
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier: z2dhNde5b45Ts+bSPqA/qObtUmbKepcVI3g55MAzRuA=
Subject key identifier: 29:9B:82:EF:BE:4D:A1:F4:7B:30:9C:22:0E:0A:F2:5D:87:C3:16:3E
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial: 0755
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number: 173F
Signing time: Mon 02 Mar 2026 17:27:35 +0000
Manifest this update: Mon 02 Mar 2026 17:27:35 +0000
Manifest next update: Mon 09 Mar 2026 17:27:35 +0000
Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: bg30TUOEvH0I273hYUoJ28BZsq6vmL0VzN/ID+Hta5A=)
2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: hwOf7SRKK2ExdUeCLcvf4HAC8wZaCK5Ulx58N9GVET8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 17:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Validity
Not Before: Mar 2 17:27:35 2026 GMT
Not After : Mar 9 17:27:35 2026 GMT
Subject: CN=69a5c887-2c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:a9:65:de:99:fa:40:46:1c:1e:f4:4a:6e:
0d:24:31:3b:db:e6:0c:33:bd:4f:e3:f7:7a:6b:4e:
66:1a:e7:e6:12:31:ef:2f:60:da:66:26:e7:d8:8a:
be:ab:16:18:d2:b7:45:ba:c3:e7:6c:ec:8e:80:c6:
eb:73:11:9c:a2:00:ed:4f:c5:99:14:18:bb:dc:df:
8a:f3:29:09:f4:4d:91:fe:85:37:0d:82:44:f0:7e:
9a:3b:4c:48:d8:4f:91:b4:ef:fe:15:87:e0:03:58:
04:8f:42:bf:82:01:65:da:64:8c:f9:4c:e5:30:6e:
2b:a9:20:27:74:77:2f:a1:9a:c8:a4:42:4c:b8:bb:
2b:6a:22:19:71:6e:02:ef:3e:33:93:e8:91:e5:00:
20:e9:7f:c0:8b:ba:14:c9:7a:1f:3d:ec:c8:8d:8a:
37:a4:14:04:8f:f7:2d:1c:16:c1:44:04:21:98:07:
23:04:f0:ef:68:51:b1:61:0c:63:1a:1a:13:a9:7c:
63:89:d0:b1:74:54:42:fe:fb:63:f1:05:0e:9e:09:
6b:89:c2:7f:7d:e9:44:ea:9a:52:c6:d7:c9:21:f5:
ab:bf:e0:ad:4c:b9:33:7d:d6:23:29:34:89:74:3a:
e4:25:d4:24:80:aa:bc:ac:71:1b:73:af:60:d5:25:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9B:82:EF:BE:4D:A1:F4:7B:30:9C:22:0E:0A:F2:5D:87:C3:16:3E
X509v3 Authority Key Identifier:
keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:30:d3:40:e9:75:aa:c4:d4:38:7c:41:a3:7c:e3:8a:33:0f:
96:10:e2:1f:0f:9c:36:85:5d:a5:b9:d1:e6:b1:58:e6:fd:07:
3c:d7:48:bb:bb:2c:eb:c7:66:2b:e6:36:2b:a2:51:23:b6:b1:
85:b3:eb:35:6a:c3:12:03:7f:5c:7a:ce:58:cc:cf:8e:60:2c:
e8:27:79:ef:a0:36:b6:94:0e:ca:b0:93:23:02:ac:db:77:e6:
c2:03:20:ee:04:97:d9:ac:f5:cb:cc:16:10:bc:46:75:74:65:
38:b7:5a:24:8e:9e:15:d2:8b:8d:c2:59:2d:6f:75:4c:8f:0e:
f1:7d:8b:4e:2f:50:3e:50:dd:2d:f9:2c:6f:29:c1:20:a5:0c:
46:d8:df:ce:16:02:6c:6b:c4:1f:17:55:25:83:8d:66:c8:4e:
33:55:40:3e:61:ee:4a:bd:17:e3:a6:85:96:a4:28:ca:94:5c:
71:90:15:0a:08:55:6f:e8:62:b0:b1:5e:25:2c:49:8e:34:bf:
e8:32:51:d2:86:5f:1d:e4:08:7f:53:1b:9f:cd:f8:a4:e9:69:
4b:c7:3a:70:55:54:12:b3:bf:59:0e:60:e8:50:ad:3e:62:31:
a0:33:06:43:66:9e:24:aa:cc:9a:06:96:86:fa:56:4e:e7:39:
60:3b:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:06 2026 by rpki-client