
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
File: yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json)
Hash identifier: 4NXnO9y2SatYm8bZx81/jHYVr6z2/0NLGrlT7g6FTIk=
Subject key identifier: 88:A2:18:0D:87:EC:F1:F9:61:0E:9F:D9:00:CC:DD:1C:58:CB:C2:EA
Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
Certificate issuer: /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
Manifest number: D2
Signing time: Sun 01 Mar 2026 07:55:13 +0000
Manifest this update: Sun 01 Mar 2026 07:55:12 +0000
Manifest next update: Sun 08 Mar 2026 07:55:12 +0000
Files and hashes: 1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: VH+0nd7dNTH7BKJuTOjiyFQFp0KyGOld2RiMpuGilI8=)
2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: G1v5+8h/MYXTe3+eWlg2+RhrSnONlMU1fq7WMc3wQgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl
rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
Validity
Not Before: Mar 1 07:55:12 2026 GMT
Not After : Mar 8 07:55:12 2026 GMT
Subject: CN=69a3f0e1-cfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:db:2a:3c:21:e4:c4:1b:11:02:fa:8d:ff:
e6:76:7c:1f:43:1b:b8:36:ce:6a:60:22:58:aa:d3:
22:6c:1f:80:75:7e:5b:8b:d6:5f:73:d2:0d:a9:d7:
81:d0:3a:9f:2f:68:37:a4:1c:d9:28:ee:3f:de:75:
07:40:ab:f8:9e:9c:e2:9d:b9:9d:86:3b:b4:74:c4:
4b:7d:c4:c1:83:47:b9:04:25:fd:fe:d0:6b:59:77:
5c:87:2f:68:48:b9:9e:36:c1:66:b9:ba:dc:26:8d:
54:b5:b4:55:0f:3b:fc:65:1f:f3:da:9d:b1:db:16:
6b:90:ff:8b:67:d9:91:ee:84:f6:29:5c:ef:d9:2b:
66:54:3c:c5:07:f3:8b:09:a2:a3:c8:a5:a2:3f:af:
dc:99:ef:2e:f5:6f:f3:ca:17:6e:06:c6:c2:61:a1:
c7:a1:63:ee:f4:52:d9:1d:62:ae:5b:f3:bc:7e:46:
ec:90:be:3f:2d:6d:ad:8e:a1:f7:b3:63:8b:34:62:
ba:15:0a:8b:db:06:db:90:33:75:52:02:c4:77:bc:
c7:6f:23:2e:aa:ed:57:ae:e8:de:17:f5:cd:51:cb:
83:e7:7f:91:5c:42:de:d0:b7:53:68:ba:1c:e3:9f:
ec:4a:8d:f9:64:58:c5:39:7d:6f:2c:53:4d:5a:42:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A2:18:0D:87:EC:F1:F9:61:0E:9F:D9:00:CC:DD:1C:58:CB:C2:EA
X509v3 Authority Key Identifier:
keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:99:43:c1:8c:f4:e8:98:c4:ff:39:1c:20:90:76:64:ae:15:
a5:fa:aa:c9:d6:6e:fe:83:9c:a8:ea:71:79:d9:ff:45:37:57:
0a:57:5e:5b:07:1e:e8:ed:86:d3:06:29:5e:4f:40:3d:13:84:
e3:1c:f6:24:39:dc:13:6f:75:85:2b:bf:a8:64:de:44:27:6c:
30:22:9f:27:ed:b0:37:7f:ed:8d:0b:82:f0:89:12:2d:86:12:
b5:b8:0f:1e:e6:86:5e:e5:0c:2d:60:ab:f6:e4:37:69:c3:2a:
f6:d1:32:8e:2a:bf:5d:ae:dd:1a:12:d1:f3:d4:50:ca:3f:93:
74:51:b4:21:36:3c:6c:7f:65:0f:5d:0d:0e:74:6f:f0:03:1d:
af:22:48:d7:16:e0:1e:d7:b5:b3:3b:6b:97:23:9c:55:9a:c5:
ff:f1:f6:c4:1d:e6:0e:35:cc:be:d9:f8:92:2c:09:b9:a4:d0:
af:19:52:09:b1:2a:c5:59:fd:7c:16:e6:bf:b0:57:c6:d9:a2:
bc:ff:47:6b:93:f6:07:88:ed:65:bf:16:c8:1b:66:a9:01:9a:
43:2c:f7:4f:87:24:3f:ed:12:90:d0:99:a9:d4:2c:5b:07:a9:
e2:e3:2d:1e:4f:08:fe:00:44:6d:cf:cf:4f:77:d3:c5:44:a0:
bf:7f:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:24 2026 by rpki-client