
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File: YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier: 72r9/4OSwUaNvpTCO8Lvn3qmTKkJNr8TLrRWhUyEfJI=
Subject key identifier: 6B:B1:2D:59:67:00:9A:9A:14:06:82:F0:C1:06:F2:DA:09:64:4C:3F
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer: /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial: 03E9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number: 03E1
Signing time: Mon 02 Mar 2026 02:57:51 +0000
Manifest this update: Mon 02 Mar 2026 02:57:48 +0000
Manifest next update: Mon 09 Mar 2026 02:57:48 +0000
Files and hashes: 1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: EFPWz2d4nrB8+QyEV7EACW/NPvHcyTz9SDF6Ugt9V5w=)
2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: s9x9gIirWntlK8Owx596ebxdwlOGog5ZPg7HYcpO694=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1001 (0x3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Validity
Not Before: Mar 2 02:57:48 2026 GMT
Not After : Mar 9 02:57:48 2026 GMT
Subject: CN=69a4fcae-cb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:06:fb:b5:5d:fd:45:98:8a:90:63:7e:6d:
db:89:b9:2b:51:13:73:8d:9b:1c:32:24:49:f4:50:
4c:1f:bf:e7:15:ad:eb:b8:73:68:1d:51:4c:3b:28:
62:a3:e6:2f:36:8d:61:1c:bb:d9:34:f3:98:a7:ee:
b3:53:1c:f2:f5:62:ca:45:13:32:11:c7:27:9a:04:
13:05:a1:6d:6d:88:b7:ee:d9:63:1e:ae:c8:0f:2e:
24:e6:0d:e3:7f:e9:4f:97:c9:60:31:e4:1f:39:bc:
91:3e:34:81:c5:94:9d:a0:6f:82:8e:e2:c3:42:64:
87:ac:bc:35:e6:ac:07:f0:d7:39:73:55:f5:2e:38:
3d:84:d9:ac:0b:88:ea:4e:29:db:27:d4:1f:55:9a:
8f:1b:cd:7a:a3:ca:00:03:76:45:52:f8:36:52:22:
9d:9b:d7:0c:01:f2:b3:e4:23:a9:52:20:e9:b8:8c:
e2:11:d7:16:44:51:5b:05:85:0b:94:60:c9:9e:2e:
b8:e2:06:10:32:da:88:c1:80:6c:ec:38:bd:3c:e5:
f1:a5:9e:8f:ec:82:36:3a:37:4d:61:d4:39:00:fa:
80:8d:63:85:72:b8:9f:88:03:f1:31:84:88:bd:13:
0b:d3:37:ec:c5:1f:28:13:95:1d:3e:2f:6a:5f:52:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B1:2D:59:67:00:9A:9A:14:06:82:F0:C1:06:F2:DA:09:64:4C:3F
X509v3 Authority Key Identifier:
keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7e:89:02:9c:b5:17:23:95:f1:a2:2d:63:cd:cc:51:b7:a8:
22:36:b2:a1:ef:23:4a:55:b0:d5:79:70:ee:54:17:32:47:7f:
dd:4a:2c:d4:b0:c0:26:52:c1:76:5e:6a:59:9b:10:74:f4:e8:
3a:f7:3d:9b:c2:d8:3c:61:5a:26:e5:40:02:ab:91:77:4e:75:
5c:12:97:f7:82:d7:f2:10:f1:93:c6:99:b1:14:e0:24:49:49:
1c:14:17:b6:db:e9:e7:b5:6c:13:35:b0:b5:a6:db:7a:af:c5:
e8:ca:74:e6:15:b7:4b:19:58:9b:60:23:68:dc:37:37:f8:00:
d0:af:69:62:d9:27:36:13:ba:aa:c9:1e:c2:38:e1:89:04:28:
fe:6c:b7:4d:41:3e:31:d6:01:ec:b7:40:3b:c6:a4:fa:60:10:
56:f3:76:21:76:c8:d5:b0:ce:63:f3:39:cc:19:4f:84:3e:1f:
bb:9d:59:05:f8:5c:dd:6c:f6:11:34:84:a6:ea:2e:06:02:2f:
bf:3f:a9:ca:04:65:e7:9d:5e:79:59:bf:55:8e:40:34:8e:e2:
da:37:34:b3:21:4b:a1:57:89:a6:21:70:35:4f:d8:7d:55:2b:
60:3c:b8:04:36:d1:8c:aa:35:21:f9:5b:7e:08:c4:f4:34:91:
ef:41:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:41 2026 by rpki-client