
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
File: YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json)
Hash identifier: BcuEHBfI8Ddae4SV05BO9a/JQFHCEfKJgFRcYAY13sE=
Subject key identifier: 38:5F:8D:13:17:72:92:88:85:3C:3C:26:EA:2A:21:70:FD:6E:5D:92
Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Certificate serial: 04CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
Manifest number: 04C4
Signing time: Mon 02 Mar 2026 01:30:06 +0000
Manifest this update: Mon 02 Mar 2026 01:30:03 +0000
Manifest next update: Mon 09 Mar 2026 01:30:03 +0000
Files and hashes: 1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: BL/8Zu3nbxmNXnzY8I6BFUj6yrKdgW4rVBMBRIeAKO0=)
2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: QGxKWKuwU4koWUT3cHCTo7iWv57eqY9PU0NUcULxizU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1229 (0x4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Validity
Not Before: Mar 2 01:30:03 2026 GMT
Not After : Mar 9 01:30:03 2026 GMT
Subject: CN=69a4e81d-468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:ca:31:fe:18:27:22:eb:4e:5d:73:21:05:
1a:96:d0:e6:04:1e:7d:98:bc:77:c9:1e:6e:27:27:
9f:b4:82:26:40:d3:ad:ee:e6:8c:50:e1:1a:b0:fc:
7e:37:3d:c5:71:04:a2:ec:d2:72:8a:8a:d0:25:d2:
ee:e3:51:39:18:3d:5f:a4:48:df:ba:7d:99:fb:be:
f8:18:91:73:95:08:2b:ea:16:63:f3:54:46:6f:fc:
fb:12:0a:cd:cd:1b:9b:c3:e8:bc:1c:fe:c1:b5:d5:
6c:16:f8:dd:65:da:8a:6e:b5:0c:fd:80:5e:be:4f:
60:f1:37:43:61:c0:c4:43:2c:b9:d9:93:eb:2a:66:
39:b3:9e:33:56:fc:9c:9b:eb:bb:77:3c:87:ed:74:
3f:8e:cc:e1:c0:f4:56:45:d9:5f:d5:1b:61:1d:34:
eb:89:e1:46:51:6d:d9:2f:d7:c6:18:a4:9d:df:e7:
d0:9b:8f:a9:78:e2:8c:75:a9:01:2a:5f:2b:e1:d9:
82:ae:1c:1d:5f:64:f7:d3:1e:0e:a7:5e:3b:f5:41:
18:88:70:83:82:6f:f0:4a:21:5b:28:a0:31:ce:8e:
d6:89:69:08:b2:1b:1c:69:99:74:a6:e3:c7:a4:4e:
f8:e9:56:2b:dd:12:74:b7:62:e1:72:78:2d:06:cb:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:8D:13:17:72:92:88:85:3C:3C:26:EA:2A:21:70:FD:6E:5D:92
X509v3 Authority Key Identifier:
keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c0:a7:09:25:2c:bc:d4:f9:f4:d1:31:93:70:4c:63:23:7e:
f3:f6:f1:99:bb:8d:d1:32:c7:c9:d5:7d:69:8c:9e:27:98:ac:
0f:7c:57:ea:9c:52:cf:ed:a0:2d:a5:c7:49:77:5a:62:36:ed:
64:a3:33:4c:7f:3a:95:0f:51:5b:57:5a:fc:bd:39:64:2e:41:
07:f1:8d:31:c7:54:20:96:c3:c0:f0:df:d6:bd:10:00:7c:10:
7b:55:1b:51:c1:41:a5:ae:74:09:fc:f8:67:84:28:8c:ae:69:
a7:3d:01:dd:f9:29:f6:09:c2:44:e9:32:d3:3c:c1:71:08:30:
34:3c:2c:f1:1c:99:f3:c5:38:f8:b5:04:ac:5a:52:48:4f:20:
ea:df:5f:46:04:7f:41:fd:59:ed:d0:6c:69:6a:9b:07:bf:b8:
d9:94:c0:25:38:2d:e0:4b:c1:e5:14:61:c3:0e:26:5c:1d:00:
8b:bc:ae:80:df:fe:96:4b:07:4d:46:40:69:f3:4b:35:a2:dc:
d7:b7:e1:27:26:69:dd:26:28:cc:69:c0:d4:ac:12:86:f7:56:
e3:cf:5d:29:b9:64:7b:c8:86:47:d1:6b:76:da:be:92:3a:ba:
b7:e7:78:10:67:16:e8:d0:0e:2e:24:31:53:7c:5c:36:f5:ea:
12:19:59:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhENjIxMTAvBgNVBAUTKDYyMUI4MUMxMDlFNUFBNzhEODI5RjMwQTU3REEzNTMz
MDgyNTRGNjkwHhcNMjYwMzAyMDEzMDAzWhcNMjYwMzA5MDEzMDAzWjAYMRYwFAYD
VQQDEw02OWE0ZTgxZC00NjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4frKMf4YJyLrTl1zIQUaltDmBB59mLx3yR5uJyeftIImQNOt7uaMUOEasPx+
Nz3FcQSi7NJyiorQJdLu41E5GD1fpEjfun2Z+774GJFzlQgr6hZj81RGb/z7EgrN
zRubw+i8HP7BtdVsFvjdZdqKbrUM/YBevk9g8TdDYcDEQyy52ZPrKmY5s54zVvyc
m+u7dzyH7XQ/jszhwPRWRdlf1RthHTTrieFGUW3ZL9fGGKSd3+fQm4+peOKMdakB
Kl8r4dmCrhwdX2T30x4Op1479UEYiHCDgm/wSiFbKKAxzo7WiWkIshscaZl0puPH
pE746VYr3RJ0t2LhcngtBssabwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhfjRMX
cpKIhTw8JuoqIXD9bl2SMB8GA1UdIwQYMBaAFGIbgcEJ5ap42CnzClfaNTMIJU9p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEQ2Mi9CQ0I0MEE1ODVG
Q0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFuallLZk1LVjlvMU13Z2xU
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lodUJ3UW5scW5qWUtmTUtWOW8xTXdnbFQyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEQ2Mi9CQ0I0MEE1ODVGQ0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFu
allLZk1LVjlvMU13Z2xUMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAosCnCSUsvNT59NExk3BMYyN+8/bxmbuN0TLHydV9aYyeJ5isD3xX6pxSz+2g
LaXHSXdaYjbtZKMzTH86lQ9RW1da/L05ZC5BB/GNMcdUIJbDwPDf1r0QAHwQe1Ub
UcFBpa50Cfz4Z4QojK5ppz0B3fkp9gnCROky0zzBcQgwNDws8RyZ88U4+LUErFpS
SE8g6t9fRgR/Qf1Z7dBsaWqbB7+42ZTAJTgt4EvB5RRhww4mXB0Ai7yugN/+lksH
TUZAafNLNaLc17fhJyZp3SYozGnA1KwShvdW489dKblke8iGR9Frdtq+kjq6t+d4
EGcW6NAOLiQxU3xcNvXqEhlZ4A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:19 2026 by rpki-client