
$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
File: Y06sGbStSypNQSgRX59VZ5TMdSM.mft (raw, json)
Hash identifier: 9HFMSw1qIixqbRe7dm190Td/59ANsMRiXQB9CaH+BsA=
Subject key identifier: B3:23:0A:AC:F9:BA:DB:B3:E0:76:28:1B:15:DE:AA:B0:88:8D:3E:54
Authority key identifier: 63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23
Certificate issuer: /CN=A91647ED/serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
Manifest number: 33
Signing time: Sun 01 Mar 2026 10:03:41 +0000
Manifest this update: Sun 01 Mar 2026 10:03:40 +0000
Manifest next update: Sun 08 Mar 2026 10:03:40 +0000
Files and hashes: 1: Y06sGbStSypNQSgRX59VZ5TMdSM.crl (hash: SjL4Ltp+dA4JmAjwskNdIKmrbCEXTSpVGD/5J7H7ni4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl
rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91647ED, serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
Validity
Not Before: Mar 1 10:03:40 2026 GMT
Not After : Mar 8 10:03:40 2026 GMT
Subject: CN=69a40efd-8ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:6b:df:60:ce:c5:57:20:10:b1:4e:7e:b4:
fe:a7:68:9a:88:56:a6:73:d2:9f:ca:d8:de:82:c5:
2a:5c:89:b7:78:86:37:52:7c:31:b0:01:d8:6e:3a:
42:cd:0c:35:6f:c8:ba:e5:7c:45:51:dc:92:c1:2d:
07:1b:19:ee:a2:b3:f0:c1:69:1a:77:a2:fe:b9:b7:
1c:08:20:7c:ab:ff:d7:86:60:aa:c1:24:0d:92:46:
5a:40:6e:f5:59:7c:1e:e7:8a:4d:ae:e1:e6:10:a5:
8b:3e:ac:18:07:c5:17:1a:b8:26:cd:5a:36:c4:3d:
6e:bf:bc:66:d3:3c:71:fd:c6:87:e2:40:b8:72:06:
d2:0b:a4:0a:ee:24:55:b0:d8:38:13:fe:cc:f4:15:
63:a6:45:bf:ea:91:d0:30:85:0d:c6:67:97:07:c6:
79:e8:0d:21:1a:72:25:2c:19:86:82:b4:2e:6b:1b:
2a:d0:7d:e7:fa:37:b0:f5:ef:b7:ad:ce:df:03:6c:
e0:24:3a:c0:0d:d4:8c:c1:74:57:12:1e:b4:0d:6e:
f9:0c:32:1c:01:bf:e6:46:bf:cf:bd:55:61:a2:75:
2b:bb:f0:9a:36:68:00:2b:d8:15:9f:af:f1:3f:ef:
1c:d6:b1:5e:00:2f:10:2c:77:6d:02:38:56:be:58:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:23:0A:AC:F9:BA:DB:B3:E0:76:28:1B:15:DE:AA:B0:88:8D:3E:54
X509v3 Authority Key Identifier:
keyid:63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:0b:1f:d2:cd:d3:76:68:4a:b4:9a:53:16:c4:18:13:d8:
46:23:14:bc:25:d9:5c:39:57:25:c1:7a:c4:6d:02:64:35:58:
2a:40:67:73:dd:8c:43:24:e4:c2:57:07:0b:da:d4:ff:db:64:
9a:ba:96:12:3d:16:d7:c7:cd:f5:69:11:de:12:55:1d:18:fb:
cc:bc:a1:b0:e8:66:29:00:41:6d:c9:9e:a1:96:16:9a:ec:46:
8b:2e:f7:2b:ff:72:c0:7d:1c:f1:46:69:b2:f2:e7:a8:72:62:
73:4e:d8:6c:dd:29:74:17:16:81:96:1b:06:70:18:84:a2:11:
05:ac:f1:3e:51:7a:35:d2:24:1b:07:77:b8:5d:80:01:1f:d7:
47:53:44:ae:60:2e:c9:e0:20:f5:ce:d9:25:a6:c9:50:cb:3d:
48:ba:b7:52:48:37:a8:e4:6b:fe:fe:ea:9f:62:da:5e:9d:bf:
c1:3b:b5:ae:76:c9:16:a4:ee:fc:2d:18:13:2e:17:27:20:43:
f4:63:ff:4a:b5:81:70:45:32:58:ef:1e:b1:9d:a5:af:23:6e:
95:d1:63:27:15:0c:cb:6c:99:a7:ff:c2:ac:a0:72:10:8d:03:
33:72:20:49:d0:4c:e1:cd:75:7e:e2:66:f3:f3:a2:f6:00:00:
b0:dc:bb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:12 2026 by rpki-client