
$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json)
Hash identifier: 4cJIeabQx3BtJ9RC3Gj6WQQpwqZqu8XP/SF/ciBgI8Y=
Subject key identifier: EF:26:6E:BF:D5:CA:B8:84:ED:CB:7A:06:53:A6:6F:25:BD:79:02:26
Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
Manifest number: EE
Signing time: Fri 17 Apr 2026 06:10:05 +0000
Manifest this update: Fri 17 Apr 2026 06:10:04 +0000
Manifest next update: Fri 24 Apr 2026 06:10:04 +0000
Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: ZOYB6Xa3mNiE4u298mDSTNITwZFlCzZM9rfFLfKXAHw=)
2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: tvmpk8Ite7pSp5NKIoDYEAchnf/U0Ef+pNgJmhuXtZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Validity
Not Before: Apr 17 06:10:04 2026 GMT
Not After : Apr 24 06:10:04 2026 GMT
Subject: CN=69e1cebd-e8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:8c:af:83:7e:28:df:65:45:2a:cc:51:e5:
42:b0:f0:df:1a:95:a8:1f:48:aa:91:19:10:6e:b5:
0d:59:51:81:d0:5a:7d:92:93:a3:20:97:f0:54:32:
1c:c7:52:9f:92:03:94:d4:13:d3:47:35:a6:44:a4:
37:f9:61:0f:60:8f:75:86:1b:9c:a3:f6:2d:1a:82:
d2:c3:e3:25:d7:34:2a:6d:89:57:aa:c4:b4:a7:b0:
fd:d5:39:87:05:71:a6:55:77:02:06:27:eb:99:b9:
64:45:44:dd:fa:13:a7:2f:73:2b:14:a5:67:da:4f:
c4:a4:15:d8:47:5e:82:44:b9:63:2f:cc:69:a2:47:
f7:31:03:df:95:97:4a:4a:38:5c:a1:b6:d2:73:37:
05:0c:49:d1:d1:26:3b:1e:fe:35:e7:a9:69:87:8c:
2c:1c:52:2b:ab:c2:a2:e0:8b:85:8e:16:e3:10:55:
9a:70:61:c2:04:0d:b3:29:ec:b8:aa:f8:ef:83:e4:
dc:e7:37:9d:b4:c6:26:ef:18:1d:0a:7a:53:f2:5a:
7c:a4:8e:12:80:d3:06:8e:46:23:d8:8a:3a:a0:c6:
2e:84:78:1d:80:e8:c0:ce:ea:81:56:15:0d:56:f6:
7b:6e:36:2c:a0:3e:e6:bc:f6:b3:e6:04:5e:b3:0f:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:6E:BF:D5:CA:B8:84:ED:CB:7A:06:53:A6:6F:25:BD:79:02:26
X509v3 Authority Key Identifier:
keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:20:cd:aa:37:4a:a3:33:33:8a:47:d5:48:f4:6d:0a:32:
3a:61:4d:a1:d7:00:d1:01:37:5b:7b:00:d4:af:fb:40:10:60:
48:84:df:e6:7a:40:2b:32:fb:c7:22:c9:d4:a6:52:bf:cb:ca:
5f:1e:a0:a2:06:f5:1d:6b:91:cb:19:96:a5:19:67:fa:a0:0f:
63:d5:f6:2e:42:78:5f:f2:6f:ad:09:40:b5:2e:37:c2:1a:07:
60:53:6c:37:b4:d7:b3:97:d1:88:3a:f0:fc:44:6e:24:76:12:
cf:92:18:46:04:0f:c4:ec:5c:b3:7b:a6:96:ce:bf:0f:ae:c4:
53:6e:77:1b:5f:15:53:0b:5a:0f:fe:3b:83:f3:53:2c:d4:98:
80:fa:a0:04:4d:50:e2:d7:5e:07:3d:0e:a0:5b:65:09:92:80:
c4:f6:ee:7b:df:33:0c:fb:92:b6:1e:af:35:5c:6a:0d:90:14:
d7:a8:f5:32:7f:d3:3d:f6:1e:dd:db:13:ea:0c:cc:7f:86:7b:
a1:13:70:d0:4f:de:94:73:24:c5:2e:a2:aa:1a:52:cc:f2:e3:
76:6a:cd:c4:04:b6:3a:c9:27:7f:f9:e7:f5:18:55:4e:af:12:
21:70:28:64:fc:f0:ee:16:d3:32:31:d9:d8:b4:fe:b3:5b:b0:
ad:48:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:27 2026 by rpki-client