
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
File: YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft (raw, json)
Hash identifier: 6rVL/szOWEerCVGFQV8zln0qsuNDgLpCAI4w9h3Bb84=
Subject key identifier: 5F:E1:6B:35:71:02:EA:98:1E:11:1A:EF:28:C2:A7:F9:A3:A6:02:24
Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
Certificate issuer: /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
Manifest number: 3E
Signing time: Fri 17 Apr 2026 08:13:15 +0000
Manifest this update: Fri 17 Apr 2026 08:13:14 +0000
Manifest next update: Fri 24 Apr 2026 08:13:14 +0000
Files and hashes: 1: YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl (hash: sCj4CFmIRqZI09be8kwo4h0Ae1+kDZfKJJiL+8zSwwo=)
2: F50431A0E48511F0BEFBEDFF436F56BC.roa (hash: biBbqFto51rOZiPG5JNmrRxR/U8JC7IUfuy2q4b9zao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Validity
Not Before: Apr 17 08:13:14 2026 GMT
Not After : Apr 24 08:13:14 2026 GMT
Subject: CN=69e1eb9b-f801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:8c:6b:d1:dc:77:93:a9:56:6e:56:b1:db:
a7:7b:3c:0d:91:c6:a4:5f:68:2a:37:08:ef:73:00:
4a:3d:d3:bd:14:73:c3:81:d4:b5:fc:32:8a:e0:f1:
ff:20:4b:04:ce:3e:07:d8:7f:57:36:27:cb:c9:90:
40:8b:98:54:2f:43:f9:57:b1:6c:5a:4a:fc:70:b2:
8f:bd:7c:db:1a:3a:fe:30:72:74:2e:e4:68:d6:65:
5a:db:c4:0a:5d:69:29:a3:f8:67:e6:48:8a:fb:d0:
b3:b9:a3:7b:88:73:24:03:70:1f:63:1f:2d:43:9e:
f8:78:c8:66:8f:c1:bf:47:98:fd:a3:f1:4a:ce:23:
66:85:3d:d1:8f:e6:d0:50:82:f8:b6:d2:69:59:02:
91:19:1b:ad:83:59:8d:1d:d1:e0:b0:4a:e6:dc:2c:
0b:13:c3:e1:9a:40:a9:32:b2:a2:f8:ce:ae:54:46:
ab:dd:ed:42:68:0b:94:2e:c4:a1:68:c8:cb:2d:90:
2e:aa:c9:69:1e:7d:f1:0f:91:64:3b:2b:ab:33:52:
c7:b7:35:1c:6e:bc:c4:bf:96:27:b4:fa:89:2d:b2:
29:a1:a2:b3:a7:01:a6:39:23:a5:22:ea:02:02:c8:
e4:6e:82:57:9b:fe:7c:d4:1c:e3:67:b0:9a:13:88:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:6B:35:71:02:EA:98:1E:11:1A:EF:28:C2:A7:F9:A3:A6:02:24
X509v3 Authority Key Identifier:
keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0b:80:64:8c:e2:43:72:e2:18:39:c7:90:0a:c7:2b:b7:60:
5d:02:80:e9:c1:8c:d6:a0:0e:18:e5:fb:b4:79:e4:30:80:c0:
8e:0d:5f:2d:4c:0d:3e:e0:59:73:16:50:b4:6b:99:1b:aa:2c:
80:c5:50:0e:27:35:9f:2e:4b:f8:0a:df:2f:c2:a3:f3:eb:d0:
76:a1:ca:02:b5:2a:fe:56:a4:bc:88:5e:f8:57:d7:52:1d:ef:
75:1e:59:a0:11:53:80:1e:3c:52:0e:8a:55:e5:bb:52:03:01:
83:dd:ce:98:cb:8d:22:36:df:fa:f2:d2:dd:ac:d4:07:86:f6:
5a:24:f5:b3:ad:f5:bf:58:be:96:a8:d5:b9:86:3e:e4:7d:7e:
2b:27:28:14:fc:8e:30:e8:77:cb:3a:b5:b4:e5:00:6e:cf:f3:
d4:4a:ef:a8:e1:58:2d:d2:fb:5c:c3:a0:f4:3a:03:87:27:0a:
b0:a3:c1:f4:0e:f7:94:04:e3:25:6b:db:56:2c:15:cb:21:17:
a7:44:e5:98:e5:9b:34:32:1f:63:3c:d7:77:34:82:8a:56:b5:
16:c0:07:57:8e:16:67:67:8d:6b:98:b6:c4:d9:98:33:4d:ee:
4c:57:6e:d4:08:de:16:b2:94:29:01:ac:4c:c8:d1:43:5e:e4:
fb:27:30:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:56 2026 by rpki-client