
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier: ohbNfBwjqmCe44JBIKlSYKe1/f18YJKd4Ua5x/8mDuc=
Subject key identifier: 87:83:BB:A4:A9:E1:8C:4A:2B:76:F2:4E:AC:EE:56:98:FA:FA:60:31
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number: 01EE
Signing time: Sun 01 Mar 2026 04:26:10 +0000
Manifest this update: Sun 01 Mar 2026 04:26:09 +0000
Manifest next update: Sun 08 Mar 2026 04:26:09 +0000
Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: MqCdnYjBWRtyNP+zCWQc8dHqrBxjbDZ9CE7c/P1GEy4=)
2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: zdwZO0F8HmTS0a7Wa5QQzty6jheoVPgBvRYPbS/dvxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Validity
Not Before: Mar 1 04:26:09 2026 GMT
Not After : Mar 8 04:26:09 2026 GMT
Subject: CN=69a3bfe1-d681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:63:b9:d4:df:bf:7b:73:1e:3a:aa:fd:9e:
a8:c7:95:b7:ea:17:a8:04:44:ce:4b:3a:63:68:e0:
9c:17:1c:de:32:3f:64:de:8a:a6:6a:7f:de:54:a0:
9e:88:46:b0:91:da:fd:31:41:22:b0:e0:21:a2:b5:
d5:55:89:26:ab:2e:9a:f1:98:e4:80:6f:6a:13:2b:
5e:06:e1:e5:2c:d3:b2:d7:8b:e1:ec:b7:42:f5:86:
46:3b:e3:15:53:8f:8a:b0:b5:d2:15:dc:16:b3:50:
9a:a3:8b:79:e8:57:5b:55:fb:43:ea:93:25:61:12:
b6:26:de:8a:d0:f1:89:de:c3:be:63:6a:31:17:69:
21:2e:62:94:1a:b9:42:4a:10:d1:79:27:69:47:eb:
4e:b2:17:38:6e:32:82:6f:12:56:4c:78:75:81:8f:
48:26:2b:ee:70:9d:13:36:7f:31:ec:c7:fb:08:a8:
a2:a7:50:3d:56:49:3d:0a:50:7e:a3:d7:14:8f:a5:
db:d1:0c:00:1d:0d:7e:96:55:b7:96:98:22:00:8a:
70:2d:e5:63:94:d9:03:d5:f6:64:3b:63:6e:ee:85:
c3:ea:31:31:b7:eb:9d:0b:17:ab:9c:d1:a2:ab:2b:
0f:7e:e2:54:4d:cd:85:45:b0:64:3e:03:53:60:57:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:BB:A4:A9:E1:8C:4A:2B:76:F2:4E:AC:EE:56:98:FA:FA:60:31
X509v3 Authority Key Identifier:
keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e8:71:5b:6e:e0:61:4f:a2:f0:42:28:95:3d:d1:3c:17:87:3f:
56:4e:8f:ab:dc:3b:43:c0:69:29:a8:40:b2:b3:7c:b1:36:03:
1c:6c:a3:f0:97:ef:6b:32:aa:45:d6:3b:d7:ce:7b:19:97:d2:
bf:33:f0:75:82:96:ab:f8:5c:f6:dd:7e:ce:35:7a:9c:c1:a4:
96:03:0a:2f:0f:23:84:8e:47:30:62:67:d8:e3:ae:74:d4:e0:
1e:bc:08:53:14:18:94:c9:b6:ab:ad:bb:63:af:de:e9:a1:3e:
d0:2e:12:b1:0d:f2:4e:33:b6:de:06:1c:f3:45:ab:db:7c:de:
14:3f:ff:5a:e1:c3:e7:a4:e6:ef:21:8e:9f:3d:76:8b:a5:23:
e8:7f:96:52:5d:fb:52:ae:c4:da:14:47:eb:b2:cf:cf:e2:2c:
8b:c5:70:80:68:7c:f2:78:58:6b:d5:e3:ca:f4:30:24:b1:bf:
6b:95:60:37:b1:81:57:9b:18:bd:cc:70:fb:f6:d4:74:04:c7:
4b:75:b4:e5:12:45:a5:bc:94:66:32:61:68:47:a0:39:99:b5:
cd:25:a0:d2:7f:12:11:9e:21:51:91:1b:1e:7b:ac:43:0c:65:
59:7f:af:f4:5e:51:52:ae:51:b7:4f:b7:f6:7f:53:44:4c:05:
78:5c:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:44 2026 by rpki-client