
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json)
Hash identifier: PpzU8Itglr5sDiVsQ32Y/0yip+IfW4LVLelShyZiw+A=
Subject key identifier: 88:50:22:BD:4D:7C:2B:50:90:C4:90:E5:23:50:6A:57:27:F4:66:99
Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Certificate serial: 0AF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
Manifest number: 1264
Signing time: Sun 01 Mar 2026 23:29:41 +0000
Manifest this update: Sun 01 Mar 2026 23:29:39 +0000
Manifest next update: Sun 08 Mar 2026 23:29:39 +0000
Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: Wa02Xk0XfEgRG7dh8KvX26uj3FS2bDZjSUaevYZdfEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2801 (0xaf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Validity
Not Before: Mar 1 23:29:39 2026 GMT
Not After : Mar 8 23:29:39 2026 GMT
Subject: CN=69a4cbe5-c566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:8a:ba:59:6e:99:d1:0e:e1:1f:30:2a:c9:
c8:f2:f4:8a:da:96:1a:59:2a:5f:e8:b0:8b:76:95:
d7:81:a9:d7:a4:b9:cb:1d:5c:86:bc:1c:4c:f4:8e:
dd:42:da:87:87:ff:5c:88:a9:2d:5e:27:b6:d3:00:
98:bb:1b:5b:f1:ae:3b:da:67:59:e7:36:23:a2:13:
22:fb:3f:7b:a9:8b:11:33:29:e5:87:ba:78:85:d2:
77:a1:5c:f0:f2:bc:f0:2a:48:58:ff:90:79:9b:7b:
6d:72:5e:1a:d7:0b:bc:68:09:dd:04:fc:9e:d4:01:
52:38:64:03:eb:3c:e4:70:40:ef:77:75:14:f3:92:
aa:76:4a:47:9d:07:43:00:4e:5f:7d:81:61:e5:da:
ba:c9:21:31:35:20:32:71:83:56:0d:38:ca:61:8f:
37:95:3d:25:16:48:c5:65:36:ee:c7:3c:e3:d0:73:
b2:f5:cb:41:20:f5:81:86:03:28:fb:3d:f2:99:6d:
06:3b:01:49:7c:41:c9:9f:92:23:62:78:7b:17:de:
3b:86:85:fc:62:45:1d:d2:1f:43:b6:1a:c2:87:7a:
30:b0:b1:9f:61:fe:f9:5d:04:e1:29:3a:3b:a6:93:
d4:07:1d:5b:2b:e5:7d:12:ea:37:cb:7d:38:78:32:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:50:22:BD:4D:7C:2B:50:90:C4:90:E5:23:50:6A:57:27:F4:66:99
X509v3 Authority Key Identifier:
keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:8a:3b:d6:87:13:7b:f1:a1:41:5f:81:e1:7d:8a:9e:ef:9a:
b2:1e:94:3e:ab:ea:fb:0f:bf:be:9f:de:82:65:24:e3:2b:e9:
e0:09:55:28:0c:1c:18:9c:32:b7:67:d6:00:f8:a7:10:50:6c:
d5:ef:b7:08:d6:2d:17:f5:63:e7:9c:6c:df:23:41:99:20:2c:
26:42:3e:20:cd:f6:82:51:cb:7c:27:55:d8:2c:e4:54:b2:90:
da:72:1c:db:65:e5:af:61:7f:ed:16:77:69:93:96:c5:c5:14:
77:7d:12:10:7e:7b:a2:85:8c:4f:8e:15:7a:82:58:05:51:0a:
e1:9e:83:12:4c:85:65:55:03:92:a9:48:8f:bd:79:fc:8a:d6:
d4:27:76:b2:9a:cd:51:78:47:3d:f0:b6:eb:c7:77:a4:56:5a:
f3:57:27:27:84:c6:47:b3:6e:dc:06:67:4b:92:17:04:b2:fb:
6f:7e:eb:1b:27:41:7a:d8:0a:e7:be:19:9c:c3:75:b2:37:19:
85:b2:88:04:75:73:6f:f1:db:34:dd:57:ed:0c:e4:30:0c:cd:
6f:d8:be:3a:d7:4f:04:6d:47:5e:29:3d:1c:c7:fb:07:61:1f:
5f:a5:a8:ac:64:20:8f:55:3d:d1:d6:9b:83:00:88:78:36:97:
ba:7b:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:36 2026 by rpki-client