
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json)
Hash identifier: fYrKd/6JJC8+mcRdrR6FV/9diP/wWu5xX+WALkrOpLo=
Subject key identifier: 9C:9A:7B:D5:B9:69:D0:9B:22:4E:76:DC:45:AB:35:81:61:21:CE:9B
Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17
Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
Certificate serial: 070D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
Manifest number: 070D
Signing time: Sun 01 Mar 2026 23:50:03 +0000
Manifest this update: Sun 01 Mar 2026 23:50:01 +0000
Manifest next update: Sun 08 Mar 2026 23:50:01 +0000
Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: abKU0PKkuCuCwfzf2V+MBkPv3kAwq8QeyNZuh1abtVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl
rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
Validity
Not Before: Mar 1 23:50:01 2026 GMT
Not After : Mar 8 23:50:01 2026 GMT
Subject: CN=69a4d0aa-11a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:f7:14:9b:5f:16:e5:f4:ae:7c:d0:b3:0b:
16:17:a6:9d:ef:00:c2:0f:e6:78:43:80:26:fc:b8:
56:70:5a:e4:d1:ec:7e:6f:66:32:f9:e0:8d:cd:fc:
c2:f1:26:14:37:05:ad:0f:ce:94:76:cb:9b:9c:10:
17:ab:70:59:4c:a0:22:59:a4:d8:10:1a:90:4a:1a:
02:81:59:30:a7:05:5d:0a:dd:12:5c:fd:74:6b:ae:
b9:4d:13:58:64:27:62:bf:58:3a:d2:21:ae:33:f8:
f3:b7:96:0b:4f:9c:8a:f9:e9:de:6a:2a:3a:a4:c8:
d6:f0:bc:ff:b1:4a:43:ac:fb:1e:7b:7e:49:22:7d:
f0:3f:6f:f6:6a:0f:bd:b6:ed:d5:cf:61:dd:6e:0c:
8a:c0:4a:d3:7c:14:40:46:f6:ca:ed:4e:2d:5a:48:
4b:ec:2c:87:e4:2b:2f:a8:af:cb:16:1c:7d:33:14:
76:23:6e:8f:04:d8:fc:30:e0:fd:d5:0f:5f:43:e4:
d4:87:14:60:96:d2:3f:19:f2:51:48:84:11:98:48:
92:31:fa:bf:c4:fd:2f:60:0f:8a:37:ff:18:b4:b2:
f3:60:e7:f1:25:93:d6:11:d9:cc:04:be:6e:c7:9b:
43:15:76:66:41:1e:01:84:70:c9:ad:47:1f:17:98:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9A:7B:D5:B9:69:D0:9B:22:4E:76:DC:45:AB:35:81:61:21:CE:9B
X509v3 Authority Key Identifier:
keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:87:8e:91:cf:f8:c6:bd:f6:6a:45:99:22:2a:6b:8b:16:92:
87:8f:90:e5:86:71:63:6f:ab:4e:36:18:5b:45:be:f0:a4:99:
ad:d8:0e:58:ed:8a:d8:43:ba:ae:a1:8a:a5:03:ff:d4:fb:a0:
02:f7:21:32:12:fc:15:f0:3d:0b:48:13:3f:f9:67:08:98:c9:
1d:68:70:6c:ab:01:c1:78:3f:23:63:2c:e5:02:a1:be:26:ad:
18:16:5e:ea:7d:d3:e8:f9:be:3b:50:d3:36:b7:fe:0e:26:6d:
9e:c3:f1:13:b3:fa:5b:e1:dc:6a:03:36:30:93:9d:27:42:18:
94:76:52:4e:49:dd:d7:e2:84:32:ff:ee:3f:8f:1a:62:07:0c:
20:04:a1:00:3b:06:cc:d3:ce:ba:49:5e:f8:02:aa:fd:b3:3a:
fb:1d:d8:1c:c7:c8:3c:5b:c8:74:01:db:5d:76:85:39:08:55:
58:56:1a:11:f5:cb:11:f7:94:ba:19:ea:d4:0d:75:81:7b:a5:
b3:bf:66:d9:67:4a:fb:76:56:45:68:c3:ae:b1:51:24:76:9c:
c5:28:e7:05:1d:23:04:29:9c:e9:b9:b1:39:46:24:50:84:9f:
2c:1d:be:d8:e6:ec:37:bf:4c:70:f0:14:12:3e:b5:83:12:2f:
60:5c:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:25 2026 by rpki-client