
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft
File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json)
Hash identifier: ncsGlQiHNIfxAAbRI1ZA4HoOgJLTM4BAlgFaXGeKjEQ=
Subject key identifier: DB:70:D3:76:AA:97:3B:01:CF:1A:37:DB:D2:E6:8A:21:A5:36:2D:0E
Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56
Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft
Manifest number: 013C
Signing time: Sun 01 Mar 2026 06:19:47 +0000
Manifest this update: Sun 01 Mar 2026 06:19:46 +0000
Manifest next update: Sun 08 Mar 2026 06:19:46 +0000
Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: n0wNM/OzxgGQsM8uFZ9BSW4BD3ii+25kraQbRuSUQNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl
rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443DC, serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56
Validity
Not Before: Mar 1 06:19:46 2026 GMT
Not After : Mar 8 06:19:46 2026 GMT
Subject: CN=69a3da83-448b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:4f:b6:f3:a5:16:18:85:72:4a:ab:43:6c:
9d:e4:2d:43:58:36:31:7e:cd:ef:e0:79:a7:0f:01:
f1:7a:77:fa:cf:3d:81:f8:77:af:8b:9c:c7:17:b0:
8c:92:b3:5e:43:6f:81:d4:e6:92:40:08:ac:42:fa:
8a:96:e9:ad:6e:b0:ae:51:9d:e4:46:cc:f3:a7:7c:
ad:10:d8:bb:39:13:c4:84:90:0d:b9:25:8b:bf:95:
e6:c2:51:33:50:b3:39:62:2c:df:ca:59:07:45:e5:
b8:e8:cc:d6:0c:8a:9a:52:ef:2d:77:38:03:0c:2e:
df:08:f2:59:47:a2:ee:41:6c:30:cd:11:ed:e2:ea:
07:4e:4c:b9:e0:5a:91:49:53:dc:d1:ba:f6:c1:e3:
ef:48:d2:a0:9d:65:bd:f0:34:4e:f1:72:9c:86:8b:
0c:a0:32:6d:88:dd:57:f8:6c:8a:1e:ab:49:c2:64:
8d:54:39:a4:f5:97:33:c1:24:0c:43:0c:76:c9:6c:
cf:15:f2:ee:11:0a:d0:0c:f1:8f:88:6b:9d:bd:40:
e8:e9:08:8a:e7:30:11:59:00:27:d1:64:39:c2:b5:
5f:be:44:5f:a2:b8:10:99:da:d7:ab:c8:49:0a:2f:
7a:57:43:78:86:98:7d:10:0d:d1:c0:ed:dd:66:eb:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:70:D3:76:AA:97:3B:01:CF:1A:37:DB:D2:E6:8A:21:A5:36:2D:0E
X509v3 Authority Key Identifier:
keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:18:72:08:99:5b:38:34:df:f4:89:ad:98:b1:c8:0d:23:e2:
09:29:73:e4:1d:9c:9f:64:34:5b:9d:aa:d6:27:bb:74:de:e6:
41:f8:45:3e:82:12:0b:d8:e1:40:73:41:70:b5:f6:fa:59:1d:
1d:ca:b6:9c:a2:12:99:ca:cb:c0:49:6b:ff:e8:a5:49:0c:aa:
93:ee:9e:4a:2c:c9:16:bf:32:36:1f:27:b9:ab:2c:ec:bf:22:
d3:5d:71:96:0c:69:0c:f4:c2:03:62:00:e4:b7:39:fd:7d:91:
08:fd:1f:de:4f:71:46:ba:fb:55:51:5b:3d:48:6c:16:82:06:
7e:97:c4:a7:17:9c:cd:22:65:34:ca:dc:ef:2c:c4:c3:4e:0c:
34:ce:10:2c:c5:32:a6:8f:8c:cf:07:d2:47:25:4b:75:f2:9c:
b8:0d:66:1b:ec:97:0a:2e:66:22:f5:80:0f:4f:89:34:55:5e:
0d:f2:db:fa:6c:62:2f:6a:85:f1:5b:51:c0:e0:7a:17:18:a5:
dd:f3:77:e6:58:a1:d4:56:bc:27:dc:e1:94:45:93:dd:1b:c9:
63:d2:93:c4:c3:0f:c0:da:29:00:a1:fa:2a:94:2d:68:00:c0:
4f:21:5a:af:c2:48:ad:f9:b1:cd:bb:fa:89:c6:83:ad:48:2c:
7b:db:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:54:26 2026 by rpki-client