
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier: MZCcHk+MBno5arIimjqyoRfZ+Npxrb5izeztdhfIT60=
Subject key identifier: E4:06:00:DD:BC:4D:CC:EB:5F:B7:8D:65:A7:A6:1F:A0:76:92:DA:AB
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 35BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number: 355A
Signing time: Mon 02 Mar 2026 03:00:40 +0000
Manifest this update: Mon 02 Mar 2026 03:00:39 +0000
Manifest next update: Mon 09 Mar 2026 03:00:39 +0000
Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: J83wajUzdAc2ODR63tDd3xJ1+T0uqgFjEYlfPxgjJgE=)
2: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: dk7QOSrQgiH8O8inK6qxZxO6i/txO23ZlVJe9zM5bJQ=)
3: E6182CCEF5EB11F099667DBA4F6F56BC.roa (hash: nliFFyT4zSaaECft4tiSNEjSnn+P9y8S7MiPRq9f0oA=)
4: 0F3E8640D99D11F08333CF1766D3641D.roa (hash: qzuruNPj+CxqWUofv9I42+V40MXD4+oF0yeOUf6AX+Y=)
5: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: CujlrPZRzwdLdoypUA6XG0sSyWx22QqMi3Wunv/TANU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13756 (0x35bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Mar 2 03:00:39 2026 GMT
Not After : Mar 9 03:00:39 2026 GMT
Subject: CN=69a4fd58-1659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:80:d8:28:2c:5d:12:2e:ef:cf:b0:e2:84:15:
e5:02:2c:f5:42:60:fc:b5:5b:f2:cd:17:79:99:4e:
a0:d0:6d:e3:ee:86:c6:f3:1d:ea:76:0b:dc:25:1a:
b1:3e:3d:af:75:b4:2d:e0:f3:29:1e:ba:d9:10:31:
ed:e2:4d:e7:80:48:6e:fa:be:24:c1:12:94:f2:21:
d8:76:33:b2:22:42:af:44:00:a6:54:e1:a4:7e:c4:
d4:f7:60:47:61:a1:9e:c6:47:97:3b:e7:2c:cd:bd:
e6:85:84:52:ea:4c:67:59:35:bf:a8:8a:0d:a0:81:
28:a5:da:cd:83:99:18:82:6b:3c:a4:47:16:68:05:
3f:5b:0b:d9:32:74:46:7a:bc:df:58:5e:b8:ea:6f:
b4:57:b0:98:8c:7e:56:52:bf:91:fe:4b:21:07:e4:
7d:6f:43:9f:4e:6c:41:d1:d8:fe:cb:b6:6b:61:b7:
38:1a:95:a0:71:d6:4f:18:ba:c8:89:b5:98:eb:52:
3f:c6:78:0c:87:c4:3f:7c:7b:ec:2b:1a:3c:96:0f:
8c:86:97:17:a0:b6:67:7a:81:ed:42:81:8b:0f:17:
2b:85:79:c9:fd:8b:88:4f:73:21:98:4a:a3:80:2b:
dc:9f:1a:7f:57:1b:b2:66:b4:4e:82:a3:1b:64:17:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:06:00:DD:BC:4D:CC:EB:5F:B7:8D:65:A7:A6:1F:A0:76:92:DA:AB
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f0:d7:79:0c:28:5d:cf:69:c7:50:ea:1b:75:90:69:44:eb:
46:81:41:bc:fe:a1:85:c0:13:45:a0:73:34:bd:b4:a3:21:e3:
5b:de:4a:4f:f4:16:cb:cd:01:b3:71:b2:a0:e0:69:34:77:37:
03:60:54:5a:a0:5a:31:13:9b:63:7d:5e:0d:9c:32:58:59:bd:
d3:3c:f0:de:9c:79:32:f1:47:b7:0c:cb:e9:24:52:bb:26:9e:
a8:a9:00:61:f0:ed:37:d9:aa:0f:8c:91:bb:e3:f2:9f:3b:87:
b5:e0:90:52:f6:fa:5f:46:12:e1:e4:31:6b:87:08:91:4c:26:
3a:62:19:b4:b1:71:a5:12:74:90:69:1b:93:24:99:c2:bf:67:
75:04:ac:c1:63:61:80:21:83:1f:85:0c:83:0f:65:0d:1f:7f:
52:b9:0c:9a:df:58:8a:6c:c8:dc:c7:a4:a1:a6:6f:dd:3d:1c:
45:25:e2:bb:2d:e1:41:0a:c6:74:67:7c:4f:7d:63:81:e4:6a:
d9:9f:e7:5b:89:fd:5b:1b:99:ee:e9:78:fb:bd:61:ca:63:e6:
ed:54:f5:a8:f2:f2:f1:1d:c6:79:0a:23:6f:d6:5c:5f:b9:41:
06:57:ab:8b:1f:6b:fd:fc:11:9a:48:88:72:65:f1:61:b8:aa:
f1:5c:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:40 2026 by rpki-client