
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json)
Hash identifier: Dyq0KlxOengiGDXBBP2+ciPL1uYmfQBfqX5aII5PjRw=
Subject key identifier: D1:1F:7B:50:8D:27:94:4F:CF:7E:4C:62:BE:1F:2E:DF:07:DF:BA:DB
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
Manifest number: 0165
Signing time: Sun 01 Mar 2026 05:57:46 +0000
Manifest this update: Sun 01 Mar 2026 05:57:45 +0000
Manifest next update: Sun 08 Mar 2026 05:57:45 +0000
Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: 91u75uB7LP9hyha9YpCy/4BN8dw3SdrNiMiG9iNqIHE=)
2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=)
3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Validity
Not Before: Mar 1 05:57:45 2026 GMT
Not After : Mar 8 05:57:45 2026 GMT
Subject: CN=69a3d559-1c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:9e:54:ab:e8:52:67:48:89:82:45:4a:d8:
c2:8a:95:db:26:7b:3f:c9:bc:54:81:c1:f6:20:f0:
55:9a:0e:3d:61:0c:da:73:99:7f:c2:52:eb:2f:1b:
4a:80:5f:08:db:1e:b4:f0:48:88:7a:b1:81:57:0b:
f4:8f:dd:5c:58:95:41:7b:9e:99:79:35:08:44:91:
3b:ae:d6:c5:0f:90:a5:47:5f:23:e4:be:05:f5:60:
0e:46:31:07:25:ae:55:c3:aa:90:47:6a:8b:4f:75:
13:17:c7:84:3f:fa:d8:f5:6f:cd:cb:7d:f4:dd:82:
51:15:b3:b9:33:7d:dd:40:99:5a:ec:58:3a:79:d8:
80:0f:cd:da:c7:48:cb:e7:5a:5b:d6:8a:81:2f:a8:
84:69:e0:3e:82:ad:20:f3:7c:23:99:d9:97:02:9f:
a2:d7:e1:9a:23:aa:53:cd:88:73:44:ff:1f:8b:93:
b3:8a:ad:84:6e:5d:fc:7d:ed:44:45:d0:01:3f:12:
50:a6:c3:1d:b6:29:33:0a:99:6f:b8:41:0e:0d:80:
a0:a7:26:61:3a:00:d2:38:82:cb:22:f9:6a:fe:5a:
5f:ff:44:d5:b2:3a:70:94:77:b7:35:9d:c7:76:bc:
79:43:54:ba:ce:94:7d:c9:6d:4c:97:1a:b4:b2:21:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1F:7B:50:8D:27:94:4F:CF:7E:4C:62:BE:1F:2E:DF:07:DF:BA:DB
X509v3 Authority Key Identifier:
keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a3:76:70:45:9a:a2:71:f0:90:0a:07:24:ed:53:25:67:7c:
c2:87:1a:aa:9e:5e:83:af:71:27:9e:27:f8:aa:66:e2:dd:c7:
1b:0f:5c:67:7e:90:ad:bd:c7:62:f9:e4:03:06:02:22:34:ab:
93:b0:a8:86:e9:44:0f:be:99:82:cf:0a:b5:e2:ec:15:81:03:
8b:1a:2d:7a:d0:08:3f:86:e3:67:14:2f:ff:87:a8:ab:8c:bc:
99:a0:50:c1:05:f1:cb:fa:50:ec:4b:5a:c0:d6:60:bf:46:a6:
61:06:28:25:77:6c:db:41:5d:f0:5f:54:de:3a:fa:04:c1:47:
fc:4b:f5:0f:2b:a4:3e:f5:be:5a:0d:3f:79:51:9f:59:1f:ac:
66:a1:50:9e:49:be:59:cf:4f:d2:f8:62:02:77:20:20:6b:e5:
94:71:78:e6:5f:d2:53:81:ba:20:42:b9:c1:27:a9:9e:a3:81:
b1:84:26:c8:5e:2c:27:c2:de:a4:02:78:b9:77:05:1c:f7:c9:
52:c3:5f:f8:19:2c:15:ed:8c:7d:85:14:0f:e6:06:be:e2:89:
27:2d:cf:41:31:ed:ed:b1:a2:18:83:ef:37:07:48:0c:5a:60:
63:00:50:6f:fd:9f:5f:48:57:b6:07:e7:c4:9a:11:35:1c:44:
bf:25:eb:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2
MzMyOENENkUwHhcNMjYwMzAxMDU1NzQ1WhcNMjYwMzA4MDU1NzQ1WjAYMRYwFAYD
VQQDEw02OWEzZDU1OS0xYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlqqeVKvoUmdIiYJFStjCipXbJns/ybxUgcH2IPBVmg49YQzac5l/wlLrLxtK
gF8I2x608EiIerGBVwv0j91cWJVBe56ZeTUIRJE7rtbFD5ClR18j5L4F9WAORjEH
Ja5Vw6qQR2qLT3UTF8eEP/rY9W/Ny3303YJRFbO5M33dQJla7Fg6ediAD83ax0jL
51pb1oqBL6iEaeA+gq0g83wjmdmXAp+i1+GaI6pTzYhzRP8fi5Oziq2Ebl38fe1E
RdABPxJQpsMdtikzCplvuEEODYCgpyZhOgDSOILLIvlq/lpf/0TVsjpwlHe3NZ3H
drx5Q1S6zpR9yW1Mlxq0siEjVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNEfe1CN
J5RPz35MYr4fLt8H37rbMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD
NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC
cEE5ekM1ZUhKUjVqTW96VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN6N2cEWaonHwkAoHJO1TJWd8wocaqp5eg69xJ54n+Kpm4t3HGw9cZ36Qrb3H
YvnkAwYCIjSrk7CohulED76Zgs8KteLsFYEDixotetAIP4bjZxQv/4eoq4y8maBQ
wQXxy/pQ7EtawNZgv0amYQYoJXds20Fd8F9U3jr6BMFH/Ev1DyukPvW+Wg0/eVGf
WR+sZqFQnkm+Wc9P0vhiAncgIGvllHF45l/SU4G6IEK5wSepnqOBsYQmyF4sJ8Le
pAJ4uXcFHPfJUsNf+BksFe2MfYUUD+YGvuKJJy3PQTHt7bGiGIPvNwdIDFpgYwBQ
b/2fX0hXtgfnxJoRNRxEvyXrig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:29:27 2026 by rpki-client