
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json)
Hash identifier: QrP6cnlTdt2qE8h12LtxDo6Pm8Ts87ZjvfDPy9CQvuo=
Subject key identifier: 5A:D8:E4:AE:04:58:AC:79:B2:AD:E3:78:BA:05:1E:25:D6:BA:17:E8
Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
Manifest number: 026B
Signing time: Mon 02 Mar 2026 02:28:41 +0000
Manifest this update: Mon 02 Mar 2026 02:28:39 +0000
Manifest next update: Mon 09 Mar 2026 02:28:39 +0000
Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: o2V4uTK41MSpwweHiSMCDQowsOhQwK1lMfr2rFlBdqg=)
2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: B71votStEYYp/K2emTulLeZ6cRSZ/0mH+ncAa56QIjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Validity
Not Before: Mar 2 02:28:39 2026 GMT
Not After : Mar 9 02:28:39 2026 GMT
Subject: CN=69a4f5d8-7b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:ae:7e:64:3c:3d:34:57:45:e8:66:44:84:
e4:6b:4e:92:41:2b:e2:51:7c:cd:e4:2f:f9:07:6c:
1a:a2:98:51:f1:ca:f6:49:9a:dc:cd:d6:6b:ee:d8:
2f:5e:c3:8b:a9:77:9a:5f:93:66:cc:a5:1b:10:7b:
94:d3:04:a6:93:67:98:fa:65:88:1d:9b:4a:e0:94:
f5:c8:91:a1:24:41:f4:30:06:cf:fe:22:8d:3f:7a:
32:ce:7b:cb:ed:c6:69:e0:8c:eb:c4:f9:c3:cf:2a:
0b:cf:1a:b2:9c:22:68:91:df:fc:bc:c5:d8:a9:85:
cb:1d:a3:78:de:91:8c:23:eb:76:20:17:d7:16:77:
33:f5:bc:4f:6d:c2:d7:3d:c3:25:11:43:0f:f4:8c:
14:1d:8f:de:2b:df:46:4d:07:62:5b:e9:b4:fb:88:
30:9b:ae:99:b2:79:e0:8b:4c:a7:53:63:c3:bc:d1:
c1:49:2e:16:ea:ca:09:f4:3b:69:f7:fd:da:5a:c0:
af:6d:e3:bf:de:4f:a8:a6:06:3e:ee:9e:cf:bc:c2:
47:ed:84:6d:b3:04:85:56:35:d7:e2:94:2f:0b:ae:
f2:eb:0c:fa:46:8e:d2:52:4a:91:2e:72:bc:0c:4c:
af:7f:73:ab:e4:32:28:33:ce:c0:f2:28:9b:bb:80:
6d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:E4:AE:04:58:AC:79:B2:AD:E3:78:BA:05:1E:25:D6:BA:17:E8
X509v3 Authority Key Identifier:
keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a4:44:95:5a:73:10:06:70:90:55:0a:5e:1c:4a:99:12:bf:
6a:7f:b5:b8:a2:fd:fe:aa:ce:15:79:7c:66:5a:2e:f3:05:d5:
b4:63:04:54:c1:a8:bf:0f:8e:fa:93:0b:91:73:7d:43:87:f1:
38:4e:0c:44:a9:54:a4:fe:c2:6a:02:e0:96:c4:b9:9d:65:4f:
d6:6a:59:7b:2b:5d:e5:46:0b:5e:ec:78:79:07:d4:04:8b:f9:
f4:a0:5e:d7:3a:7c:56:8b:a8:37:7a:47:d9:80:e3:47:7f:1f:
b9:44:b9:5f:14:0b:f5:58:21:7b:1f:03:b8:c5:4a:b3:a3:59:
a2:a1:fd:46:2e:cc:4c:d4:bc:96:34:03:50:35:3d:05:05:ec:
3f:de:7c:f6:ce:a0:f2:e3:be:59:18:15:a0:4e:8b:39:4b:4c:
bd:05:72:13:f7:b9:b2:75:0f:76:c8:b5:f0:92:eb:87:d2:57:
6a:2e:9c:1f:64:58:2f:da:8a:92:c8:c2:83:bb:34:b7:e5:3c:
b9:fe:8a:50:5e:73:ea:8f:2f:11:2c:b3:fe:64:56:cf:13:35:
53:5c:d8:3b:34:cf:17:9c:b2:72:93:b1:25:f3:c8:d3:27:89:
d4:e7:d0:52:67:10:a2:8e:ef:9f:83:15:79:2a:28:aa:f6:db:
37:78:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:32 2026 by rpki-client