
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json)
Hash identifier: MdplxN61eu0rWZ8xpISXkbT3J8iiwXgVMPg5CvcDoqA=
Subject key identifier: C8:EF:03:10:10:6B:04:C0:2B:3F:53:02:FE:B1:EB:19:79:9C:BD:D0
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
Manifest number: 0127
Signing time: Sun 01 Mar 2026 06:39:25 +0000
Manifest this update: Sun 01 Mar 2026 06:39:24 +0000
Manifest next update: Sun 08 Mar 2026 06:39:24 +0000
Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: 2GBBPpWUGBftVALdy5OxrKKhpAnecS4JarE4i6ypHbY=)
2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: 3aT0muq2AP76fHDV6M45dsCuBJOlUCEA5kwKeP8ww7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:39:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Validity
Not Before: Mar 1 06:39:24 2026 GMT
Not After : Mar 8 06:39:24 2026 GMT
Subject: CN=69a3df1d-f4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:98:b0:a0:3b:5a:47:bf:58:be:73:c3:e0:
40:43:a2:de:fd:56:a5:0b:2a:26:9a:66:9f:2f:88:
cf:70:5e:0d:69:fb:5e:04:38:3a:87:f3:18:32:2d:
a0:df:88:87:8e:58:2b:d2:22:90:71:53:d8:27:37:
7a:01:6e:b4:c2:09:fd:da:49:28:f1:02:dd:a7:53:
6f:6f:47:d3:2a:ca:1b:a7:d0:a2:8c:68:52:e4:fa:
10:11:64:4d:dd:c0:8c:d7:36:60:0f:9f:62:5a:8e:
d7:23:cd:40:01:20:26:c0:0c:4c:4e:4f:5d:16:7a:
50:90:5b:51:c1:e7:e3:c4:e4:ec:6e:d2:67:99:9e:
50:19:51:ac:ba:3a:ef:04:ed:a5:7f:b6:9c:a5:cd:
63:cb:e4:66:84:45:eb:e4:53:58:d3:d5:38:30:3c:
19:31:2e:8e:d2:55:72:c6:a6:5a:d2:e4:52:35:67:
6b:72:6d:c5:25:e9:a8:60:b4:ff:08:44:d2:7e:db:
29:ca:02:a3:c0:d2:a1:38:d7:75:39:b1:1a:6e:20:
22:07:ff:db:cd:45:85:1f:1c:1c:c3:71:09:bf:93:
2d:00:20:f5:f6:c5:81:66:ca:4e:a6:de:21:e3:a1:
8a:be:15:b5:25:c6:3e:f2:23:aa:c4:54:cf:66:05:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:03:10:10:6B:04:C0:2B:3F:53:02:FE:B1:EB:19:79:9C:BD:D0
X509v3 Authority Key Identifier:
keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:63:c9:d8:da:fc:3b:bf:5f:e3:cc:c5:01:79:d2:c5:c6:e7:
52:c7:9b:59:33:87:e5:24:f2:3f:0e:df:db:9e:fa:ff:fd:5b:
4c:2f:2c:f5:e8:f5:2e:f3:49:b5:af:9d:67:0d:a2:e0:31:b1:
c0:57:cc:23:8b:6e:e2:80:3a:f2:7e:8f:ea:8f:87:81:c9:4e:
73:52:a7:eb:d7:76:f1:bc:ba:7c:70:20:83:48:2c:41:fa:b7:
d3:10:51:14:c1:65:0c:fc:78:bf:c4:85:d3:e3:a8:a4:c2:5c:
9a:31:18:98:86:de:e0:61:6d:15:39:a6:96:fd:48:6d:4b:05:
fc:14:f8:66:7c:a0:ae:96:1a:8b:f5:0e:dc:ad:b6:9c:a7:f2:
9b:4c:c3:1d:64:95:20:48:43:61:58:24:66:ec:06:d1:ab:8a:
9c:0e:77:f0:c6:0d:ae:4d:2f:0c:1d:17:cd:09:60:81:18:16:
a1:3a:ff:a8:31:ef:2d:c0:c8:e6:32:73:77:20:68:65:18:3a:
06:b8:62:8b:4e:51:6e:c9:12:20:21:13:af:25:13:38:96:c9:
97:b8:42:3a:1d:54:a2:2f:c2:89:e2:38:b9:4b:2a:1d:9b:cd:
af:dd:f4:e3:52:0b:21:67:77:1c:f8:dc:41:0f:01:3f:66:dd:
a8:af:36:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:49 2026 by rpki-client