
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
File: yTQ499zhrbP_4OWIU2-que__79c.mft (raw, json)
Hash identifier: WUUerLa2csT030NFJpntmTuaoPK3BwHdl6R9tGSgBgs=
Subject key identifier: 24:70:9D:28:48:81:12:04:08:33:47:9E:5C:10:A5:AD:A7:E1:21:94
Authority key identifier: C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
Certificate issuer: /CN=A915B2EC/serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
Manifest number: 05A2
Signing time: Thu 16 Apr 2026 23:15:49 +0000
Manifest this update: Thu 16 Apr 2026 23:15:48 +0000
Manifest next update: Thu 23 Apr 2026 23:15:48 +0000
Files and hashes: 1: yTQ499zhrbP_4OWIU2-que__79c.crl (hash: TXQ7ilmKwNGxuvUb+meLCEbhvpUFrMSZ11lYAxL0be0=)
2: 6B7B69D21C6411F1B68A335785EE528E.roa (hash: t3WJZ+TqxO9rAjYRJ0g09t3brgTmkG4d6oU027EJ4NU=)
3: 6D98D7C21C6411F1B68A335785EE528E.roa (hash: p7GvvvhnBiIlq2AFY9FalMi/aIDVDUbfZqCsTS3w2ms=)
4: 6C0CA7EE1C6411F1B68A335785EE528E.roa (hash: U+LavfCdJdFhu3KM3IjuquJhxlvTznrSauq2yP2RdA8=)
5: 6D1560E01C6411F1B68A335785EE528E.roa (hash: BYU5FIyktvv26Nz2Rm1eQhqdMYLLaex730hzv42dZLo=)
6: 6C8E6D381C6411F1B68A335785EE528E.roa (hash: PHiN9WhM1Yjs+fJf4ch6Xa0wX5cn9N5EasUrbY9oPEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B2EC, serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Validity
Not Before: Apr 16 23:15:48 2026 GMT
Not After : Apr 23 23:15:48 2026 GMT
Subject: CN=69e16da5-ea29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:f3:33:ba:03:e0:dc:6c:2d:cb:25:06:58:
58:39:17:ab:3f:cb:69:0b:c5:c8:de:f8:85:60:4f:
10:a9:e0:55:40:50:db:2c:d3:b6:4c:6f:bd:9c:24:
b9:64:c6:37:3f:a8:53:3f:b0:6e:41:bf:81:85:62:
20:98:23:63:b5:d1:68:bf:86:37:f4:3b:df:23:59:
91:f8:21:1a:7f:73:98:46:87:e6:1c:32:de:5b:8d:
06:52:71:60:0c:e6:1b:12:82:40:4c:3e:4a:66:cc:
5d:9f:e3:ae:71:3b:c3:b3:24:8d:6c:8c:98:c0:36:
8a:8d:3e:15:e7:f5:34:e4:c9:74:de:0e:0d:fc:48:
a2:70:e3:0b:4e:36:6b:5a:48:f6:e9:a0:08:30:6f:
fc:b8:c2:a4:b5:02:04:63:2d:73:af:de:60:3f:38:
41:57:3d:a2:6a:79:65:bc:e8:5e:9f:0e:af:f6:3e:
f7:5e:ff:38:17:8b:2c:88:70:12:0e:b4:45:04:d8:
c0:2a:c6:21:01:ad:13:37:2b:e3:ef:2d:3a:2d:38:
aa:36:6a:7f:22:8d:f6:0f:ca:90:14:25:bf:50:f7:
cc:89:a4:c5:d9:5d:13:3c:cd:55:db:32:a7:fc:9e:
b5:db:8b:51:e5:31:9a:37:13:82:af:48:8a:47:48:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:70:9D:28:48:81:12:04:08:33:47:9E:5C:10:A5:AD:A7:E1:21:94
X509v3 Authority Key Identifier:
keyid:C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:0d:59:ff:00:41:16:f4:72:9a:6c:9e:38:a7:2d:90:ec:4d:
ff:98:c8:8e:c6:5d:16:a9:19:58:0e:a4:2b:ed:72:98:c3:20:
1f:24:5d:a2:5f:ef:2f:40:3a:c4:c9:62:2f:84:e4:e8:95:bf:
42:c8:f2:11:40:e4:97:db:5c:0e:83:94:91:e8:f5:a5:1d:0a:
bf:f4:66:88:d0:73:f2:f5:3b:ce:84:76:9d:ea:6f:b3:ff:38:
82:b6:de:af:be:a8:cc:f0:ae:51:e0:6b:07:fc:49:0b:f5:ea:
c2:c0:2d:d0:44:1b:c2:3b:45:66:06:b2:dc:b7:ed:d4:5b:c7:
0a:90:78:37:7d:ec:9f:68:42:ca:3b:6f:26:c0:0c:e5:9d:3c:
e7:24:37:8f:aa:02:0d:52:68:dc:ed:11:b3:00:d0:5f:34:ea:
57:24:e6:9e:4e:21:6f:cc:c2:1d:79:ab:c8:52:96:b6:1a:d7:
54:c8:5b:95:3a:05:c4:f1:0b:35:92:ac:94:87:a4:8e:48:d0:
3a:63:e2:b3:23:66:56:a5:db:af:70:73:18:ef:b9:15:ae:ab:
aa:a5:e8:ec:b2:2e:9d:05:34:18:7a:03:db:9c:38:6b:1a:6d:
77:c3:d9:99:42:f0:6c:75:49:ea:e9:7c:86:de:78:5a:22:cd:
b8:85:8b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:53 2026 by rpki-client