
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier: 5TlNj4R0g1R4jebprpqoMqaW3Blq7KWij3Fa1FjD11I=
Subject key identifier: E4:9B:A5:1F:BE:BA:2C:E7:5F:D8:91:A1:F0:9A:B8:4B:59:E0:2C:C6
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 35E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number: 357D
Signing time: Thu 16 Apr 2026 15:16:42 +0000
Manifest this update: Thu 16 Apr 2026 15:16:41 +0000
Manifest next update: Thu 23 Apr 2026 15:16:41 +0000
Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: ESq399Zf9mTtYRZGO7yRt+sgVayJHZLTHxwtvowo8mY=)
2: 0F3E8640D99D11F08333CF1766D3641D.roa (hash: qzuruNPj+CxqWUofv9I42+V40MXD4+oF0yeOUf6AX+Y=)
3: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: CujlrPZRzwdLdoypUA6XG0sSyWx22QqMi3Wunv/TANU=)
4: 7BAC7A5621D411F199DF6C46233D8C67.roa (hash: /mDg6LUZzeHlaNJOXKegHskznJoBNs4nZJuthgsnsWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13794 (0x35e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Apr 16 15:16:41 2026 GMT
Not After : Apr 23 15:16:41 2026 GMT
Subject: CN=69e0fd5a-cb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:fd:a4:a5:c2:6b:9f:9d:37:54:bf:ff:ec:
01:f2:3b:38:7e:f2:63:db:04:ea:0a:29:71:fc:d5:
7d:7f:6a:d8:b2:74:06:43:89:4e:1a:41:58:1a:7a:
33:71:61:07:ee:51:f4:df:14:42:5a:53:0b:2d:6f:
c7:e0:b5:64:55:54:82:ae:a5:69:89:30:c1:0b:7a:
fb:d4:39:bb:97:95:2d:5d:16:03:b6:bf:4a:04:c2:
2d:85:ec:e9:92:41:73:ba:68:3b:e0:74:bf:38:e2:
1b:74:0d:4e:3c:82:aa:b7:b7:75:af:28:94:d6:b1:
20:1a:45:a9:8c:d9:ae:2c:b5:16:80:b9:82:27:c3:
d2:34:cf:92:ce:00:04:f0:36:66:c8:bf:d3:30:9e:
68:91:57:bc:a3:7d:42:76:ba:a0:d9:76:f4:89:84:
63:10:7c:a0:2b:d7:6c:58:c0:79:77:15:71:fb:7a:
10:df:b6:ba:7b:1f:d5:00:1c:4b:c5:ae:d7:a3:e3:
c4:84:f1:fc:5d:c4:20:71:92:cf:0a:65:8e:ec:3d:
73:ed:f7:2c:40:b7:9e:37:40:30:b9:da:c2:ef:55:
e8:b5:52:b8:db:4a:ac:02:55:93:5e:54:2a:68:d7:
d0:b7:37:9d:e6:56:a8:a9:ac:03:22:ee:38:3b:97:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:A5:1F:BE:BA:2C:E7:5F:D8:91:A1:F0:9A:B8:4B:59:E0:2C:C6
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:b1:cb:55:b9:70:c1:0c:ac:d7:f0:73:00:19:14:ad:f3:
cc:77:d7:a4:b8:4b:dd:47:81:b6:40:4a:9d:ef:3f:a1:e2:e1:
50:bd:89:39:ee:31:2d:53:5c:96:cd:02:7b:c1:01:a6:6e:21:
f3:45:62:4a:64:c8:e5:e8:62:55:44:3b:0f:d0:a1:c0:c9:29:
b5:7a:c7:cc:62:c7:ca:54:71:5f:8b:06:84:e9:60:fd:79:3d:
98:b4:8c:8a:3e:59:ba:7b:2b:92:cf:e0:c3:5f:e3:bf:2b:85:
09:89:59:e3:a0:88:4b:c3:75:82:36:a8:9e:43:89:6e:72:90:
1b:7e:73:a9:a2:9e:a4:03:09:3b:94:b2:ad:42:d6:26:b9:1a:
7c:b9:6a:dd:86:51:43:22:d0:c7:63:e3:e0:17:6d:05:9f:99:
3b:e8:7e:d3:f2:8f:de:82:f9:8c:1e:fb:00:4c:13:d3:d1:e2:
fa:41:f3:89:cf:3e:f4:cd:ad:2a:96:88:0c:e8:a6:1e:c1:e5:
7a:b7:33:33:20:d2:8b:43:8e:b2:bd:b3:17:ad:ee:03:08:36:
c3:59:3f:8c:69:6d:72:f5:6b:d3:b0:2f:68:3e:0f:95:66:61:
85:c0:d8:ab:43:ea:f4:30:30:20:a1:91:9b:67:ad:6e:54:07:
d5:c0:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:47 2026 by rpki-client