
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
File: y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json)
Hash identifier: nQihpYjuGK8q/DjHSFh13BYI9Gi5tXwszhhI1RBHNIs=
Subject key identifier: 64:17:85:AA:F0:9B:F3:A1:D1:4D:10:F1:A6:68:CC:2D:A6:EA:4A:13
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial: 1BCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
Manifest number: 1B94
Signing time: Mon 02 Mar 2026 02:47:54 +0000
Manifest this update: Mon 02 Mar 2026 02:47:52 +0000
Manifest next update: Mon 09 Mar 2026 02:47:52 +0000
Files and hashes: 1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: 6ZGc1N/E+hb1v9ILlDhQ0gcE+8pK7/LSI61o2rp8ZIk=)
2: D90961489C1311EFA0BF1480C4F9AE02.roa (hash: jz3mUG66x+LfglClnYcC2zPJcIcV277FZw8xXWBFQHI=)
3: DE0A76C805B511EE95562E2AC4F9AE02.roa (hash: fSrLukxaAM59ZQEmbnxQBdopl2ygjyhAoNct9kxcFt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7118 (0x1bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Validity
Not Before: Mar 2 02:47:52 2026 GMT
Not After : Mar 9 02:47:52 2026 GMT
Subject: CN=69a4fa59-50d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:a6:6d:4f:6c:00:48:15:fb:de:70:56:34:
9f:81:3d:7a:12:fd:75:31:d5:7a:b3:f7:a2:a9:a9:
c5:b3:fa:1b:e1:8a:e3:52:83:bf:46:53:3d:bb:69:
cf:00:5d:a1:61:d8:ed:05:82:61:13:49:9c:f8:98:
43:d9:68:5a:05:aa:ee:6c:7b:7c:64:e4:35:58:f6:
52:5b:c6:4f:0d:b6:a9:54:f8:fb:73:ed:19:9a:44:
b1:58:bb:40:8a:f9:7c:08:fc:8f:a8:08:bf:fd:97:
99:b5:16:c6:1d:6a:61:fa:8c:9e:23:c6:a0:9a:b6:
73:e7:ce:98:1c:8a:f4:a1:02:3c:b0:c8:78:92:ce:
1c:5a:9d:14:a5:7a:30:cd:f1:74:c4:6f:f9:42:00:
1d:25:e4:23:b0:04:fe:d0:0f:12:5d:7e:b6:ad:38:
6d:07:9b:1f:40:d5:9c:c8:03:e2:32:9a:89:18:82:
bb:e7:47:c9:27:69:02:34:0a:32:0a:8c:59:27:6f:
62:e9:e2:76:60:09:77:3f:76:1f:d7:f1:fe:e1:82:
57:3f:50:96:99:33:8a:c2:19:aa:03:c1:56:18:ab:
57:c3:0f:7f:a5:c2:b4:14:3a:95:22:27:01:97:ce:
08:82:e8:7d:dd:b5:b0:13:4e:a2:e6:b2:f0:76:d9:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:85:AA:F0:9B:F3:A1:D1:4D:10:F1:A6:68:CC:2D:A6:EA:4A:13
X509v3 Authority Key Identifier:
keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4b:8a:45:71:cf:ff:01:d7:5e:bb:33:c2:c2:4d:c1:63:73:
7d:22:9a:d4:a7:96:26:e1:9d:34:39:26:3e:90:f9:97:5d:be:
86:ae:d2:b9:74:1c:7a:bd:82:9d:37:5a:00:ae:a9:57:b1:00:
e3:e9:c1:e5:dd:46:38:79:70:06:6f:b3:bc:d5:5e:cc:10:0b:
43:0d:ce:47:d6:36:af:f2:a7:11:ed:00:b5:2e:88:27:ed:c7:
c0:ef:06:f1:e9:23:0c:53:9d:0b:c7:3d:38:c9:47:59:7b:30:
24:ea:0b:80:fe:05:e5:97:df:b7:20:f5:3f:7d:22:60:f5:2e:
78:a8:38:0f:f9:71:42:3a:bf:49:cd:86:a5:b6:aa:8e:68:d2:
bc:c3:a8:7c:bf:06:e2:1f:cb:6a:54:52:27:69:75:29:ac:12:
69:3c:6e:13:8e:d6:93:32:5b:8d:3f:23:ab:d2:d8:e1:49:57:
20:56:60:4f:60:65:03:8c:11:99:4b:0d:49:46:7f:8b:5c:a3:
f5:3f:30:8b:6b:c5:5d:6d:0f:ed:55:da:d4:49:df:31:fc:d3:
4f:cb:9f:46:2e:d5:f9:b2:eb:29:9f:db:b2:a7:45:15:00:24:
41:7b:45:79:cf:23:12:b9:84:57:ea:75:08:57:1e:59:17:16:
20:c5:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:50 2026 by rpki-client