
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
File: yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json)
Hash identifier: F2qYjHTM9kHP9o9HZEW5JvV76WcmWsV6ic/OaEwAcDc=
Subject key identifier: 87:F5:5C:1A:B8:05:BC:A8:B2:CE:8B:16:AA:4F:94:BC:E7:1D:A9:16
Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
Certificate issuer: /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
Manifest number: 66
Signing time: Sun 01 Mar 2026 09:20:04 +0000
Manifest this update: Sun 01 Mar 2026 09:20:03 +0000
Manifest next update: Sun 08 Mar 2026 09:20:03 +0000
Files and hashes: 1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: +cTZqtJb7M500WrEVHY2Xl36ALQVM9gD2U9/bAg83DA=)
2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: JrWQTIVZFI8a0pln7P+m0meftjgxZRSu/Rs2hLgG4ZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Validity
Not Before: Mar 1 09:20:03 2026 GMT
Not After : Mar 8 09:20:03 2026 GMT
Subject: CN=69a404c4-7b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:69:44:5a:f6:82:29:f8:78:92:8b:99:a9:
ec:b6:cb:27:cf:d6:8e:b7:89:19:51:b5:15:36:c0:
32:fd:88:8c:45:c1:90:15:36:cd:d0:7d:5a:b6:6a:
5f:25:7d:e4:54:bc:ad:75:bb:c7:b3:01:ae:3c:95:
8f:ee:79:23:25:44:64:c0:06:4f:1a:84:cc:fa:80:
c9:f9:b2:41:b7:4c:51:b7:03:44:3b:80:b3:bb:d5:
05:a5:9a:66:9a:b6:9c:32:41:d5:39:02:55:2f:b0:
41:3f:a9:18:76:bb:b8:7d:74:02:c7:40:ec:ee:b0:
b9:74:8a:2f:f0:88:0a:1c:c2:d4:f7:5c:00:41:d6:
6a:60:34:39:74:1d:45:8d:7e:14:64:56:61:b8:ec:
ac:f0:c6:dc:d4:08:79:f5:39:c0:07:c8:69:e7:08:
a5:af:07:b9:55:68:82:36:79:44:18:a4:3d:bc:6f:
a9:49:c0:b1:ed:f0:61:d4:a6:79:92:d7:92:46:8c:
02:f0:43:55:33:a3:a8:55:7f:4a:28:c1:a9:67:9f:
77:ad:71:08:f8:6a:7f:a1:db:25:cb:50:1d:c3:38:
a2:27:a8:b2:42:07:0e:cf:19:fb:af:2d:3f:73:cd:
79:b6:d0:e5:df:7f:31:a0:74:43:79:95:31:88:1d:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:5C:1A:B8:05:BC:A8:B2:CE:8B:16:AA:4F:94:BC:E7:1D:A9:16
X509v3 Authority Key Identifier:
keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:fa:77:b3:cc:e8:6d:98:2d:fd:67:1d:42:1e:c8:53:e4:ea:
0f:ab:10:92:e7:3c:b8:db:d8:b4:77:9c:04:0b:db:e0:7a:82:
5d:2d:82:c5:4c:58:23:fb:0a:b3:c2:45:be:9a:ef:9c:f4:40:
c8:0c:2c:34:ab:9f:e8:b9:81:be:5a:4d:73:fb:bc:4b:86:23:
99:ed:04:0c:e9:35:c8:7d:a3:c7:d2:47:c7:b4:2a:23:75:ee:
96:a2:79:48:e6:fd:e3:38:8c:a2:a7:6a:e9:ec:eb:60:1e:ca:
96:46:84:40:f2:8a:aa:7a:83:21:8f:5a:bb:7d:b0:a8:21:c2:
5c:d6:a4:40:33:e3:03:5e:37:d7:55:49:b3:5c:71:31:6c:98:
8e:be:3d:f7:7d:fd:0a:0e:f0:b0:8a:96:d5:d3:35:c5:44:b6:
4b:61:d7:de:31:a1:39:d5:27:9b:b7:9b:bd:8f:70:0d:db:b6:
fc:cb:32:ca:50:13:b3:cd:aa:84:04:c0:25:31:f1:21:e6:71:
01:f4:c6:62:b4:44:04:72:a9:59:90:39:46:a1:a0:1f:60:ea:
b9:c2:5f:e3:aa:78:66:ea:d7:84:92:c7:70:09:5b:5d:7d:de:
3c:35:43:4a:d5:d5:91:77:11:46:64:09:d6:40:b5:c0:83:76:
51:f2:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:50 2026 by rpki-client