
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json)
Hash identifier: Frp/1BF5o0RwDB3waprbFEoE7tzBSUCy7uaYEORs8cE=
Subject key identifier: 3B:30:0E:91:1B:B2:D2:7F:08:CD:06:90:76:6F:46:5B:F7:7B:3F:CE
Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
Manifest number: 021E
Signing time: Fri 17 Apr 2026 02:33:39 +0000
Manifest this update: Fri 17 Apr 2026 02:33:39 +0000
Manifest next update: Fri 24 Apr 2026 02:33:39 +0000
Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: XxuigcDEmsQyFb42M/+YSy89yrdzASKJCebXo/PuLWo=)
2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: Cd3ka8bb5R3DYUTF/v0b6ivGnboKPrlUrUoM7/Vgbdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Validity
Not Before: Apr 17 02:33:39 2026 GMT
Not After : Apr 24 02:33:39 2026 GMT
Subject: CN=69e19c03-08c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:85:a3:4e:76:bc:1b:6b:24:fb:3c:30:bd:
03:34:27:76:17:41:f8:8c:1c:f8:71:42:3d:d9:06:
a0:06:c4:ea:e9:39:bd:f6:61:6e:4a:b6:67:5d:d6:
cd:a7:28:05:3c:87:a6:78:57:25:7d:20:ca:72:ae:
ed:34:4d:6d:45:75:c8:13:72:e0:a3:c6:91:0a:65:
06:20:b9:f8:5c:dc:77:4a:87:33:28:f9:19:ba:5f:
a2:82:84:1c:6c:c0:84:0b:b9:f1:04:86:6c:cb:34:
98:95:ee:44:81:b3:e0:6b:42:23:78:5c:e1:0e:15:
84:50:0a:93:c3:1f:35:e5:e6:03:f7:e9:4e:4c:1e:
e9:0f:00:a4:28:1c:2b:dc:24:f2:33:43:76:7e:c5:
6b:5f:1b:28:03:33:82:54:f8:08:08:02:3c:3e:91:
77:b2:00:58:21:b0:e6:36:49:80:35:60:36:6c:03:
77:15:fb:5e:e3:70:d6:82:ee:45:92:0a:d2:f2:47:
df:d5:e2:90:c5:ef:be:36:2e:ad:95:f3:23:ec:17:
ef:57:10:a1:36:13:cf:ae:6d:cb:f0:5c:2f:3c:ef:
82:af:ab:79:05:d3:a0:70:6b:9a:7c:42:58:f2:fc:
f9:03:8e:db:1a:d3:0a:49:f0:bf:6f:18:cc:ac:77:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:0E:91:1B:B2:D2:7F:08:CD:06:90:76:6F:46:5B:F7:7B:3F:CE
X509v3 Authority Key Identifier:
keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:10:a5:46:44:73:65:9b:95:32:9e:db:f5:4a:26:6c:5c:6b:
d1:11:a6:31:bb:78:6e:51:6f:27:a1:9d:c1:2f:43:3d:43:ee:
14:36:da:ae:b2:b8:7a:3d:0b:66:c8:ae:ef:54:de:ed:cb:3d:
72:86:05:62:78:36:03:f0:f0:95:b1:c3:c7:9a:48:f1:93:e5:
fe:02:5a:40:fe:9b:92:0e:d6:73:8e:aa:8a:a2:0b:ec:ab:04:
be:f4:7d:29:e4:44:45:2c:d7:b7:4f:9d:1e:31:30:65:fc:40:
3c:3c:70:0d:d0:22:04:47:13:cd:7e:13:a7:39:68:bc:20:37:
8f:73:82:d2:56:17:60:64:b9:bd:c5:95:98:da:50:e6:65:ff:
2c:5e:ab:8f:ed:c0:0a:be:61:9f:7f:5b:c9:29:8e:62:b4:e3:
22:df:b7:14:ea:3a:b5:55:19:db:32:62:4f:81:91:82:a7:da:
a2:11:62:e8:83:69:46:12:c2:7e:b7:2f:d9:07:13:fd:e6:de:
9f:08:3f:6a:2f:23:ce:b6:f6:b4:fc:72:e7:c3:ab:78:5c:90:
d4:43:9d:85:76:10:0d:a5:f7:3b:4c:ff:51:f1:23:1f:15:27:
57:c1:94:ae:2e:68:0d:13:d0:5b:20:1b:a9:0a:7b:61:94:46:
76:32:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:42 2026 by rpki-client