
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
File: YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json)
Hash identifier: uVOohWcQmzKtLHTFRM40G5+xQlnS9zKSifxcDc4y5qc=
Subject key identifier: 50:18:26:51:04:49:6A:5E:4E:0B:E2:F8:D0:64:D1:79:AB:AE:B1:87
Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
Certificate issuer: /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
Manifest number: 0235
Signing time: Mon 02 Mar 2026 00:57:01 +0000
Manifest this update: Mon 02 Mar 2026 00:57:00 +0000
Manifest next update: Mon 09 Mar 2026 00:57:00 +0000
Files and hashes: 1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: C2KvMPMcwZaqmqHPHWq+o5z2/p79364d9hpXW0Bkv/4=)
2: BCAF365487C111F0AC525C39C4F9AE02.roa (hash: qXkatjQdk9/LRncp/cgGtu7Z2Y3FqEqyaJABgXad1Wc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Validity
Not Before: Mar 2 00:57:00 2026 GMT
Not After : Mar 9 00:57:00 2026 GMT
Subject: CN=69a4e05d-f68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:56:1d:f3:d4:88:82:de:d6:f4:9f:98:ee:
15:ab:de:a2:76:f4:7b:58:67:e4:88:47:e1:33:06:
83:f1:ab:36:bf:ef:b4:84:da:e1:ec:3c:80:73:6b:
a4:cf:66:44:31:4a:40:aa:0d:82:41:38:3e:03:aa:
fe:7b:12:9b:71:0e:18:38:8a:8a:11:b1:41:11:a9:
74:04:11:3c:32:b4:99:f4:5b:fb:8d:3a:75:8b:f7:
66:bd:3d:9b:2e:e1:d7:17:31:54:36:23:5f:15:18:
a1:e5:48:76:ca:48:03:13:46:3e:d5:5e:ee:d1:b0:
d3:d3:0b:67:9f:ce:99:6d:e4:09:94:b2:1b:0f:89:
34:ca:d2:21:8e:ae:f5:83:a1:0b:1f:06:34:90:67:
9c:b3:88:7e:e5:b3:55:84:5f:da:12:c2:68:cb:61:
76:ca:5c:67:2a:23:0b:de:60:b6:f0:81:f2:43:d9:
88:ed:1a:3f:7c:8e:c9:61:b8:33:91:25:84:1d:30:
1a:2e:00:9f:10:a6:7d:7d:6f:93:df:60:65:87:48:
2c:df:fc:a0:cd:8d:5a:9c:50:17:65:9f:05:06:2e:
d1:00:63:47:22:e0:8e:2d:77:37:f1:90:28:c7:1e:
bf:87:2c:6d:91:41:23:e0:75:a1:65:fc:b2:a1:28:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:18:26:51:04:49:6A:5E:4E:0B:E2:F8:D0:64:D1:79:AB:AE:B1:87
X509v3 Authority Key Identifier:
keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:9c:82:56:ee:92:33:0a:bd:c8:7c:0d:ba:4c:78:42:5f:0a:
ab:8b:ac:88:d0:9f:2c:2f:46:9e:3e:a7:b4:51:80:46:3f:6b:
8f:f1:a9:e8:e9:cc:1f:25:c0:ab:2b:ca:b9:79:69:3e:1d:28:
b3:84:62:4b:d5:6d:c4:b5:2f:28:a2:59:de:4b:99:1b:a6:6a:
b6:09:f6:00:3c:3a:f6:14:f4:b4:b2:6b:8c:23:3e:b5:8d:0b:
bb:a5:f1:da:98:ad:22:2a:e5:30:00:f4:85:84:7d:51:d3:b5:
e5:bf:c1:3b:22:f3:71:bd:4d:11:91:55:aa:1c:60:74:77:f6:
b0:6f:4b:17:0c:cf:79:2a:c4:3c:e3:45:e0:a7:8a:e2:49:ff:
68:c1:d3:a1:bb:50:96:02:ea:8d:dc:65:2e:04:f3:63:0f:c9:
6a:cd:8f:08:cb:73:da:cf:d4:24:5d:66:9e:c0:2c:a9:a9:2f:
f7:bf:b1:98:01:75:91:e9:d5:25:48:89:b7:67:1c:d7:f6:91:
6a:43:db:a8:3b:60:0f:df:ad:64:a3:a4:0e:5f:c4:fa:11:fe:
b7:79:52:18:22:32:1c:e4:05:db:a7:b4:96:23:e4:ce:08:de:
28:88:fd:63:5e:44:7d:48:b1:25:57:79:24:6c:ef:2c:80:cb:
da:4b:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:02 2026 by rpki-client