80:fb:5e:e5:83:49:3a:
9d:7d:59:ec:5b:2a:a5:13:7b:d8:68:82:be:0d:c1:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:79:21:26:7B:2C:EA:72:F9:E0:77:74:CA:97:67:FE:CF:F0:1F:91
X509v3 Authority Key Identifier:
keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f7:2e:7a:44:91:27:12:93:55:08:ae:b4:6c:49:c9:5b:46:
74:d6:d1:c8:26:42:5f:90:4b:20:9b:1b:0e:0d:28:65:48:ad:
c9:20:2a:0d:c6:a7:4f:06:78:95:af:7a:b4:61:db:c0:b7:a2:
79:3f:8a:25:ad:42:c6:fc:40:a2:12:a0:fd:93:5e:f5:f3:d8:
27:92:76:34:fa:24:20:e6:39:88:7c:e8:79:7f:a4:9a:dd:ad:
63:4b:fb:38:36:3c:28:31:76:6b:5c:5e:a5:b9:65:21:0a:fe:
bf:5e:db:e6:cd:2d:ae:65:09:e5:35:1a:4e:03:67:55:1f:57:
df:5e:ba:9b:67:c3:d9:0c:9f:98:c0:75:49:1a:3b:5b:5e:6e:
1d:89:71:10:7e:3a:4c:60:fe:7d:68:f9:ce:97:6a:57:e1:aa:
2f:01:38:46:38:36:c6:61:1c:aa:33:1c:c1:aa:11:b8:50:9a:
e8:1d:bc:b4:e0:38:ad:d6:33:e0:33:16:d0:9d:a0:2f:40:ca:
be:a8:d0:4e:86:9b:a9:d5:22:d7:38:e0:13:66:6b:f1:66:2c:
b0:34:51:de:9a:92:c0:b4:ad:aa:7c:4e:c3:c9:20:96:35:ce:
c1:85:35:dc:59:8b:76:07:aa:ef:49:92:cf:76:b8:45:c6:de:
68:d2:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:00 2026 by rpki-client