
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
File: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json)
Hash identifier: WUBT4Sq6tPg3MQoTKj8lAuJyDQOH/YRiAytin4L0FH4=
Subject key identifier: AC:AA:8E:AD:0B:DD:18:12:D1:C9:B2:BD:17:26:0F:0B:53:89:B1:47
Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
Certificate issuer: /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
Certificate serial: 072C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
Manifest number: 071A
Signing time: Sun 01 Mar 2026 23:25:27 +0000
Manifest this update: Sun 01 Mar 2026 23:25:26 +0000
Manifest next update: Sun 08 Mar 2026 23:25:26 +0000
Files and hashes: 1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: KG3/qG/60P71t8gy2Q7LekX8+cSTi5BA0LAODieabb4=)
2: 56A937F2360411EF8AA77687C4F9AE02.roa (hash: eOWnmeWFjNcjikfJr9Z/coDy1OJu7Wy5b5BQiJf8sxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl
rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836 (0x72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
Validity
Not Before: Mar 1 23:25:26 2026 GMT
Not After : Mar 8 23:25:26 2026 GMT
Subject: CN=69a4cae7-bdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:16:18:1b:31:bc:c8:08:05:02:45:fa:cf:
c2:3a:94:ee:7f:3a:85:bc:c5:a5:a4:2e:f9:90:4c:
28:da:ed:2d:d0:94:ad:23:02:d5:f8:9d:ce:ae:1b:
16:75:13:e8:55:9d:76:1e:3e:4d:2b:d2:96:ff:37:
5a:44:87:55:45:61:5b:38:84:40:34:84:14:70:2a:
dc:35:a1:65:c1:77:95:ea:13:d9:cf:75:13:b1:66:
d0:ba:a8:2e:ae:10:56:20:f4:ca:de:12:b9:b5:fa:
b9:ad:00:ac:76:54:a5:85:d7:90:0c:34:d5:4b:cd:
f5:0e:77:08:21:b1:ee:1d:da:46:be:46:bc:54:d8:
ad:1f:cf:19:e5:e4:ed:93:b2:51:d7:87:fc:cd:a4:
c2:33:d4:54:10:ac:9c:0f:df:da:b0:cb:6f:20:7a:
1e:1f:8d:f9:51:00:59:27:f6:83:9f:28:4d:5e:78:
52:db:5a:dd:4f:55:11:0c:f5:dc:48:06:92:0a:c3:
15:48:1b:57:b2:3e:a9:fa:c0:8c:a6:84:35:90:b2:
91:e8:2f:05:d3:94:74:f4:7c:29:5e:bb:08:df:81:
44:14:04:a2:6a:5c:29:14:bf:d0:a4:f7:9d:d8:c7:
73:96:7c:79:62:36:51:d7:fa:aa:07:c1:6f:3c:cd:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AA:8E:AD:0B:DD:18:12:D1:C9:B2:BD:17:26:0F:0B:53:89:B1:47
X509v3 Authority Key Identifier:
keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:2e:ae:e4:85:d5:8f:23:f1:54:46:c7:47:06:37:e7:32:04:
3d:33:29:ac:3b:c6:38:49:0f:84:ff:1b:ba:3c:e5:96:28:07:
8f:0a:0e:fa:ef:b2:c8:68:6c:f7:4e:17:12:57:83:85:3a:ca:
a3:c2:d3:64:5c:08:8b:d6:3e:72:a5:f1:3e:fa:a6:c3:34:a5:
51:14:7a:9d:5d:9c:a8:c6:3e:0d:95:91:00:41:5a:25:78:5b:
09:9d:3b:e9:85:95:c2:4b:d6:cb:1f:1c:73:2c:1a:89:fc:0b:
14:3f:0b:40:33:45:60:b6:62:1b:6e:e0:9b:ac:d7:48:91:30:
ff:b2:04:29:bd:17:c4:3c:4d:38:af:64:22:d1:a3:43:80:55:
2d:fa:fb:3f:f3:e4:92:07:d8:c3:95:d9:f1:a8:03:1c:c8:4c:
83:4d:39:12:78:aa:b6:52:e3:80:f8:99:6e:f9:90:1d:66:f0:
4e:88:4b:1a:b8:5a:3f:64:53:eb:39:96:5d:85:ad:83:69:d9:
7f:93:b0:d4:49:36:04:29:f1:6b:a2:73:1b:4f:62:c6:3e:cb:
4a:7c:88:2b:52:15:f8:74:82:e6:d5:ea:3b:6f:b4:68:13:4b:
5d:7c:34:b1:f7:32:fd:c8:40:35:07:0f:9e:ea:e3:20:55:b8:
4b:19:85:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:10:32 2026 by rpki-client