
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json)
Hash identifier: fjRnr96+ZtJN2QBkHRvVKuZeVBR+/yQnWmU5eLziXOM=
Subject key identifier: 92:AA:06:8C:F6:77:0B:1F:3C:72:CB:9B:15:82:B7:8E:8C:12:67:C8
Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Certificate serial: 0BB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
Manifest number: 0DA2
Signing time: Sat 28 Feb 2026 19:11:52 +0000
Manifest this update: Sat 28 Feb 2026 19:11:51 +0000
Manifest next update: Sat 07 Mar 2026 19:11:51 +0000
Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: DlXixyezfA3oxr38C05VzFkfb0r4iQYHWuJxBnUr0uA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3000 (0xbb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Validity
Not Before: Feb 28 19:11:51 2026 GMT
Not After : Mar 7 19:11:51 2026 GMT
Subject: CN=69a33df8-a0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:33:0f:5e:bb:4b:93:e0:fc:a7:a9:42:ba:
68:1c:7f:c0:59:50:33:52:e2:0d:bf:f3:c9:ef:bf:
14:d7:4e:76:28:ad:9b:bb:7a:1b:74:e7:4c:05:ed:
99:64:7f:6a:ab:a4:3c:9f:cc:77:ba:4a:2a:f4:89:
6e:0c:3e:09:ca:ad:8a:b4:83:ef:06:d7:c4:98:7d:
00:d0:f4:28:73:94:02:a3:45:a7:5f:b4:3a:d7:46:
0e:30:43:b8:31:ff:b0:9b:5f:b3:37:69:6e:c9:e5:
d1:e1:9a:4c:5e:5e:0b:3e:35:8c:ff:e5:83:da:1b:
4c:fe:72:03:8a:5e:ed:ad:1f:50:31:3e:87:05:5d:
e6:36:50:ed:4f:13:3f:85:5f:50:ec:94:8c:4d:1d:
9b:53:36:77:b5:90:1d:ef:b9:6a:f9:d1:66:ae:fb:
0d:e8:e3:76:d3:77:72:ef:9f:b2:4c:34:66:3f:ea:
b2:38:37:fd:de:71:c7:b6:1a:26:21:70:f8:38:17:
4e:91:ed:6a:d2:ef:90:7b:a4:e5:b2:f3:00:6a:09:
a5:e1:f7:e1:ab:c9:1f:6d:d1:23:13:e2:e3:29:66:
ae:b1:94:b6:e5:13:37:09:fa:ac:8d:4d:46:a9:e4:
c3:89:4e:6e:d0:68:5d:2b:ed:bd:13:d2:a1:50:16:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AA:06:8C:F6:77:0B:1F:3C:72:CB:9B:15:82:B7:8E:8C:12:67:C8
X509v3 Authority Key Identifier:
keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:93:cb:7e:e5:b0:53:7f:27:a7:14:e8:2c:38:8f:70:e3:41:
57:75:aa:fd:c2:c8:93:ce:c2:a9:67:4a:fe:67:21:ec:e4:c3:
8e:03:2b:b8:54:3b:83:f0:5d:e9:1c:b2:6c:ac:40:4a:4e:10:
ae:f6:a5:58:eb:34:23:45:2b:de:a2:cc:bc:6b:fb:68:20:a7:
6d:4e:b6:f4:05:8f:aa:5f:46:5e:c8:48:d4:de:52:4e:aa:67:
4a:70:c4:c4:14:b2:a6:69:2d:a0:04:47:3f:73:8d:9e:ba:8a:
bd:79:44:c0:b7:ea:68:1c:78:b3:5d:52:55:c4:15:36:bd:04:
11:33:37:a7:43:b3:73:d8:28:93:90:38:31:c0:41:3e:66:ad:
e2:06:e9:89:65:e6:9b:f6:66:17:78:0b:e0:fc:e6:db:e4:c7:
67:07:38:11:54:5d:9e:48:81:c2:f7:79:d4:26:88:b6:4f:6c:
05:80:21:4a:8b:2a:1d:69:cf:33:15:6d:53:7f:5b:75:f6:ac:
26:7a:2e:79:97:62:fc:27:8d:74:3c:39:96:88:fd:e4:df:31:
e8:42:4f:07:48:c5:5f:27:ce:d4:92:39:5c:cf:18:37:c2:ba:
76:c8:41:73:c6:a8:02:d9:2a:fa:d9:02:60:99:45:db:bf:1b:
5a:8f:4d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:07 2026 by rpki-client