
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier: u9j0Fp7j9Tq30PGLFWc0O7z4B80L0406O0P0cpbez2Q=
Subject key identifier: BF:73:BE:0C:D2:16:7B:7C:A8:80:F7:5F:71:E5:81:7E:DE:77:54:B8
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial: 0511
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number: 0505
Signing time: Mon 02 Mar 2026 00:41:17 +0000
Manifest this update: Mon 02 Mar 2026 00:41:16 +0000
Manifest next update: Mon 09 Mar 2026 00:41:16 +0000
Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: TeN4VJhm/WOAhtwjv9XBnsB7BiG/exoCNpc77LVggPc=)
2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: voztcrzhiVsnEEDAL+kh/aaIgcYKoM5wE79GPvMJ4lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Validity
Not Before: Mar 2 00:41:16 2026 GMT
Not After : Mar 9 00:41:16 2026 GMT
Subject: CN=69a4dcad-5559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:88:d7:9c:95:96:a8:8c:6d:35:56:c7:37:
a8:ba:13:c8:65:18:23:b2:9d:cb:38:f5:62:78:60:
47:a3:38:3f:d5:06:9a:39:b6:f5:19:fb:d8:1d:7f:
6e:5a:3f:70:e4:34:9a:05:e2:87:31:22:66:b0:ec:
d6:49:3b:d6:61:ab:b0:c5:19:0e:5e:8d:1d:0f:02:
e3:35:01:ef:a4:82:35:1b:86:c4:22:a8:8b:f4:a1:
5e:1d:9a:6b:bd:d8:cd:2f:32:fa:1e:29:e6:32:7d:
a6:0a:85:1e:e9:4c:93:94:2e:75:47:6d:b6:b1:15:
98:f0:2d:b9:2d:26:88:79:1a:76:ec:79:4f:71:e9:
7c:e7:ae:cb:2b:86:41:71:b7:01:42:58:c8:f7:af:
7b:86:fc:d8:06:d8:8d:02:e4:6e:49:57:5d:83:f6:
95:42:7b:5e:b4:65:53:5b:d6:48:d1:1e:9c:91:d0:
1a:9e:75:36:e4:bc:0b:01:38:3b:b8:d5:c8:dc:80:
19:f8:13:5d:19:c3:75:24:26:f0:72:85:e8:65:1d:
ba:a4:cc:ed:b9:e6:f6:fe:ad:e3:3b:a7:73:6a:63:
03:51:28:68:4b:d1:3c:31:b4:28:98:62:15:6e:9c:
e6:fc:f6:15:d0:7d:98:3e:70:8d:2f:d2:2c:0e:2b:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:BE:0C:D2:16:7B:7C:A8:80:F7:5F:71:E5:81:7E:DE:77:54:B8
X509v3 Authority Key Identifier:
keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:84:9c:27:0a:23:a8:51:2b:c7:f6:c5:81:a3:d1:fd:08:2e:
08:b4:00:66:7c:c8:21:39:22:0f:fd:8a:69:f0:6f:0e:c7:45:
37:88:fb:2d:a6:45:60:66:d1:ce:31:c3:51:20:14:a1:51:1e:
f1:28:d3:12:58:9d:12:59:29:29:1a:87:9f:60:46:66:f6:d1:
82:f6:fb:94:bc:68:2a:9a:26:44:4a:03:e7:ca:ac:cb:ae:0f:
4d:b2:e5:17:7d:6c:b8:2d:7a:d7:37:ce:0a:7e:b7:13:3c:0d:
0b:6d:06:8a:04:20:c1:df:89:6e:bc:17:43:fb:90:68:0d:34:
d9:92:bf:6f:c5:42:99:43:ed:93:0c:d1:f2:58:27:14:1d:ac:
e6:64:14:fd:21:23:3a:e7:82:f5:ac:fb:31:3f:35:01:54:cd:
d5:1a:d4:1f:50:ee:fe:b6:56:e8:22:f8:2e:a2:a3:7e:9a:b6:
60:1b:4b:32:e9:0c:f8:61:e3:25:36:1b:cb:c6:78:cc:09:6c:
a9:18:2e:0b:8c:1f:9e:05:d2:fd:d1:21:55:d4:38:af:ef:18:
a1:c5:d8:b6:4f:86:e2:d9:a9:19:57:cd:88:c2:ca:80:7f:7c:
2a:88:cd:20:c6:0a:f6:bc:93:2a:c3:29:8c:3d:2e:2c:d5:c5:
c3:5a:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:47 2026 by rpki-client