
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json)
Hash identifier: y0GZpPCzrnb+0XrFN+MzY0SCpVirjtSlNtAubj8GDWU=
Subject key identifier: 99:72:74:88:6F:9C:FC:8A:DF:7B:C6:DD:FC:EE:59:43:12:A7:23:09
Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
Manifest number: 01B9
Signing time: Mon 02 Mar 2026 02:17:00 +0000
Manifest this update: Mon 02 Mar 2026 02:16:59 +0000
Manifest next update: Mon 09 Mar 2026 02:16:59 +0000
Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: ZeXf2mOydIpIX6hh+zB+MQachRUO6ufaJEl9LwUx7QM=)
2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: CpTWwAtDyYV5NG3Dw7iBHIxDpXfL3jOA6p5oviFkDVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl
rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Validity
Not Before: Mar 2 02:16:59 2026 GMT
Not After : Mar 9 02:16:59 2026 GMT
Subject: CN=69a4f31c-da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:42:e7:f9:e9:78:05:06:bc:4c:2b:52:04:
45:58:19:2e:f5:53:6a:6b:86:37:36:d4:1e:46:54:
03:4c:fd:71:16:0c:60:5a:05:b1:26:fb:a0:03:e0:
a4:e9:48:c6:40:79:cf:8d:81:3c:be:06:d8:15:29:
53:a1:c5:db:58:6a:3d:9e:77:a7:6c:0a:48:ea:c7:
d8:84:9a:0d:c6:38:7a:e7:d7:bc:cc:bd:98:42:c6:
05:c4:88:d3:8e:6d:cb:c7:09:24:4c:2c:35:79:50:
3c:64:ff:14:a5:ed:c9:93:15:97:44:fb:0e:6c:06:
fd:60:db:66:8d:f2:7e:b0:d7:ff:7d:03:fa:bc:a0:
29:69:e9:7c:ff:eb:f7:de:03:47:88:36:5b:58:69:
49:f1:df:4f:85:fb:5b:e9:6b:de:b4:1d:94:f3:12:
c4:cb:15:89:2f:99:88:5d:02:21:26:a4:86:4e:0c:
58:c0:11:0e:a9:5d:31:28:55:2a:30:8f:59:25:81:
3c:0a:38:03:88:4e:22:b3:69:ac:42:11:a3:2f:20:
35:99:c3:f2:92:b6:dc:82:e5:6e:59:57:f5:54:46:
9a:4e:97:9a:d8:08:bb:1b:e4:1d:b8:12:9e:23:51:
39:12:1a:fa:37:01:8d:be:d7:25:45:60:69:64:86:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:72:74:88:6F:9C:FC:8A:DF:7B:C6:DD:FC:EE:59:43:12:A7:23:09
X509v3 Authority Key Identifier:
keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ca:70:da:fa:be:c5:ea:14:8d:8e:7f:81:28:21:bc:f0:a3:
7f:bb:b8:86:f5:e2:bf:41:af:94:f2:c3:eb:3f:bd:af:70:86:
65:dd:1c:5c:49:d0:25:e8:29:c4:77:bb:87:2b:2c:c0:1c:4a:
44:e6:9e:b6:27:de:8d:3e:5b:90:10:77:85:ab:ff:f4:46:a8:
28:99:aa:4e:4c:de:0b:00:5f:32:64:e9:b8:a0:b5:19:66:47:
0c:95:3a:65:14:b1:e0:ce:d7:1e:e2:b7:e2:95:17:40:63:2e:
1d:d2:02:f4:dd:38:6b:a1:52:0e:23:54:45:4b:de:3d:82:06:
53:88:41:a5:47:75:7e:6c:7d:c6:5b:f2:3d:a6:a5:d6:13:fe:
8e:68:0a:b9:6b:38:96:6f:e2:bd:6e:75:7e:17:2a:93:c9:24:
84:34:4c:ec:bc:17:b0:9f:a1:ef:27:bf:ae:b7:3a:2f:bd:15:
61:ac:49:77:5e:9a:60:45:3e:cc:7b:f8:ee:d1:41:48:90:c2:
09:83:70:c1:a5:ff:1c:a9:85:62:89:c5:53:a9:ce:25:a2:cf:
f5:e7:5d:76:8c:8f:ec:84:47:8f:21:7a:41:b8:2f:28:92:56:
e2:90:19:03:63:9e:d5:f6:3a:cc:59:80:64:ed:29:b4:73:0d:
6e:50:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:18 2026 by rpki-client