
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json)
Hash identifier: RiUDw07OttKKJNAkW9+RVVgd6xkJ55qQwTIgPoVtnJs=
Subject key identifier: 13:4A:1F:31:91:91:AA:72:6E:48:47:40:2C:43:B5:05:2B:1B:67:ED
Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29
Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
Certificate serial: 0466
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
Manifest number: 045D
Signing time: Mon 02 Mar 2026 01:18:16 +0000
Manifest this update: Mon 02 Mar 2026 01:18:13 +0000
Manifest next update: Mon 09 Mar 2026 01:18:13 +0000
Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: MxkBKd1e/Vs4bsT/O2nwfpRAYMjJO9j/UEDNO4E8kbY=)
2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: CmwyNOMcxqbsaQQe+naR5AW1qBeX6twl6NXVPLR2NpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl
rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
Validity
Not Before: Mar 2 01:18:13 2026 GMT
Not After : Mar 9 01:18:13 2026 GMT
Subject: CN=69a4e557-eab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:e7:af:88:6d:9c:4f:76:a7:18:6e:98:18:
1b:c9:9c:65:25:0d:6d:9a:56:58:8d:41:46:ee:55:
f6:f9:2f:0c:db:2a:ba:7a:df:f5:cb:89:8d:50:cf:
f4:e5:16:58:b4:2d:6b:73:18:a7:d6:bf:10:6e:c9:
99:07:d4:5e:72:48:b0:b4:b5:0b:25:3d:6a:11:1e:
41:eb:87:41:c4:b5:b2:ca:a9:47:09:bb:ec:0a:72:
6e:ef:96:68:ef:48:9e:b6:ec:bc:23:6a:9a:e9:bd:
78:d7:23:50:3e:d3:3f:ff:e5:59:12:49:f2:52:f2:
66:04:f9:39:be:58:01:d1:db:06:ea:19:9a:e9:b0:
3f:b7:b0:7b:70:0c:d9:6b:95:9e:fe:d8:4e:8b:7b:
ee:46:b6:08:d8:ae:8c:5b:67:24:46:ad:f2:68:64:
14:66:ba:f3:54:9a:13:ff:9a:4a:48:ed:dd:9d:4c:
1c:d8:f8:45:ed:9f:18:45:f3:18:fd:d5:76:f1:05:
34:38:bc:86:d4:fd:b5:47:cc:cc:ca:1e:9b:39:c4:
62:f6:9d:6e:aa:91:92:d8:50:1b:6a:ad:34:db:57:
16:88:4b:e6:8a:ae:85:44:bf:d6:00:94:6d:52:5f:
19:b7:c1:40:7b:8c:84:06:02:a2:c5:19:04:66:33:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:1F:31:91:91:AA:72:6E:48:47:40:2C:43:B5:05:2B:1B:67:ED
X509v3 Authority Key Identifier:
keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:80:6b:87:b9:75:93:d7:2b:c7:45:4b:c2:2e:7d:4d:c5:11:
2a:71:2c:cb:34:86:26:14:42:97:2a:d5:30:33:14:b7:fb:9b:
a1:f4:4b:4e:c5:81:7c:f0:bb:30:d5:ba:80:da:99:2e:08:65:
fb:6a:9c:59:14:bc:b9:71:a4:2d:b7:cc:f8:d1:9a:78:2f:b0:
40:f5:95:ac:e2:1f:3d:c2:a6:8b:80:80:ab:f7:a7:b8:88:62:
b1:cb:54:80:cf:64:34:53:93:8b:0a:41:aa:51:fc:98:5a:54:
3e:07:65:7f:9e:7a:92:14:d8:1c:7e:b2:7f:8f:b1:c2:6a:52:
30:a3:94:4a:de:6d:0d:31:ff:aa:29:91:49:87:00:8d:2e:64:
ef:e7:7c:91:94:f0:25:8e:22:69:35:97:eb:b9:50:4b:d2:57:
fe:54:56:1a:49:f3:46:3f:ab:ef:6f:87:b0:62:56:7a:38:88:
58:28:0f:7d:06:fc:7b:c0:55:cd:7d:9b:39:b0:32:e7:66:ae:
79:24:cb:e6:65:80:23:02:16:65:f6:8f:95:41:37:1a:c9:6b:
70:89:d2:fb:f4:07:99:27:54:13:f5:fc:da:5c:2c:38:a3:9f:
2c:ff:56:37:74:fe:80:6e:3e:37:52:85:3f:cc:59:87:93:75:
88:4f:ef:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE
QUQ0NkQ2MjkwHhcNMjYwMzAyMDExODEzWhcNMjYwMzA5MDExODEzWjAYMRYwFAYD
VQQDEw02OWE0ZTU1Ny1lYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAobDnr4htnE92pxhumBgbyZxlJQ1tmlZYjUFG7lX2+S8M2yq6et/1y4mNUM/0
5RZYtC1rcxin1r8QbsmZB9ReckiwtLULJT1qER5B64dBxLWyyqlHCbvsCnJu75Zo
70ietuy8I2qa6b141yNQPtM//+VZEknyUvJmBPk5vlgB0dsG6hma6bA/t7B7cAzZ
a5We/thOi3vuRrYI2K6MW2ckRq3yaGQUZrrzVJoT/5pKSO3dnUwc2PhF7Z8YRfMY
/dV28QU0OLyG1P21R8zMyh6bOcRi9p1uqpGS2FAbaq0021cWiEvmiq6FRL/WAJRt
Ul8Zt8FAe4yEBgKixRkEZjPykQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNKHzGR
kapybkhHQCxDtQUrG2ftMB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4
QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx
aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO
UFRKNTR5TGhnU19hMUcxaWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMYBrh7l1k9crx0VLwi59TcURKnEsyzSGJhRClyrVMDMUt/ubofRLTsWBfPC7
MNW6gNqZLghl+2qcWRS8uXGkLbfM+NGaeC+wQPWVrOIfPcKmi4CAq/enuIhisctU
gM9kNFOTiwpBqlH8mFpUPgdlf556khTYHH6yf4+xwmpSMKOUSt5tDTH/qimRSYcA
jS5k7+d8kZTwJY4iaTWX67lQS9JX/lRWGknzRj+r72+HsGJWejiIWCgPfQb8e8BV
zX2bObAy52aueSTL5mWAIwIWZfaPlUE3GslrcInS+/QHmSdUE/X82lwsOKOfLP9W
N3T+gG4+N1KFP8xZh5N1iE/v9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:09 2026 by rpki-client