
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json)
Hash identifier: +4xTT2R4Lk2zrJ3bB9VDisvVOQfZHAFrHDFnqmwStnQ=
Subject key identifier: 54:47:A5:E9:57:B4:61:E8:5D:02:F1:B3:66:CA:FA:F3:4A:1C:D1:1E
Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
Manifest number: 0283
Signing time: Fri 17 Apr 2026 01:45:51 +0000
Manifest this update: Fri 17 Apr 2026 01:45:50 +0000
Manifest next update: Fri 24 Apr 2026 01:45:50 +0000
Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: /u4i0V4dLHCEw0tSFeP36ZznM0SUI5o2MjFYJX2WG50=)
2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: B71votStEYYp/K2emTulLeZ6cRSZ/0mH+ncAa56QIjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Validity
Not Before: Apr 17 01:45:50 2026 GMT
Not After : Apr 24 01:45:50 2026 GMT
Subject: CN=69e190cf-b53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:f1:dd:23:bf:65:b4:c2:40:e1:82:dd:56:
7f:b2:a7:51:09:58:ac:4a:c2:a9:c1:86:39:66:f2:
df:a0:7e:45:eb:a3:d2:d2:a6:4a:61:88:4d:80:6c:
58:50:68:42:94:a5:d1:f1:26:cc:16:aa:f8:b1:e1:
c6:b3:b6:00:99:58:1a:d8:ad:a2:03:2c:5f:38:b0:
e7:46:5e:d5:55:ea:2d:8c:db:ac:52:4b:69:af:3e:
72:b9:8c:93:f2:05:96:a6:54:38:1a:48:8b:3b:79:
f1:f2:1c:be:80:c7:41:6b:01:7f:62:6f:d4:6a:9b:
a3:a3:9c:51:77:a3:10:af:5e:b6:f6:18:bf:59:f7:
68:3c:3f:2a:ce:a9:27:8c:07:33:89:79:ab:d0:8f:
b9:a9:cd:33:66:ab:eb:71:c8:e7:73:14:4d:54:e2:
fc:c1:cc:db:f0:bd:6c:4d:46:61:af:7c:36:0e:b9:
ab:28:9b:4a:7b:6f:b0:fb:4a:1e:99:01:03:08:21:
f2:8f:c7:62:01:d2:de:58:8f:64:13:74:70:3a:24:
ff:ad:66:3d:bd:b5:eb:b4:2e:77:1e:c4:b2:7f:c0:
2b:e2:58:d6:b2:7b:e3:ce:03:10:9e:07:37:45:18:
14:f9:82:bb:1d:da:d1:d0:ed:77:81:86:2a:4d:46:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:A5:E9:57:B4:61:E8:5D:02:F1:B3:66:CA:FA:F3:4A:1C:D1:1E
X509v3 Authority Key Identifier:
keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:1e:d1:c6:e8:8d:fc:97:37:98:9c:21:95:91:ad:34:16:79:
70:dc:7a:84:69:ec:a1:a3:40:79:16:2c:ec:50:74:88:e4:00:
09:d1:8b:ac:0e:bd:2e:79:c6:aa:77:b9:02:44:72:49:aa:a1:
d4:91:3e:45:2d:c4:72:f3:12:03:8c:ab:f2:d9:ef:0a:04:98:
eb:b2:20:d1:36:61:dd:06:3b:8b:c3:6b:4b:fb:79:bb:fc:ed:
cf:7e:93:5c:94:d6:57:03:ce:ed:81:2e:55:33:af:52:ca:ef:
ad:38:72:ef:d5:b0:03:99:22:7d:18:15:24:1a:96:bd:8f:e6:
56:60:35:a8:27:8e:b8:05:de:1a:73:18:c0:b8:10:f0:ee:eb:
49:93:a8:52:68:37:51:7b:a4:4d:62:40:0d:1e:4f:ce:0a:0d:
6c:14:94:08:0e:ea:23:f4:95:a8:9a:33:e0:4c:2e:74:62:83:
ac:c9:77:d1:25:92:07:1b:9f:c5:1a:95:d0:c9:be:21:0f:5b:
14:bc:f3:a8:15:1f:8d:d7:2b:16:0d:80:ac:98:71:a5:9b:94:
cb:77:63:4c:2d:3e:7e:bc:2f:74:c5:06:a6:44:ec:0b:a8:cb:
09:a5:1b:ef:b2:97:b6:45:1b:eb:c8:8e:af:79:db:c6:5c:d1:
0c:c4:9e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:00 2026 by rpki-client