
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
File: YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json)
Hash identifier: iN3VjE35a55l/mJpfyET4LeVcXKGbQRBmhNyIetF6js=
Subject key identifier: EB:8B:1B:53:FB:46:AC:F9:84:45:4A:A2:9B:67:23:5C:52:76:83:BB
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Certificate issuer: /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial: 0A1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
Manifest number: 0A0F
Signing time: Mon 02 Mar 2026 19:41:51 +0000
Manifest this update: Mon 02 Mar 2026 19:41:50 +0000
Manifest next update: Mon 09 Mar 2026 19:41:50 +0000
Files and hashes: 1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: ygo7/F6SCRR3FBvAA9pFtAVxGNMQWAVXyGM6dQnmgJ0=)
2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: h1FScDmATHfunMcIYToAdhRcFfBgHG5Y3p1Jl4Wlwi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2586 (0xa1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Validity
Not Before: Mar 2 19:41:50 2026 GMT
Not After : Mar 9 19:41:50 2026 GMT
Subject: CN=69a5e7ff-3361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:9f:cb:66:cf:ba:e3:5c:3e:9b:a0:71:2a:
4a:3b:9e:c3:69:a7:34:c5:08:2d:c1:e4:19:11:9e:
08:6f:d8:be:78:47:b0:36:ec:42:8b:29:c6:5d:c8:
db:ae:76:c9:7f:1f:d5:83:ae:8e:49:6a:dc:ad:27:
4c:66:96:3f:93:1c:a8:6d:43:b3:fe:e2:26:da:26:
01:6c:a2:52:14:0a:81:80:bc:28:7c:71:4b:f3:a2:
cf:75:81:d1:c8:b2:a4:43:1a:3b:0e:cd:73:8a:e7:
89:7c:56:a7:36:74:ee:30:a0:b6:cc:87:b6:5c:75:
31:a6:66:8a:9f:36:f4:f4:a5:e1:6c:d2:9e:b2:9a:
9a:61:a8:eb:2e:41:f9:09:af:46:66:cf:47:61:ea:
ff:71:75:7d:6b:51:9e:10:95:fd:97:7a:34:60:0e:
6c:52:93:3a:ac:40:15:c3:bf:9c:ea:df:ae:14:2f:
a9:75:c8:6b:02:37:dc:5c:95:d3:80:92:62:ad:41:
73:10:ae:d6:ad:f9:54:0e:6b:65:9f:e0:55:e7:d8:
ff:d5:77:e1:31:2a:1a:d7:ec:c7:bd:90:f5:69:74:
78:c3:88:75:fc:3f:df:ea:89:d6:2b:bc:86:17:38:
64:d6:1d:ac:ce:35:9d:72:63:af:a2:ba:73:0f:ba:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8B:1B:53:FB:46:AC:F9:84:45:4A:A2:9B:67:23:5C:52:76:83:BB
X509v3 Authority Key Identifier:
keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:7b:b0:ce:bc:66:6c:67:b9:4e:82:c8:19:11:77:b1:c9:26:
4e:bb:45:73:fb:41:45:4b:f0:ab:93:2d:2f:9f:c4:7a:9b:2e:
25:69:2a:06:d9:59:97:87:6a:ac:30:3a:e9:f0:b3:6f:68:71:
86:b2:42:1b:e3:c0:ed:19:b1:ef:02:d3:25:5d:37:0b:a9:c5:
d5:e8:7e:02:ca:f0:48:3d:b0:c5:1b:46:3e:74:a3:3f:16:dd:
5b:2a:50:37:ba:0c:0a:97:5d:2f:d1:5f:d9:b6:2b:36:ba:82:
73:79:b7:d9:88:7a:7d:32:de:cf:b9:18:5f:35:10:35:b9:2b:
e0:e7:48:b4:e0:bd:ee:81:bd:f7:29:96:72:21:55:0a:38:a2:
c4:ee:39:7d:76:cf:f7:18:80:45:85:10:c3:b6:59:dd:21:18:
fa:32:07:b9:65:74:4c:87:a4:58:42:50:c1:f2:1d:4f:3d:02:
83:6f:89:4f:d5:32:bd:05:c6:3a:08:c3:ab:8f:ed:72:30:37:
de:76:9a:28:53:7d:3c:63:20:3c:df:1c:f0:58:41:b5:5a:68:
ca:bd:84:c8:62:01:80:97:b9:de:b7:73:d3:e0:23:a1:d7:97:
f3:fa:5a:fc:15:11:80:c3:95:5f:9d:15:62:3f:a5:6c:a3:b0:
45:a0:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:46 2026 by rpki-client