
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
File: YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json)
Hash identifier: Xp0Lvua98T2iwsuKT1wvVr0YpQlgX6PEl2/cHosB9kM=
Subject key identifier: E7:71:86:C3:D2:F9:48:D8:49:65:05:B7:E1:22:11:F7:D2:42:44:F8
Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
Certificate issuer: /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
Manifest number: 0105
Signing time: Sun 01 Mar 2026 07:07:55 +0000
Manifest this update: Sun 01 Mar 2026 07:07:54 +0000
Manifest next update: Sun 08 Mar 2026 07:07:54 +0000
Files and hashes: 1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: wYqx9R8V0dflPCQE7E+fUIZHI5mjU8TvhqDFoJy4XQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Validity
Not Before: Mar 1 07:07:54 2026 GMT
Not After : Mar 8 07:07:54 2026 GMT
Subject: CN=69a3e5cb-5948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:bb:0e:81:64:6e:21:40:52:26:19:a3:93:
42:88:43:9a:d0:56:9a:31:55:39:48:dc:8a:95:57:
c0:6d:2a:9d:a1:1d:9e:4c:89:44:b5:46:07:6e:4e:
81:05:47:df:65:96:45:b3:97:7b:c8:e5:c1:60:9e:
c1:d8:6d:72:9c:ef:da:a1:f4:d6:55:6f:6e:7e:21:
6b:4c:0a:03:a4:10:c7:af:05:e6:6c:22:09:f3:c9:
5b:57:b3:00:f3:ee:43:b7:2a:28:56:5a:06:21:41:
0c:27:a4:fb:24:d9:cc:fd:43:0a:f0:71:d5:e5:87:
55:08:65:84:35:09:d7:6b:50:c6:8e:30:3f:2b:f8:
c2:3a:d1:66:7c:6a:ec:b5:5c:f7:b5:06:f9:d2:c5:
3e:05:ee:ff:1f:b5:ea:21:8b:2f:d2:87:f6:56:4c:
e3:16:58:91:95:24:ca:a8:34:a4:94:dc:bc:ce:42:
0c:a2:72:dc:98:d8:19:85:d2:13:c7:97:1e:3d:3f:
f5:79:fc:b0:7c:28:d0:af:b4:50:98:4a:b8:3b:a5:
ce:05:13:53:ff:56:0e:e3:f7:2c:94:24:80:60:b3:
bb:b7:bd:3d:6f:c2:45:4b:2a:e7:b3:d6:4b:a2:3f:
d5:03:5e:a5:a3:d4:ef:f7:89:7b:30:68:fb:b8:8d:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:86:C3:D2:F9:48:D8:49:65:05:B7:E1:22:11:F7:D2:42:44:F8
X509v3 Authority Key Identifier:
keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8a:e8:46:44:ac:48:0d:bd:fd:30:24:94:db:fd:0b:42:cf:
0a:17:bf:f7:84:d3:5c:19:8b:4b:64:02:8e:40:82:e5:5c:ff:
46:17:2b:4a:77:8f:44:76:62:98:fc:27:58:48:ca:e0:bc:ee:
18:a9:07:d6:d6:5e:d0:2c:ea:19:c2:30:9b:fb:cc:9b:95:03:
87:d7:0f:e5:44:63:ea:a8:68:49:7e:b8:67:16:2e:66:ec:8b:
c4:d4:97:3e:23:d9:89:6e:59:b9:a9:1f:a0:9d:b4:61:01:1d:
cf:6e:ca:7d:ca:73:38:f3:71:ce:0a:6f:98:b0:84:7c:68:fb:
07:a2:e8:72:6d:37:75:f5:15:a2:e1:ce:3d:af:27:a2:10:fd:
d6:fa:b9:5d:99:77:4b:9b:f6:50:14:cc:e5:07:ac:1e:e3:d3:
05:9d:e2:7c:e8:53:6f:d9:56:f3:c0:ec:32:c2:cd:d5:f0:dc:
bc:38:0b:20:c3:45:a4:eb:bb:7d:d8:76:1d:83:b4:21:a4:78:
50:86:c1:60:37:2b:07:8a:28:ad:a2:7e:93:64:3b:4a:b4:58:
ec:40:f6:45:5c:23:4a:02:63:48:f8:67:f0:24:42:1c:44:b9:
2b:43:8e:90:26:1a:6c:2e:6e:ee:a4:c9:05:5f:6a:6f:b3:71:
68:c2:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:38 2026 by rpki-client