
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
File: YNExg9Od5pVlYCMefgMX5py8bA8.mft (raw, json)
Hash identifier: 3jrYfL9IYRRdCl4q7hu7e/2X6WezOTHgtpLzxT6G9l4=
Subject key identifier: 0A:B9:DD:AB:6C:53:F3:CB:85:27:A5:79:42:CE:12:4C:CF:78:60:F7
Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Certificate serial: 1162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
Manifest number: 1151
Signing time: Sat 28 Feb 2026 17:19:28 +0000
Manifest this update: Sat 28 Feb 2026 17:19:27 +0000
Manifest next update: Sat 07 Mar 2026 17:19:27 +0000
Files and hashes: 1: YNExg9Od5pVlYCMefgMX5py8bA8.crl (hash: 02zBjsk3+ZT63J7IgsrRRoAqqRsLSLnZLJLDXgxT1dw=)
2: BA310DEC23B611E98E5E6062C4F9AE02.roa (hash: Z2LA9kyLWJ5DSZqXR4GtE8WTNPkiU6v9mRONlsKS1tk=)
3: 1F8D757623B811E9971D8168C4F9AE02.roa (hash: teyprXUhhu0eQN/HT8J3s42u5imFw2AiXDxoE1lRwMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl
rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4450 (0x1162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131D31, serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Validity
Not Before: Feb 28 17:19:27 2026 GMT
Not After : Mar 7 17:19:27 2026 GMT
Subject: CN=69a323a0-859d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:fe:fe:c2:6a:90:33:d2:4c:ec:ea:d2:0a:
5f:32:c0:20:81:1b:c9:5b:fb:03:51:20:c1:3f:f4:
74:bc:f8:52:7a:99:c6:68:e8:b0:a6:6b:a8:00:6e:
6e:7b:88:e1:ee:71:b1:40:d4:84:87:92:e0:f4:d1:
d3:2f:8b:71:d4:3e:91:e9:a7:a0:9c:fb:ec:10:ec:
ae:c6:4f:ab:99:31:56:f5:b5:2f:3f:1e:9a:34:52:
df:88:54:9e:bc:50:cd:a0:23:ab:45:10:f9:be:b1:
a9:c9:d4:fb:48:5e:48:a0:dc:d2:be:29:16:5f:d8:
3c:2b:7b:8a:d2:cd:fe:10:88:96:94:9e:2c:41:2a:
fd:13:bd:23:82:67:ac:b6:a7:f1:5a:ed:a4:44:06:
03:2c:11:e2:d8:62:5d:96:a5:fd:b9:95:b6:52:ea:
22:5d:a7:ce:ac:00:8a:01:3f:c4:c2:56:c9:11:c6:
05:4a:51:64:f7:19:ee:31:e8:0b:97:41:0c:7a:22:
11:14:11:cb:67:f7:20:95:a5:c5:c7:e4:73:97:b8:
6c:ff:5c:b2:a4:e5:2a:f5:ea:29:43:66:3e:a1:bd:
e4:cc:f8:01:86:37:fe:88:96:3a:94:cf:99:c6:ae:
b4:af:43:be:fb:2e:5d:13:42:0b:02:67:8f:a8:aa:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B9:DD:AB:6C:53:F3:CB:85:27:A5:79:42:CE:12:4C:CF:78:60:F7
X509v3 Authority Key Identifier:
keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a7:27:87:c8:f3:15:bd:ce:4a:34:67:78:88:73:bd:a0:35:
78:f4:1f:78:bb:fa:86:86:a2:d2:c5:2e:25:e6:98:1c:b7:a0:
5f:d3:fd:a8:32:21:6f:b1:5d:20:b9:ce:b5:fa:43:34:f1:8c:
7c:e4:96:c7:58:15:89:4f:e5:3e:24:b3:b1:55:83:10:83:6a:
e7:a7:dd:de:69:95:c1:da:41:31:d3:95:d7:1d:2c:4a:bf:30:
5f:c0:a6:b5:51:6d:bd:78:37:7b:96:f5:15:ed:43:6c:ad:37:
f4:a3:58:0a:f9:44:2f:0b:67:46:52:b8:fc:50:e5:f2:cd:e7:
ae:35:1d:ea:82:be:e0:67:a6:9b:2f:48:60:2d:a5:f4:57:32:
f0:3c:18:ff:90:3c:a7:1f:33:f5:83:2f:0f:e9:55:38:3f:b2:
4b:81:c1:a2:24:5f:59:d8:c2:5e:68:57:da:da:1a:e9:22:fc:
46:ac:33:a6:ac:d6:ef:3b:5b:7f:ea:50:51:b2:a6:6b:37:67:
94:c1:04:07:b0:37:35:8d:f0:94:6e:b2:98:52:bd:5b:31:47:
7b:8e:cd:13:27:5a:e6:06:91:2a:71:6d:1d:fa:fb:8b:88:55:
4a:ec:b1:82:86:cf:53:52:c2:77:a6:d7:50:77:c9:ea:24:7c:
f9:81:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:46 2026 by rpki-client