
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json)
Hash identifier: 3RaC6KO7RHAWsoNQrxgUTE56fzl8/Ejx6f4lJv6NTC0=
Subject key identifier: 3B:BF:8F:C3:C5:A4:30:00:33:92:BE:2D:84:7B:24:BC:D8:6C:D2:F7
Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Certificate serial: 0BD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
Manifest number: 0DD5
Signing time: Thu 16 Apr 2026 18:51:49 +0000
Manifest this update: Thu 16 Apr 2026 18:51:48 +0000
Manifest next update: Thu 23 Apr 2026 18:51:48 +0000
Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: oFyV5eBi8SOOg9Q4ZaNOcfzD9B2hhWnsZbi4SV54/wA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3025 (0xbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Validity
Not Before: Apr 16 18:51:48 2026 GMT
Not After : Apr 23 18:51:48 2026 GMT
Subject: CN=69e12fc5-e405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:7d:c1:43:c2:dc:e3:8d:3d:c4:2c:a7:7e:
2c:df:01:c5:9c:25:20:f1:8b:fd:74:5f:db:5b:2c:
3e:b2:8b:4e:35:ad:cf:42:10:5c:5d:c8:c9:9c:2d:
64:1a:0d:6a:75:0f:aa:4e:1c:d8:90:dd:51:9e:5d:
4b:01:67:90:85:b3:2e:6d:5e:70:0e:4b:40:b7:9e:
6b:52:cd:43:84:84:90:3e:d9:31:8b:71:d0:3f:5c:
33:e6:9f:40:c5:05:41:88:a6:eb:6c:45:28:9c:bc:
13:80:5d:75:d3:f7:03:02:39:fb:bc:9b:d4:4f:fd:
21:31:03:ab:00:5c:d8:46:d3:27:38:2e:fb:4c:1d:
fa:38:91:6b:59:89:bc:bc:d1:56:c8:59:38:01:f8:
05:94:54:52:2c:27:81:f1:99:9a:38:24:00:df:b9:
fc:7a:9c:6f:93:0e:69:83:0b:68:92:0c:13:80:ed:
1c:98:54:c9:24:b2:86:49:d4:66:22:2e:d3:58:cb:
81:4e:18:bf:c1:85:25:a1:4d:79:1b:43:1a:17:60:
f7:5e:c0:4e:a0:28:3c:3b:2d:1d:4a:4b:98:35:f3:
31:a9:2f:ef:c9:c5:00:54:74:91:74:8e:c4:49:44:
8a:9d:48:13:1c:ee:53:6b:c2:f1:e1:ef:60:10:41:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BF:8F:C3:C5:A4:30:00:33:92:BE:2D:84:7B:24:BC:D8:6C:D2:F7
X509v3 Authority Key Identifier:
keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:c0:74:ad:1a:c8:72:87:18:74:5d:42:fd:3b:91:37:73:ac:
30:f5:46:38:a2:7a:37:d9:94:f0:c7:53:2f:aa:91:e1:56:40:
14:13:08:52:64:94:e7:60:04:0b:cf:2b:a7:b5:d2:32:c4:0c:
1f:6b:9e:99:5c:ca:0a:34:82:d1:3f:b1:57:e2:df:dd:52:76:
9f:28:6f:21:db:fe:a2:2b:7a:19:af:11:5e:f4:d9:10:ab:00:
07:0c:d7:ed:21:15:2b:80:a4:99:0e:c9:bc:0b:49:cb:ba:16:
26:5c:28:80:48:0b:49:dc:59:44:e6:d7:6f:7a:a6:b4:17:39:
70:09:72:62:cb:37:23:a1:57:72:8a:4a:97:20:7e:30:07:b8:
3f:ae:07:31:c9:1e:ed:87:55:1a:3f:ad:cd:1f:9e:5f:78:33:
9c:b4:36:dc:f3:72:12:1b:c5:70:76:c7:12:a3:5d:69:76:a5:
83:39:35:c3:94:35:2c:c5:77:9a:43:5f:bc:3a:d3:14:57:8f:
37:ed:5b:9d:50:41:b4:78:36:f4:d7:78:06:ac:aa:06:59:7f:
f5:27:36:72:92:8f:54:1e:ae:d2:6f:59:b3:d4:a5:37:7f:ab:
c3:41:a9:a9:c8:b7:ac:0e:1e:6e:70:11:36:7c:a6:b9:31:0a:
cd:24:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:39 2026 by rpki-client