
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
File: yzDTXHDfyGaoN8rt_vzm_sv8W18.mft (raw, json)
Hash identifier: kkQD8r7Qun6pQ1fpqmrgOWI7jkMVAA6qTlXyxPrbdug=
Subject key identifier: A0:8D:F1:B6:7D:C7:51:39:87:EF:DD:03:70:C4:91:E5:62:55:C6:E2
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial: 084B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
Manifest number: 0833
Signing time: Mon 02 Mar 2026 01:43:12 +0000
Manifest this update: Mon 02 Mar 2026 01:43:11 +0000
Manifest next update: Mon 09 Mar 2026 01:43:11 +0000
Files and hashes: 1: yzDTXHDfyGaoN8rt_vzm_sv8W18.crl (hash: q9oPUXGg31xHoDIXIZ8P7H39yPkEEoKgnUwYsDwP7IY=)
2: B8BB04788D0E11EF9759C171C4F9AE02.roa (hash: QKLGspANWbxw8KYj33JMMJdYgC4PO2q64kvi/bPww0U=)
3: 7A5654CE358A11F0A6A3E84EC4F9AE02.roa (hash: VYWEaRIXiR8qMtQLt1vLH6vscj0LW+C9m3n4iYjk9EI=)
4: C6C096F68D0D11EFB98F225AC4F9AE02.roa (hash: IPMYkvrQfdZ2mzJDAfxRKRzbx0toH4tf3xv/XzDEnbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2123 (0x84b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Validity
Not Before: Mar 2 01:43:11 2026 GMT
Not After : Mar 9 01:43:11 2026 GMT
Subject: CN=69a4eb30-1857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:d7:b3:40:e2:bf:f0:d2:49:44:cc:c3:23:
0f:d6:c5:40:fe:33:09:70:02:33:f4:9b:50:f7:1b:
50:61:81:c0:ff:a6:bc:a0:37:41:55:f6:18:1f:a1:
ea:6b:f6:a4:44:7c:61:17:05:3a:04:94:79:c1:f2:
8b:22:9e:c2:71:2d:8d:8a:9e:ea:ad:fe:d0:aa:9a:
1a:47:98:e4:8a:62:8a:bb:8a:5a:43:39:ab:7c:04:
71:4c:9e:73:f2:46:ac:d2:00:be:01:88:4b:36:4c:
0f:58:a9:52:31:35:76:6d:ba:c2:87:97:51:26:d6:
2e:a6:75:14:4e:87:b4:b2:54:9e:9e:ef:d8:64:e4:
3e:06:89:d6:83:9c:90:81:99:ff:1d:93:bb:91:b7:
4b:d7:fc:ee:63:22:93:ff:b5:8e:0f:62:14:11:16:
f4:c3:9f:fb:b7:2f:9b:1a:d7:ba:09:7f:0a:3a:14:
d7:f4:79:f2:42:40:ee:6f:07:4a:bc:cc:13:f8:29:
e8:48:c2:c5:1b:15:b7:2b:65:b6:9e:d8:85:f1:66:
bc:23:5f:aa:61:c4:24:a3:e9:72:2b:3b:a2:5f:64:
a6:53:29:66:60:94:a6:b4:44:72:3d:1e:69:ae:d3:
a9:fa:a1:cc:ad:ea:98:85:71:df:82:8b:80:c7:66:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8D:F1:B6:7D:C7:51:39:87:EF:DD:03:70:C4:91:E5:62:55:C6:E2
X509v3 Authority Key Identifier:
keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:53:26:46:1c:72:32:cb:25:c1:1b:73:34:cb:18:57:42:c5:
62:ba:45:49:8b:81:c4:24:dd:4e:6f:12:d2:89:58:1e:3b:fb:
2e:a3:c2:6d:59:1a:82:e2:38:3b:4b:74:61:95:c5:8b:f6:f9:
7c:56:11:82:06:2a:e9:8e:e8:58:dd:89:af:96:2f:31:40:98:
c9:c1:fc:ab:30:e4:c2:07:f8:44:29:5b:46:44:f8:65:b0:c5:
b2:e2:19:64:52:16:8b:4f:ed:a8:9c:bf:91:62:0d:4c:a9:e1:
52:a4:5a:7c:0e:f5:48:e5:78:8a:28:9b:e9:48:1e:06:9f:12:
b1:e5:9c:30:02:02:9a:fa:bf:31:f1:59:53:a0:fc:2e:eb:76:
7c:bd:67:fa:a9:69:d0:c9:43:43:5f:d1:07:b9:47:dc:be:05:
8c:fc:64:d7:1e:87:68:01:ad:7a:92:a3:3f:05:1f:c9:1a:7b:
39:d9:e8:78:06:33:f7:e7:ee:2b:60:a4:c6:c4:b1:34:c0:02:
bb:1e:39:74:a6:7d:45:2d:43:61:a9:17:1c:37:c5:ea:0a:3e:
3c:5b:cd:44:57:1a:44:81:59:1f:a5:9c:ea:e6:be:7f:18:aa:
a4:5d:62:82:5c:0f:39:65:70:c5:b7:92:69:9c:70:cc:90:e1:
a2:e0:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:55 2026 by rpki-client