
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
File: YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json)
Hash identifier: 2IyKyiNhhfO5o51wQx8BLfgpdpxca0gT8x68QfScY8o=
Subject key identifier: EF:01:8B:62:53:61:0E:0B:2E:BC:73:29:88:A3:85:EA:CE:20:59:2D
Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Certificate serial: 0ACC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
Manifest number: 0ABC
Signing time: Sun 01 Mar 2026 23:50:27 +0000
Manifest this update: Sun 01 Mar 2026 23:50:26 +0000
Manifest next update: Sun 08 Mar 2026 23:50:26 +0000
Files and hashes: 1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: cVH6gh0ATx5ehmYXBteWM+FsLz4c5xT3cg38SO3NOeY=)
2: E3DD6362787A11ED89732760C4F9AE02.roa (hash: TMR3AZrLNtNEq9PR3UE3V++DiYGbg4bhMqaTxImlcXo=)
3: 1B2FD0247B3511F0AB5E9728C4F9AE02.roa (hash: MVr34VGCTHWvMSXWLwP7XiOp2/uTJ/5hO0cuQxvUPpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2764 (0xacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Validity
Not Before: Mar 1 23:50:26 2026 GMT
Not After : Mar 8 23:50:26 2026 GMT
Subject: CN=69a4d0c3-969e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:48:38:5a:80:80:16:f7:3a:b2:59:6b:b1:
61:df:a2:96:27:51:8b:b3:c9:ad:67:98:f6:21:f2:
8b:73:29:d3:40:7b:14:3a:5b:5a:de:b4:9c:9a:d3:
37:f4:41:4e:af:bc:d8:ad:9b:71:d3:c2:76:7f:ad:
62:fe:45:3b:5b:e8:a0:25:65:aa:31:e1:b6:33:0f:
b4:44:e8:9e:b9:ea:46:dd:f6:ab:43:b8:48:00:b6:
b2:f4:0c:ae:9c:58:86:e9:57:63:01:25:8d:89:47:
25:f0:33:08:a8:62:af:b5:f2:23:af:b0:4f:fc:13:
15:61:ac:dc:2c:70:88:5a:99:e7:74:09:56:ce:4f:
de:92:da:2b:49:85:1e:d3:78:80:2d:63:f3:b7:e8:
45:4a:53:45:3c:d3:0e:1c:c0:5c:af:5d:d8:83:04:
ea:21:5f:af:9d:dd:6d:00:d1:05:c9:a4:04:01:6f:
43:38:a8:60:4d:0f:61:b9:37:f8:bf:71:c3:f4:d6:
f9:4b:2e:ec:fa:9e:ab:e7:16:86:3b:ca:73:bb:68:
f5:a3:d2:c2:52:8d:77:44:1a:85:f1:9a:09:cc:43:
b8:f1:39:5f:6e:f4:5d:bf:b4:91:ca:42:d1:5f:74:
44:13:99:32:62:8d:00:c6:71:da:4f:9e:cb:7b:49:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:01:8B:62:53:61:0E:0B:2E:BC:73:29:88:A3:85:EA:CE:20:59:2D
X509v3 Authority Key Identifier:
keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:76:86:ab:3a:99:71:f6:d4:a9:ef:19:1b:06:09:95:46:
0f:0d:b8:98:ce:cc:30:69:40:0b:3e:f8:ba:15:50:3d:3c:d9:
74:dd:58:e6:29:d0:bf:bc:99:eb:76:f4:03:cd:2f:c2:a4:00:
9c:87:a0:19:04:10:1c:d4:ef:0f:aa:6e:11:ed:b8:e7:ef:fd:
cb:05:5b:91:93:4f:68:63:3b:a3:3d:64:41:fc:08:19:7f:76:
46:d7:cc:fb:73:ac:6e:11:a6:56:bf:e1:1a:24:9b:90:1d:8c:
70:36:2e:72:76:35:b4:be:e1:72:b0:d4:c3:5d:6e:e3:eb:6c:
a3:bb:c0:a3:89:2b:c0:a3:01:da:11:4c:c6:98:8f:e9:6d:19:
84:aa:92:35:91:ad:d5:2f:dc:98:4d:25:25:58:4d:a3:5b:f4:
7c:39:ec:e8:6a:a2:af:d3:d4:7d:ee:14:9b:19:34:d2:53:3d:
02:75:70:3c:ca:cf:22:3f:8e:23:8a:07:98:fe:1e:1c:11:53:
e6:03:39:da:fa:54:f3:8c:09:d0:19:1b:a4:61:a6:28:13:78:
71:e6:6d:71:0e:12:68:e4:ef:d6:2c:51:fa:92:24:30:c5:3a:
09:19:c0:7d:2c:22:1a:6c:4d:ca:52:2b:e9:de:a2:5c:08:88:
47:55:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:26 2026 by rpki-client