
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json)
Hash identifier: wdQ2VrLHQQ8HK+1po1e5OFworeoliNh/XEMZwcX07NE=
Subject key identifier: 80:8D:51:01:76:BE:BB:FC:49:6F:B3:40:D7:C6:FD:A1:81:1E:15:BB
Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89
Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
Manifest number: 88
Signing time: Sun 01 Mar 2026 08:54:50 +0000
Manifest this update: Sun 01 Mar 2026 08:54:49 +0000
Manifest next update: Sun 08 Mar 2026 08:54:49 +0000
Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: gySh/Nt6tpdV+NfYmUE5hbdUxh3Aq1OETq8Gq30+2o8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl
rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689
Validity
Not Before: Mar 1 08:54:49 2026 GMT
Not After : Mar 8 08:54:49 2026 GMT
Subject: CN=69a3feda-2179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:57:b7:3a:81:42:c7:c7:f4:44:b2:0c:29:
87:df:14:65:f1:d2:4f:66:b6:56:e6:9b:58:ab:4b:
06:bf:63:fc:dc:34:49:00:83:09:e6:6c:16:13:94:
74:67:86:3c:8a:90:9a:b6:0a:c7:a2:4e:3d:7d:ea:
c4:3e:32:86:32:3c:44:19:4d:75:0b:6d:24:ea:90:
23:d8:bb:46:14:a1:2e:36:9b:4e:ee:11:5d:1e:c7:
08:30:a5:53:4d:d6:f5:23:9a:c2:4b:86:3f:44:04:
13:3e:91:e5:08:be:67:d5:c5:ca:55:00:41:f3:b3:
f7:9c:37:6a:ed:c1:77:c4:6c:7d:fb:56:ca:34:1b:
27:bb:78:29:72:cd:f0:fb:4d:1e:52:b6:fb:7b:64:
92:77:03:3b:e6:db:c1:32:c2:d4:25:bd:f4:9e:5f:
f5:7c:17:e4:b4:ee:b8:0c:c4:2d:c2:38:36:e1:02:
94:70:f5:43:c0:8d:eb:4e:a1:a5:7b:74:76:e8:98:
ab:34:eb:43:79:a1:38:76:e3:6b:92:8f:82:64:ed:
c4:54:36:c7:8d:5b:c7:36:07:bb:01:52:35:ce:45:
52:8e:5a:2b:5f:31:3f:03:a8:21:19:2d:1b:50:d9:
14:f9:be:81:8b:1d:1a:95:2a:1f:2a:c7:f4:52:4d:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8D:51:01:76:BE:BB:FC:49:6F:B3:40:D7:C6:FD:A1:81:1E:15:BB
X509v3 Authority Key Identifier:
keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:9a:00:20:42:95:92:cb:61:ad:3a:64:92:73:40:05:8d:46:
13:2c:13:e8:f4:f8:b4:4d:4c:5d:1f:32:33:a2:3c:29:fb:87:
44:86:da:6f:57:6d:c7:47:a6:11:6f:ad:17:15:3b:77:ab:fc:
e2:d4:d6:c2:d8:a4:c3:e8:8e:5d:31:7c:c3:64:6f:c4:fd:25:
af:4d:32:ac:b1:7f:25:6d:07:9c:91:c4:07:74:41:da:20:ae:
74:eb:b0:55:c5:d5:b9:75:d1:f3:5e:2b:ca:76:0b:51:fb:be:
c0:42:30:87:c2:05:5b:02:71:9e:9e:9b:e0:61:86:23:23:57:
53:71:33:81:8d:e4:73:2d:9e:f3:ad:7d:d1:33:0a:46:a5:fc:
cf:e4:50:f3:23:9a:25:8a:b0:b9:a6:0d:9b:cc:12:fa:36:4b:
b2:b4:49:3b:cc:8f:61:61:da:dd:16:80:57:c6:a6:f7:64:f4:
07:8e:29:c8:6c:0a:70:b7:66:7b:cb:5e:13:80:12:83:5b:b5:
29:0a:6b:57:dd:38:9d:c6:86:ad:65:9b:46:e6:01:46:90:0e:
f0:71:57:32:54:e4:68:16:e6:bf:df:94:53:73:81:9f:e9:9c:
d3:26:b6:30:0f:67:35:2a:90:f5:59:b4:16:c0:b1:bb:c5:7f:
79:71:ab:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZFNTUxMTAvBgNVBAUTKDYxRjcyQjVFOTNFNzkzNURENzlFMDQzNUM4MThGOEY5
QTcxMEY2ODkwHhcNMjYwMzAxMDg1NDQ5WhcNMjYwMzA4MDg1NDQ5WjAYMRYwFAYD
VQQDEw02OWEzZmVkYS0yMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqgRXtzqBQsfH9ESyDCmH3xRl8dJPZrZW5ptYq0sGv2P83DRJAIMJ5mwWE5R0
Z4Y8ipCatgrHok49ferEPjKGMjxEGU11C20k6pAj2LtGFKEuNptO7hFdHscIMKVT
Tdb1I5rCS4Y/RAQTPpHlCL5n1cXKVQBB87P3nDdq7cF3xGx9+1bKNBsnu3gpcs3w
+00eUrb7e2SSdwM75tvBMsLUJb30nl/1fBfktO64DMQtwjg24QKUcPVDwI3rTqGl
e3R26JirNOtDeaE4duNrko+CZO3EVDbHjVvHNge7AVI1zkVSjlorXzE/A6ghGS0b
UNkU+b6Bix0alSofKsf0Uk1OgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFICNUQF2
vrv8SW+zQNfG/aGBHhW7MB8GA1UdIwQYMBaAFGH3K16T55Nd154ENcgY+PmnEPaJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkU1NS8yRDQ1NzgwMDQ3
M0IxMUYwODMzNkY3NUNDNEY5QUUwMi9ZZmNyWHBQbmsxM1huZ1ExeUJqNC1hY1E5
b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlvay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkU1NS8yRDQ1NzgwMDQ3M0IxMUYwODMzNkY3NUNDNEY5QUUwMi9ZZmNyWHBQbmsx
M1huZ1ExeUJqNC1hY1E5b2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOJoAIEKVksthrTpkknNABY1GEywT6PT4tE1MXR8yM6I8KfuHRIbab1dtx0em
EW+tFxU7d6v84tTWwtikw+iOXTF8w2RvxP0lr00yrLF/JW0HnJHEB3RB2iCudOuw
VcXVuXXR814rynYLUfu+wEIwh8IFWwJxnp6b4GGGIyNXU3EzgY3kcy2e86190TMK
RqX8z+RQ8yOaJYqwuaYNm8wS+jZLsrRJO8yPYWHa3RaAV8am92T0B44pyGwKcLdm
e8teE4ASg1u1KQprV904ncaGrWWbRuYBRpAO8HFXMlTkaBbmv9+UU3OBn+mc0ya2
MA9nNSqQ9Vm0FsCxu8V/eXGrsw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:04 2026 by rpki-client