
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json)
Hash identifier: TTRxjAldCFAuQ3ggeUKuYn+oHrbxdfC9RfvRP2tHM7I=
Subject key identifier: 33:51:93:11:95:A1:54:0F:EF:D4:60:05:D5:99:E2:59:01:B9:1C:2B
Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
Manifest number: 0204
Signing time: Sun 01 Mar 2026 03:49:20 +0000
Manifest this update: Sun 01 Mar 2026 03:49:20 +0000
Manifest next update: Sun 08 Mar 2026 03:49:20 +0000
Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: u9tc7WE7MVO5erFlXZh3x41GmeATL9QPlJHiOEp5wvg=)
2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: OHOgl2rccP6LY8UIfFX7pELF8wjr/bVHGuXsEeHuzZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Validity
Not Before: Mar 1 03:49:20 2026 GMT
Not After : Mar 8 03:49:20 2026 GMT
Subject: CN=69a3b740-adf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:2d:a4:71:8c:4c:84:e8:cb:af:00:50:24:
49:52:2c:0a:97:e2:aa:19:46:b8:41:31:20:e3:ae:
cd:e2:60:c3:75:d7:6e:10:c0:58:da:f3:65:af:2b:
27:77:39:d2:96:c1:34:d3:38:f1:c2:6a:1d:61:34:
94:5a:89:55:71:08:10:70:2b:94:ec:ee:1e:ef:8f:
8e:42:67:6e:4d:aa:01:60:63:90:11:88:8a:cd:8f:
64:42:8c:bf:2b:ea:39:ff:5d:cc:3f:34:5d:8f:d1:
17:4b:fd:83:7f:c6:7c:b6:81:64:06:84:d2:54:b4:
24:62:60:65:47:4d:a6:03:c0:dc:03:3b:1f:a4:d8:
11:31:b3:c4:c8:07:3c:43:c3:98:41:a0:27:81:24:
7d:6e:9f:d1:06:1a:e3:69:e9:84:e7:80:23:06:93:
f2:ca:2c:f7:22:7c:29:19:70:e3:f1:f5:88:88:c7:
7d:b1:14:14:ff:8d:08:2c:78:9e:a2:c7:6a:d1:03:
a7:4c:16:43:5a:75:dd:84:33:ec:fe:cb:9a:14:8d:
67:68:94:d6:81:62:e2:cb:ad:11:7d:00:50:7a:2e:
a8:18:40:76:c9:eb:57:83:d2:ef:fd:bd:8a:d1:f6:
2e:d9:6e:cf:4d:ab:6c:44:bb:c0:e0:06:a3:a8:05:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:51:93:11:95:A1:54:0F:EF:D4:60:05:D5:99:E2:59:01:B9:1C:2B
X509v3 Authority Key Identifier:
keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:52:f9:0e:3f:cc:25:d5:97:5e:65:2e:84:61:17:5c:1e:fe:
78:0a:39:3a:4a:b5:13:a6:e7:c3:d7:87:56:27:5e:ab:ba:18:
a1:df:4c:f4:1d:9e:3b:b0:28:c8:c6:56:8b:9b:13:83:ac:52:
5d:e0:6a:2e:54:7b:41:c8:97:23:d7:b6:b5:d0:7d:df:ba:24:
da:94:92:e7:cd:98:fa:eb:43:a3:b7:cd:27:21:f2:f7:97:6c:
df:fc:ac:04:0c:d6:05:ad:1c:57:bb:f8:0d:33:79:30:fd:c7:
a0:c9:ff:7c:90:96:08:8a:7b:52:dd:d7:fe:db:78:6a:56:06:
85:00:19:dd:3b:7a:d9:6e:5e:ac:38:5e:07:0f:97:98:07:31:
9f:a6:ad:d8:02:c3:c4:8a:8a:08:fc:e6:a2:c3:13:03:5b:ef:
62:a9:b7:77:f0:56:19:f8:74:62:5d:b3:40:f6:ef:68:7a:5b:
8f:2c:eb:b7:31:33:16:1e:da:df:b9:12:ea:2e:c1:49:e8:72:
d8:d8:12:1a:a8:3c:2f:d1:19:7e:74:f3:72:9f:17:cc:d6:47:
f8:02:3d:43:63:aa:ce:2c:09:01:37:f5:8d:4e:f0:df:47:3b:
44:26:be:30:45:a9:bd:8e:14:53:cd:4e:f5:31:b5:3a:f5:c1:
f2:2c:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:13 2026 by rpki-client