
$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json)
Hash identifier: pQOIZsKqOtr/FT5j/5j4yZ6E55lnmbXizMqsT1KMO/c=
Subject key identifier: A0:55:27:CA:BA:1D:62:84:0B:F7:93:6C:2F:02:00:B5:28:3E:A3:59
Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
Manifest number: 01EC
Signing time: Sun 01 Mar 2026 04:03:25 +0000
Manifest this update: Sun 01 Mar 2026 04:03:25 +0000
Manifest next update: Sun 08 Mar 2026 04:03:25 +0000
Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: M7tHqa7WaF0vJRASsDftv+LLeMiuhlJfW/dJKtW0srg=)
2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: Ae2kzkiPbHsneEUo3gobHEERA3S8mH2dAIJpdvxeRck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Validity
Not Before: Mar 1 04:03:25 2026 GMT
Not After : Mar 8 04:03:25 2026 GMT
Subject: CN=69a3ba8d-6c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:fd:aa:92:d8:a0:35:8d:e9:09:6e:a9:df:
e9:88:1d:ae:25:85:5c:6a:45:7d:4f:32:70:fa:e6:
a3:b9:c4:a4:80:87:5e:f9:6b:5f:7d:3e:ba:1a:2a:
f3:8f:16:72:1c:a9:09:83:80:68:d1:ab:f0:08:e8:
a2:c0:56:51:01:e9:e4:14:52:8a:ba:17:ce:53:cc:
71:04:d5:57:50:35:a9:cb:e6:0b:43:6c:b2:f4:49:
ab:52:79:80:ce:29:10:fc:8c:87:7e:d0:88:5d:28:
cf:e1:08:a2:27:18:cf:33:13:dd:24:42:51:9e:da:
2c:b6:89:a2:68:79:ad:bb:85:66:17:0d:fc:df:2e:
01:ef:11:70:37:d0:20:90:f6:1b:1b:8e:61:7f:1a:
8b:f5:ef:87:07:b0:8b:d8:02:df:24:06:27:ed:d3:
0f:23:0c:a9:18:37:95:6a:a2:f6:53:80:d8:8b:2b:
6c:f6:72:f8:4e:b8:e6:a9:53:f2:3b:1b:28:85:5c:
18:bb:d5:81:9b:82:7f:62:22:36:80:c0:2d:f9:05:
2b:81:43:e7:94:b4:f8:10:91:fb:2e:ed:74:4a:79:
25:a0:18:cc:b1:c3:27:74:cf:1a:13:6c:8c:e1:87:
d3:45:5b:c0:2c:18:eb:20:ab:08:cd:d6:25:1c:a6:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:55:27:CA:BA:1D:62:84:0B:F7:93:6C:2F:02:00:B5:28:3E:A3:59
X509v3 Authority Key Identifier:
keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:dd:52:87:13:b1:7f:f8:c5:63:94:84:ed:07:61:c4:a9:ab:
4e:0c:3c:bb:b8:e4:b2:22:c8:70:79:23:ab:c9:2c:6b:fe:b9:
03:b9:9b:bd:89:09:74:18:d4:96:9b:be:4d:04:b5:58:bc:e8:
76:73:d3:97:82:70:02:00:09:6a:21:22:5a:a1:5d:30:a3:8c:
81:a1:f1:61:0e:c7:6a:7e:5d:5f:a7:7b:11:59:16:21:9e:f1:
c0:31:82:6c:1e:98:fa:f4:63:d0:5e:37:71:40:3b:ff:03:3e:
fa:7e:05:f4:be:a7:03:53:3a:38:19:d8:ac:51:11:3d:93:52:
d9:fe:e5:34:8c:b1:86:07:90:23:b5:a6:9b:8b:b7:a0:b0:56:
35:6e:36:9c:23:53:1a:74:60:54:12:9f:99:46:eb:d0:b0:b1:
df:8d:df:5d:c5:be:b1:e9:a5:4d:ee:27:3c:88:28:78:00:a5:
5d:7b:57:57:7c:1a:91:3f:2d:d8:fa:03:4d:74:d5:fb:75:a7:
5e:24:84:2b:83:68:16:55:f7:3e:fc:4c:7b:f9:f5:f2:21:e3:
f9:0c:65:45:f3:d6:60:a9:a7:25:ed:7f:c8:af:1e:7c:df:46:
93:ad:75:5f:68:45:cb:88:a1:a1:1c:eb:74:66:75:35:71:1d:
56:23:6b:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg0NUIxMTAvBgNVBAUTKENCNzRENTYxM0Q3MzQyQ0ZCOUI3Rjc5REVGMEM5RkFE
ODg1Qzc4MjIwHhcNMjYwMzAxMDQwMzI1WhcNMjYwMzA4MDQwMzI1WjAYMRYwFAYD
VQQDDA02OWEzYmE4ZC02YzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqwD9qpLYoDWN6Qluqd/piB2uJYVcakV9TzJw+uajucSkgIde+WtffT66Girz
jxZyHKkJg4Bo0avwCOiiwFZRAenkFFKKuhfOU8xxBNVXUDWpy+YLQ2yy9EmrUnmA
zikQ/IyHftCIXSjP4QiiJxjPMxPdJEJRntostomiaHmtu4VmFw383y4B7xFwN9Ag
kPYbG45hfxqL9e+HB7CL2ALfJAYn7dMPIwypGDeVaqL2U4DYiyts9nL4TrjmqVPy
OxsohVwYu9WBm4J/YiI2gMAt+QUrgUPnlLT4EJH7Lu10SnkloBjMscMndM8aE2yM
4YfTRVvALBjrIKsIzdYlHKb3MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBVJ8q6
HWKEC/eTbC8CALUoPqNZMB8GA1UdIwQYMBaAFMt01WE9c0LPubf3ne8Mn62IXHgi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQ1Qi85NzM2OUI0NjIx
NzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFzLTV0X2VkN3d5ZnJZaGNl
Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kzVFZZVDF6UXMtNXRfZWQ3d3lmclloY2VDSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODQ1Qi85NzM2OUI0NjIxNzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFz
LTV0X2VkN3d5ZnJZaGNlQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO91ShxOxf/jFY5SE7QdhxKmrTgw8u7jksiLIcHkjq8ksa/65A7mbvYkJdBjU
lpu+TQS1WLzodnPTl4JwAgAJaiEiWqFdMKOMgaHxYQ7Han5dX6d7EVkWIZ7xwDGC
bB6Y+vRj0F43cUA7/wM++n4F9L6nA1M6OBnYrFERPZNS2f7lNIyxhgeQI7Wmm4u3
oLBWNW42nCNTGnRgVBKfmUbr0LCx343fXcW+semlTe4nPIgoeAClXXtXV3wakT8t
2PoDTXTV+3WnXiSEK4NoFlX3PvxMe/n18iHj+QxlRfPWYKmnJe1/yK8efN9Gk611
X2hFy4ihoRzrdGZ1NXEdViNroA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:25 2026 by rpki-client