
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
File: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json)
Hash identifier: 8TieEyfDTqlQKW2FeuFTY7jXb/tYNwi8blXuBKgCZ/w=
Subject key identifier: 43:6D:4E:43:6C:1E:D3:11:DE:18:54:B3:F7:51:01:0E:0F:49:C1:C7
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
Manifest number: 62
Signing time: Sun 01 Mar 2026 09:23:11 +0000
Manifest this update: Sun 01 Mar 2026 09:23:10 +0000
Manifest next update: Sun 08 Mar 2026 09:23:10 +0000
Files and hashes: 1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: dlBQMbFjhOkoQ7Ptj6cwbEUoLP+feCaj4k50soM0M2E=)
2: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: 8V07zUVOskE1wa+gVr+yuKqZDgrgYU/QSi8IILKEhL0=)
3: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: hzN1fw40guW51CNb+UZLqljQGspAiSfGnAzMh1uOZu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Validity
Not Before: Mar 1 09:23:10 2026 GMT
Not After : Mar 8 09:23:10 2026 GMT
Subject: CN=69a4057f-b70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:cf:4b:a9:cd:5d:9c:49:6c:3d:00:f4:0f:
d5:12:f3:48:91:99:bf:e8:10:20:81:4e:91:e6:dc:
a9:2c:d9:cf:9a:ca:c3:7b:60:62:47:31:93:4f:3a:
0a:c0:4c:23:3d:09:23:ff:d6:17:0c:0f:fb:e8:31:
d3:bb:40:3a:af:86:23:a2:b2:11:c8:99:50:90:4f:
a5:8d:82:ac:94:6c:17:c3:3e:1f:3c:83:e9:a9:b6:
9d:61:db:06:bd:80:05:64:da:51:89:aa:14:dc:33:
53:62:b6:ac:df:6a:76:eb:15:37:db:1d:60:70:7b:
ad:c1:b7:7b:46:a9:19:3c:44:67:52:26:8b:d0:e9:
69:91:06:2e:e8:94:e2:35:3b:71:bb:f0:8b:79:a7:
31:ca:1a:62:0f:00:3c:c5:0c:71:91:61:10:46:e9:
16:6d:ad:62:a6:ed:dc:ae:33:38:d0:ea:c0:81:ea:
23:15:38:2a:bb:7c:89:de:b2:db:78:d1:9f:5b:05:
e0:cf:41:1c:6a:b1:d7:6f:bc:22:e6:5c:4b:be:7d:
52:8a:ce:2a:df:a7:aa:8a:fe:9c:37:82:7c:c8:4a:
06:b7:3a:7a:4a:fd:93:ac:46:07:79:d3:8d:ed:89:
1c:b9:09:fd:7c:5b:ea:a6:e8:61:cd:9b:68:40:8a:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6D:4E:43:6C:1E:D3:11:DE:18:54:B3:F7:51:01:0E:0F:49:C1:C7
X509v3 Authority Key Identifier:
keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c5:20:27:27:cc:37:3f:34:19:b1:40:4f:c2:33:22:1b:fc:
51:84:d5:7a:c6:96:38:d1:1c:ca:d7:bf:0d:7f:f3:51:0e:4b:
38:bb:3a:47:70:15:a7:2e:40:1c:e0:7a:50:c4:07:10:a6:71:
dd:85:59:d6:79:8a:cd:90:86:98:93:2a:19:ea:fc:74:3b:03:
2e:ce:b4:4e:51:84:e7:56:f3:e4:d5:1d:ee:ae:2b:cc:b8:d7:
ab:d9:6e:e4:ad:33:26:f2:2d:48:d5:a8:39:2f:dd:90:b2:b8:
1b:19:17:82:64:46:fd:24:98:b8:84:e7:61:8f:4a:ec:c9:32:
7d:57:1a:d7:d9:48:18:f5:48:85:69:7e:bd:c1:b1:ec:f8:a6:
53:6a:f2:16:bc:7d:65:ef:04:91:f4:4b:3d:0e:fc:0a:e2:47:
28:0b:4d:da:6c:af:33:c5:4a:44:07:54:ba:6e:54:8f:ab:c6:
ec:07:c1:5c:b6:32:bd:d9:3d:a5:f3:7e:b1:3b:94:4d:d7:96:
c5:79:ea:b6:74:71:5d:2f:4a:0b:52:8d:5d:41:af:01:ec:af:
9e:d1:4c:43:46:6c:53:0e:b5:b5:59:ac:83:51:b0:0f:4b:10:
02:7b:46:19:60:56:b7:b3:fe:35:13:1c:3f:65:13:bb:01:76:
99:7e:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:32 2026 by rpki-client