
$ rpki-client -vvf rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
File: YhVbsAWcTchhU2ywUux1W6sWbD8.mft (raw, json)
Hash identifier: h+XKBnzeUTq27c8jEA5VVnnasAvBoTqRMGghEHFhF/A=
Subject key identifier: AA:10:07:14:1D:8D:79:A6:F6:26:87:17:FB:31:8A:19:EF:DB:02:71
Authority key identifier: 62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
Certificate issuer: /CN=A91978F7/serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
Manifest number: 5A
Signing time: Sun 01 Mar 2026 09:31:07 +0000
Manifest this update: Sun 01 Mar 2026 09:31:06 +0000
Manifest next update: Sun 08 Mar 2026 09:31:06 +0000
Files and hashes: 1: YhVbsAWcTchhU2ywUux1W6sWbD8.crl (hash: zxk99ifxel7EWwZB/EqAAe59RzXipawTYNzpPkIBhxI=)
2: 87C69A4E8DEE11F0A7999742C4F9AE02.roa (hash: AF9EblqIIR14Jg1fqI/l7p20Pg6bE92rpu7Zvd4y37I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91978F7, serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Validity
Not Before: Mar 1 09:31:06 2026 GMT
Not After : Mar 8 09:31:06 2026 GMT
Subject: CN=69a4075b-97a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:bd:d0:27:a8:ad:79:0c:36:50:aa:ba:f3:
b1:c7:f7:cd:b6:63:2a:c6:8e:3b:d6:0e:1c:95:1d:
47:07:f6:6b:b7:f1:25:e2:f6:43:ba:1f:d6:2c:37:
f1:80:ab:79:4e:b6:62:3d:d4:68:b5:2b:d2:0d:03:
a3:bc:3d:81:37:a4:00:51:7d:7c:d2:5c:0c:44:9d:
f8:4f:e8:77:3a:63:49:83:2f:d7:28:44:54:ef:96:
22:20:0b:7d:11:4d:ec:10:e7:03:53:d2:20:13:04:
3a:84:33:90:43:75:cd:eb:2f:6b:d8:c4:de:01:32:
49:da:df:ad:f9:bd:fd:1c:cc:7a:b6:c0:ba:58:ec:
46:ed:47:a8:7c:34:ef:cf:c5:aa:7a:4c:29:a0:02:
c4:02:9c:74:12:61:63:ac:67:24:b8:a8:94:f6:62:
02:81:86:19:22:25:10:b3:70:1c:06:50:da:7a:17:
b5:5f:89:e0:00:38:d9:17:75:fd:90:ca:33:f6:db:
b0:6a:5b:b8:25:c9:2b:10:8e:0b:60:30:d1:0d:5a:
59:38:5f:b3:6b:97:23:17:72:02:17:26:6b:ff:f8:
18:26:ae:fe:08:97:21:a7:af:ad:91:3d:af:88:0a:
55:61:5d:2e:59:ac:ec:3f:d3:8b:e0:c8:2e:54:b1:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:07:14:1D:8D:79:A6:F6:26:87:17:FB:31:8A:19:EF:DB:02:71
X509v3 Authority Key Identifier:
keyid:62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:a4:62:b0:fb:c9:32:40:17:40:12:00:6b:f1:3a:9b:67:72:
c1:41:59:f8:7b:29:36:d1:2d:f7:5e:20:33:aa:68:80:cc:28:
11:ac:44:57:e6:5a:c7:80:18:08:76:65:0d:24:a0:68:91:c1:
1e:79:69:f5:9a:34:85:5d:4e:bc:97:b4:3a:e7:c5:88:9e:e4:
dd:a3:6a:66:6d:f5:6b:92:d0:92:95:29:d2:fc:f6:3d:4e:fd:
52:3b:3a:03:18:c3:20:44:1d:f5:84:67:62:47:7e:b9:97:71:
82:66:39:6c:1b:ab:03:91:6c:ec:32:32:1d:a6:51:76:d9:9c:
3c:6c:73:25:48:b7:7a:cf:31:cb:04:56:be:a8:fb:8f:3b:db:
61:e8:d5:c5:b3:a3:3a:f8:59:8d:fd:82:ae:9e:f9:4d:78:16:
e6:8f:06:24:87:a7:80:7a:25:90:26:b8:b0:0a:63:cf:57:79:
5a:8f:b8:1f:02:82:e1:85:45:b9:cd:76:49:61:3c:35:18:eb:
30:04:e4:64:78:24:e6:2a:db:cb:65:c2:16:6f:c4:7b:7b:d9:
ee:9b:7f:3c:c0:83:07:d8:ed:bc:8b:31:16:d6:e8:bf:7b:19:
6b:8c:d0:3c:6c:bc:06:5a:4f:a3:71:df:c3:23:01:9a:22:22:
ec:d3:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:03 2026 by rpki-client