
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json)
Hash identifier: MW9hoqWtXLRNbE331x4MknQwL7XzSgvaFWBQrbQUFXQ=
Subject key identifier: F3:FE:81:2A:BB:F9:E3:A4:F7:77:E9:A0:4D:AA:8F:53:C8:C2:06:E8
Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Certificate serial: 255C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
Manifest number: 2549
Signing time: Mon 02 Mar 2026 03:12:43 +0000
Manifest this update: Mon 02 Mar 2026 03:12:42 +0000
Manifest next update: Mon 09 Mar 2026 03:12:42 +0000
Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: v8s1yjadK47LiOx+hrzeidqy2pQ0Zf7cKkQcpd3uUFE=)
2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: BM6Lva7IoWSTK1Hv52iTWPVD8QgDEeI0+e75+nUb4F4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9564 (0x255c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Validity
Not Before: Mar 2 03:12:42 2026 GMT
Not After : Mar 9 03:12:42 2026 GMT
Subject: CN=69a5002b-070b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:32:d0:c8:58:c5:68:19:33:66:83:ae:8e:
cd:60:61:0f:c8:ff:30:5d:ac:ee:ab:e5:14:01:25:
47:7c:8b:44:1b:c1:4a:b0:55:b0:fd:60:45:fa:5c:
07:c4:f4:13:f3:51:3b:19:60:86:48:03:dc:7d:19:
ea:9b:35:3e:87:96:ed:e5:58:7e:77:59:8b:a6:5c:
c7:bb:71:9e:ec:e6:ac:55:eb:ab:3d:31:b9:f1:81:
26:f3:4c:a2:16:19:07:20:27:09:09:df:90:72:5e:
3a:4c:20:6a:27:2c:94:27:28:11:6d:e8:6e:39:1b:
ab:8a:ff:bc:69:38:0f:eb:ee:38:f9:cc:32:8d:7e:
fc:26:84:be:3c:7e:e7:ea:8d:c7:12:2c:01:43:79:
95:b4:ae:fd:ae:56:71:30:20:27:b3:73:71:d4:af:
b5:ee:53:51:a9:1b:d5:db:b1:18:d4:75:a3:af:82:
ce:c0:d2:6f:7e:81:6a:7b:11:08:43:b4:2f:66:90:
80:d7:20:c1:37:fa:f5:70:91:a5:96:56:85:ae:35:
b6:5b:d8:e9:47:27:c4:54:ce:6f:f4:7d:b4:4f:ae:
4a:bf:d9:a5:d4:c9:d1:20:aa:10:f7:2b:b3:a7:a9:
ae:42:08:d7:71:ec:5c:ce:72:4d:4c:a4:59:0a:34:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FE:81:2A:BB:F9:E3:A4:F7:77:E9:A0:4D:AA:8F:53:C8:C2:06:E8
X509v3 Authority Key Identifier:
keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:66:ba:31:e2:6a:a3:5e:57:f8:b6:58:93:ba:d6:8d:a0:da:
b9:dd:f7:80:cc:5e:28:7e:22:a1:8a:5e:5b:40:ff:53:8f:32:
bc:f8:fe:ae:b9:32:cb:fb:fc:19:9b:5e:10:e6:54:ce:2c:01:
a0:90:b9:1f:cb:a8:51:21:54:a9:0d:a3:cc:a9:23:ac:38:1d:
7a:e9:a0:56:57:7f:52:30:a2:88:79:70:1b:30:39:d8:a5:ab:
47:cd:67:f5:42:4f:e5:2a:af:a5:37:ba:33:54:1e:15:14:ba:
3a:ad:ea:38:b0:e1:e9:4d:bf:e9:13:a3:ef:40:7a:b3:52:41:
67:a7:be:b8:7d:d9:ce:06:3d:70:1d:0d:25:47:c4:a5:ea:5e:
be:0e:88:e8:35:6a:cd:c8:a5:a1:3c:c6:96:43:f8:df:76:10:
ad:51:7f:85:a1:3f:6c:1d:ac:ed:f2:31:a7:0c:f8:7f:62:a9:
75:6a:b9:ee:ce:f4:07:9a:08:2d:97:9a:d6:0d:f9:18:ec:01:
f9:bb:ec:c6:f6:62:d3:2a:30:47:f3:75:b2:0f:47:99:ae:9f:
b8:6e:65:9d:91:63:6c:7f:28:a6:02:46:1a:ca:22:07:09:e8:
a3:d0:b3:31:05:e7:83:b4:7b:1a:68:6e:69:ff:52:75:3b:f5:
c8:cc:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:59 2026 by rpki-client