
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json)
Hash identifier: yv4XtIqJp3+wklCYifvP31MUJIQarz4/qhkVVb3165c=
Subject key identifier: 6D:21:15:4D:55:48:C2:3C:DC:25:D1:FF:8D:37:EE:47:EB:67:B6:ED
Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
Certificate serial: 04AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
Manifest number: 04A4
Signing time: Sun 01 Mar 2026 23:37:45 +0000
Manifest this update: Sun 01 Mar 2026 23:37:44 +0000
Manifest next update: Sun 08 Mar 2026 23:37:44 +0000
Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: AfOmLZ3NgZ4vXqkNlVgr1Rk5x/QlK7qLlArieDAaPPQ=)
2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: +cLlzkIBm/p8e2CGv26xzGqvHJz8gqLYzjwIGaKh6zM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl
rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
Validity
Not Before: Mar 1 23:37:44 2026 GMT
Not After : Mar 8 23:37:44 2026 GMT
Subject: CN=69a4cdc9-b164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:36:f5:b4:0f:a3:b9:d9:db:c4:da:d6:4e:
da:a7:84:eb:bf:af:27:22:65:1f:c5:ce:1e:24:06:
2e:4b:09:5b:b8:bf:1f:7e:e3:46:d4:68:32:22:98:
b7:50:1b:51:56:e8:9a:bc:46:17:74:57:38:b7:73:
97:6f:fd:dc:cd:03:9c:2a:f0:20:dd:ee:ca:dc:a3:
c8:8a:3a:1e:7a:97:eb:c7:77:a9:85:73:0a:3c:19:
4b:af:33:37:24:bd:8d:ae:43:7d:49:cd:99:a2:34:
38:d9:21:77:37:ca:2b:19:04:71:36:d3:6a:e5:83:
8e:1f:d5:05:2c:6a:77:2c:20:1a:d3:59:9b:19:12:
c7:c0:de:6e:74:57:42:b0:1f:71:ea:22:61:6f:82:
c7:b1:48:bd:c3:c6:47:ec:bc:0d:f4:83:d6:0c:a4:
e5:f0:00:d2:4f:4a:cd:b4:ab:8a:23:19:38:c9:aa:
bc:55:4c:60:03:2d:1a:3d:b5:00:67:6e:59:e7:78:
94:3a:1b:d0:47:b0:b7:ed:18:e8:05:5b:bb:2d:e8:
47:f2:38:49:33:87:ad:a2:06:7b:9a:c0:32:08:af:
de:51:6f:95:16:6b:62:10:6e:99:2e:b3:a5:87:9f:
a7:87:f8:2a:80:d5:8b:87:e5:7a:be:97:ac:9d:c2:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:15:4D:55:48:C2:3C:DC:25:D1:FF:8D:37:EE:47:EB:67:B6:ED
X509v3 Authority Key Identifier:
keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:18:dd:5b:dd:f0:b0:5f:48:07:e0:cd:94:ab:cc:39:23:a7:
6b:11:e7:34:3e:91:43:0c:cf:7f:5e:58:53:50:ef:02:52:ea:
f1:95:bd:c6:f7:0e:75:ca:b5:66:63:61:7e:d8:f0:91:cf:de:
a0:d3:aa:a8:b6:79:91:c3:bc:56:b5:32:c3:b2:cd:e6:1a:0f:
7f:f4:22:cc:d3:42:0c:7e:bc:05:f3:46:86:52:80:e0:f8:c5:
25:b0:19:90:cc:7a:1e:6a:73:15:10:61:23:3b:51:b9:98:a4:
17:ce:2a:32:61:54:38:14:4f:c5:08:eb:a3:7c:ba:b5:fc:09:
a6:ca:95:d6:1f:f9:c7:a4:ab:36:5b:cd:c0:78:77:cb:0d:1e:
f2:0e:5b:e0:65:f0:2e:d9:02:d7:03:02:42:2f:ca:6d:8a:2a:
4e:cc:7c:7b:72:50:1f:00:85:7f:3c:69:6a:e8:da:3c:31:9f:
c7:0c:9f:43:07:98:db:e9:30:20:c7:9d:ce:53:ba:5c:74:e5:
c9:3a:d0:18:9f:62:10:34:53:4e:d7:e1:63:e7:82:80:51:22:
60:2d:4a:e2:b0:8a:df:5a:92:ee:be:b1:93:c6:47:d5:3e:ea:
8a:eb:a1:42:74:27:7b:77:d2:ba:69:96:fe:8e:f3:15:2c:48:
5c:8d:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:22 2026 by rpki-client