
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
File: yegJAGD4rmNwoBt-HsHW4m5PwBo.mft (raw, json)
Hash identifier: vNdRQ2HW4cK2tZArLTSDkYEnQ2VwSHqP5L9JPOf2mlc=
Subject key identifier: 0B:50:9D:8E:F3:97:DD:1A:40:A9:50:B2:CE:A8:13:03:F3:FF:FA:1C
Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A
Certificate issuer: /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
Manifest number: 0202
Signing time: Mon 02 Mar 2026 00:09:49 +0000
Manifest this update: Mon 02 Mar 2026 00:09:48 +0000
Manifest next update: Mon 09 Mar 2026 00:09:48 +0000
Files and hashes: 1: yegJAGD4rmNwoBt-HsHW4m5PwBo.crl (hash: I/DEsBxhlCXTwZ7xzo5J6tIvdE3rjN8FkfH0jAFJ8P4=)
2: 5261CE84068511EE9F71F964C4F9AE02.roa (hash: 5fifaPRrFceGCt70sRJhbrpTj9UeWe6iM70GaUCgY1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl
rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D4A, serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A
Validity
Not Before: Mar 2 00:09:48 2026 GMT
Not After : Mar 9 00:09:48 2026 GMT
Subject: CN=69a4d54c-964d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:f2:29:8e:1d:2c:aa:f4:ec:6a:6f:5d:4d:
be:91:7b:ea:56:96:d8:cc:cc:df:36:f0:c6:af:23:
4e:73:c1:eb:c2:d9:ca:53:db:e9:4f:15:cf:32:87:
4d:3c:c3:91:b1:64:20:7e:aa:0f:05:5e:f9:a9:4b:
98:57:b4:b0:de:f3:c7:5b:6f:47:09:f1:0c:18:31:
41:e2:65:bf:a0:72:fd:33:24:d9:ca:bf:35:d4:d2:
e4:e3:66:f9:72:aa:6c:5e:91:3a:45:b4:32:a9:3d:
09:c1:c1:c5:a1:3c:96:ac:b4:46:4c:be:83:ab:1c:
29:21:5c:78:51:3e:2d:3a:d7:11:55:40:90:b3:c6:
51:d5:93:9a:86:2b:e9:01:c3:dd:60:26:2a:9c:e1:
7a:17:04:48:23:9d:d7:e6:dc:50:f7:a3:8e:c3:a5:
dc:a1:6c:9c:13:9a:6c:6c:e0:0b:44:6c:1a:44:35:
d4:fe:9c:95:53:34:69:b0:f1:ef:ce:0d:fb:b0:89:
f3:10:0e:28:33:2a:76:21:f5:cf:a7:fa:88:80:db:
84:ba:4e:43:08:f1:20:9d:42:22:36:e4:e8:a6:6e:
3a:11:8f:50:ce:57:f6:7f:8f:61:24:72:a6:94:46:
14:f8:71:45:5b:5e:24:4f:a5:61:f6:78:33:12:1a:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:9D:8E:F3:97:DD:1A:40:A9:50:B2:CE:A8:13:03:F3:FF:FA:1C
X509v3 Authority Key Identifier:
keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:62:28:9a:90:77:83:54:14:53:74:bf:46:9f:68:df:be:c4:
ce:da:6a:cb:27:a8:de:40:e4:54:a2:66:26:08:11:5f:ba:97:
b9:4c:10:31:b8:90:0e:df:e1:50:6d:d9:fe:9f:78:84:ea:e8:
c0:c4:11:fc:81:a8:51:26:aa:dc:93:47:4c:7b:8b:83:d5:ab:
82:7f:28:b6:c7:83:eb:5a:7b:ef:43:a2:78:21:cd:45:4a:0e:
c8:88:97:d8:e4:96:d3:08:75:3f:ad:96:64:40:be:d0:0c:ed:
b4:cf:3c:8b:a9:51:57:32:b9:ca:a6:e9:94:2c:ee:9f:ee:62:
cc:38:dd:30:e6:6a:71:16:99:a2:57:2e:60:25:bc:8a:ed:74:
61:f7:4b:96:78:d7:0a:38:4d:fc:2a:67:94:bd:ec:67:7b:ca:
40:91:3c:2d:98:08:41:67:24:6e:08:e8:86:e2:f3:b4:d0:14:
bb:9f:fd:a8:97:e0:3c:08:2a:6c:6b:ca:37:d0:d8:c9:21:fe:
5d:2c:c0:ce:2c:f8:98:56:86:05:8f:b8:6b:23:e6:7b:05:02:
4f:e0:5d:0e:1f:68:58:1b:42:f5:56:65:51:1d:e5:a6:0c:9a:
d3:6a:e8:bd:4a:22:3e:d5:7a:98:38:6f:ed:07:04:c4:83:c6:
98:71:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:59 2026 by rpki-client