
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
File: yH_T4kCIpNnfHF0CaFII6Qph7_c.mft (raw, json)
Hash identifier: /tL7ZETyk/AAK7dJBYH/GsMckYIXDGy7eKFkfY89QCE=
Subject key identifier: E2:36:71:0D:F9:74:40:28:DD:E9:C8:E2:6E:BB:3B:1B:73:DF:F5:3D
Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7
Certificate issuer: /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
Manifest number: 0231
Signing time: Fri 17 Apr 2026 02:23:42 +0000
Manifest this update: Fri 17 Apr 2026 02:23:42 +0000
Manifest next update: Fri 24 Apr 2026 02:23:42 +0000
Files and hashes: 1: yH_T4kCIpNnfHF0CaFII6Qph7_c.crl (hash: Qjaz2DUGs1slgGfSMorpBhL2G8IdV4zIda6ZzYq+mYs=)
2: CDE70CB2E52011EDB505E014C4F9AE02.roa (hash: rmrewBXxG6n9T9lJyYuYh35ZNnNwGQOX9gsrKAmWQ9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl
rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161065, serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7
Validity
Not Before: Apr 17 02:23:42 2026 GMT
Not After : Apr 24 02:23:42 2026 GMT
Subject: CN=69e199ae-a0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:14:63:7d:4f:6d:94:11:a9:d6:71:a4:9a:
28:48:75:95:a6:cb:f9:c2:a1:74:60:23:88:1e:47:
86:ab:69:82:82:fb:6e:6f:7e:19:50:c9:8b:ea:b7:
35:41:e3:94:fd:14:a7:76:aa:ea:bc:6c:ce:66:04:
1b:f9:02:59:ed:d5:28:d4:1d:d5:ee:a0:5c:96:86:
04:95:67:31:60:40:fe:3c:37:81:75:df:16:9e:23:
b6:70:64:84:76:06:05:18:fe:ce:5d:9d:21:8d:91:
66:1a:b9:1c:53:6d:57:7f:8a:4e:8b:c0:50:ba:9c:
cb:e7:ef:73:6d:cf:e8:af:6d:f7:15:bf:9e:ea:59:
8a:e6:6b:5a:f3:e2:e8:b2:a8:d9:72:70:e3:13:b2:
f2:da:eb:85:af:dc:38:0a:2e:91:b1:85:56:15:60:
ce:55:d9:e4:2a:bd:13:21:56:9d:32:54:7c:22:81:
fe:ac:f4:72:3e:01:e1:b9:8a:0e:6e:a5:3a:c2:ce:
1f:0f:ed:aa:04:cd:46:4c:45:95:b8:7c:99:77:c9:
c2:80:5c:30:59:5d:d2:32:41:a6:3a:66:0a:8e:f8:
04:75:4a:f9:c0:ad:c7:15:d9:06:7b:04:b3:54:1f:
e6:af:d1:d0:17:0b:99:bc:31:4f:aa:21:be:bb:d2:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:71:0D:F9:74:40:28:DD:E9:C8:E2:6E:BB:3B:1B:73:DF:F5:3D
X509v3 Authority Key Identifier:
keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:0a:f0:77:ca:97:a1:f3:c5:90:c5:a8:a4:ab:fe:d2:5e:7d:
1a:d1:57:eb:16:8e:03:7c:da:7c:5b:13:46:60:b9:cf:95:37:
c8:a7:ca:c5:8d:15:89:73:4d:a7:d9:b2:bd:ec:86:ba:85:80:
3d:02:78:f2:65:6d:1d:18:b1:9b:99:2c:eb:af:f2:cd:dd:8a:
0e:06:3c:7f:87:26:e3:51:91:41:63:32:fc:d3:c9:4e:e1:87:
54:50:f5:de:40:be:44:bf:42:16:a2:d8:90:88:77:fc:5e:fd:
ec:ae:1e:13:68:27:48:18:80:20:1b:fc:d7:e1:b8:e3:89:61:
76:4e:c5:b0:5d:67:e9:b1:f7:f0:53:5d:d1:da:1d:e3:da:31:
f2:52:ee:4f:3e:12:56:28:9d:47:8b:2b:42:e9:e2:94:4d:e5:
20:19:87:75:5d:6e:bd:9d:d4:59:1b:fa:20:0c:a3:e9:b1:22:
43:b4:cf:bf:ee:bb:df:e3:8d:15:bf:6d:c0:35:62:e6:48:d6:
c0:92:e8:b2:ff:bb:a6:23:4f:87:80:f9:e3:6a:09:47:c1:4d:
ee:f4:53:82:95:71:63:e6:52:eb:bd:11:fd:db:86:f6:1d:ea:
26:0f:06:73:ba:f3:d4:0f:68:33:24:40:2d:f9:a2:cf:09:2f:
8e:2c:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:34 2026 by rpki-client