
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
File: y1LRcue7pSl4xAN0AnpNpseRZ9g.mft (raw, json)
Hash identifier: mydOEooKzkyFPhena8EypiyF933sJ706Q1OHxyocpRM=
Subject key identifier: 5A:FD:D7:7A:00:D7:B7:9D:7E:5A:01:FC:2C:BA:42:F8:3D:95:B7:1F
Authority key identifier: CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8
Certificate issuer: /CN=A9199606/serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
Manifest number: 1F
Signing time: Sun 01 Mar 2026 10:20:29 +0000
Manifest this update: Sun 01 Mar 2026 10:20:29 +0000
Manifest next update: Sun 08 Mar 2026 10:20:29 +0000
Files and hashes: 1: y1LRcue7pSl4xAN0AnpNpseRZ9g.crl (hash: ReStfHE8X8QYDnvZ7nnoF1Uv/FvnFQQpSFR9T/0laY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl
rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199606, serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
Validity
Not Before: Mar 1 10:20:29 2026 GMT
Not After : Mar 8 10:20:29 2026 GMT
Subject: CN=69a412ed-af81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:2e:d7:80:e9:58:cd:10:b0:2a:fc:66:a7:
8e:1a:fb:38:c9:ad:8c:4e:4c:9b:18:b7:88:d7:51:
c0:83:f2:29:3d:1d:1a:aa:55:64:56:15:d5:16:eb:
ef:c5:cd:d7:88:cd:84:f2:d0:a2:9e:a5:4f:c8:8d:
c1:54:d6:c8:18:45:80:f0:77:8c:c3:25:f5:b7:47:
dc:1e:39:58:ed:11:47:ea:ce:85:02:32:c8:d7:9f:
09:f4:c0:18:38:09:5a:e9:22:8b:17:da:89:b0:17:
b5:fb:91:d6:d1:27:22:c8:a0:e9:18:59:e2:c0:a4:
3f:d1:36:ab:4a:e9:31:c6:f7:d0:c0:55:22:21:b2:
b2:de:8e:0d:1a:43:7c:63:5c:a0:00:29:a5:11:76:
72:fc:88:ce:ab:da:73:48:62:68:bb:fd:17:54:91:
3b:c9:6d:10:1c:71:4a:3c:86:81:bf:2e:30:5b:c1:
6b:a7:15:a1:3a:58:74:c4:4c:73:c4:be:a1:0c:bf:
b6:77:f8:08:68:db:d3:80:ad:5a:d2:b6:80:47:a3:
d6:1e:a6:45:d2:f7:ef:c3:bb:d5:66:33:80:22:40:
04:28:bf:57:30:29:2c:c9:22:5f:bc:23:a7:85:f8:
33:43:6c:df:e0:a7:6c:cb:9b:4f:f6:06:cb:8d:48:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FD:D7:7A:00:D7:B7:9D:7E:5A:01:FC:2C:BA:42:F8:3D:95:B7:1F
X509v3 Authority Key Identifier:
keyid:CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:30:6c:8c:18:16:08:d8:af:28:24:e4:ad:fe:c7:8d:db:15:
13:4e:83:6e:25:73:73:98:5c:cc:2e:5d:e4:cd:86:22:2c:26:
c7:97:30:57:6f:46:0d:18:fd:91:50:b8:2a:f3:c3:51:1e:2f:
db:e3:8f:46:11:16:42:69:2a:b9:de:ae:d9:ab:8b:2f:36:2c:
07:3d:c5:25:cd:5c:91:68:23:aa:42:7f:17:ac:c6:0a:c6:10:
55:66:49:f8:29:a7:f0:d6:90:ff:73:29:dd:8f:2a:24:5a:14:
a0:e9:50:5b:2f:2f:d6:72:ae:aa:4e:31:fc:73:73:85:f9:98:
78:b5:c3:8a:18:cc:6c:49:de:7d:46:23:ea:41:b9:40:a3:3c:
b6:f8:df:50:b8:33:0d:9f:45:6f:4a:1b:bb:c1:24:86:98:2d:
4c:d7:14:9c:95:6e:12:2c:4f:1f:bf:7b:4e:7c:c5:c5:4d:bc:
fb:f2:d4:9d:92:68:f5:5a:e1:b8:86:ab:0e:a4:16:4f:41:89:
cc:6f:30:d2:50:b3:68:26:54:37:57:58:28:e9:90:8a:da:5a:
eb:6c:86:a4:ac:4d:ca:28:6b:fb:3f:64:f5:aa:8c:5b:1a:e2:
83:ef:a3:6b:da:f7:a2:1b:ce:4b:33:14:ec:a0:09:99:33:65:
70:81:d0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:13 2026 by rpki-client