
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
File: YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json)
Hash identifier: PLEuAUOhiOuMJHsFEzur+7uUJfgUBLNxaM/yq0mfkGI=
Subject key identifier: D1:6D:A9:A7:C4:1C:58:AC:9F:F2:DD:4C:C1:F8:6C:5F:5C:B6:8E:88
Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D
Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
Certificate serial: 03A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
Manifest number: 03A0
Signing time: Sun 01 Mar 2026 01:36:00 +0000
Manifest this update: Sun 01 Mar 2026 01:36:00 +0000
Manifest next update: Sun 08 Mar 2026 01:36:00 +0000
Files and hashes: 1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: zEoZpXCaLdE5BVN0EbMBGFGgUds6c20tPO5ST5MkGto=)
2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: MfmWivPKSaiC6+cXAfiuCrZ3V4kipieIUewchk+y7l0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl
rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933 (0x3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
Validity
Not Before: Mar 1 01:36:00 2026 GMT
Not After : Mar 8 01:36:00 2026 GMT
Subject: CN=69a39800-4245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:f6:7b:46:d7:65:14:10:40:50:fe:a9:92:
da:a2:eb:85:f9:85:59:56:bc:9c:97:91:50:95:c5:
ca:94:23:27:8d:ed:50:f6:5b:35:e6:dc:c8:8c:46:
54:9e:9a:d9:19:23:5f:b3:56:28:d1:19:bd:37:34:
e3:29:80:31:a2:b3:fc:dc:e2:51:65:d7:1f:b1:80:
3e:73:20:c3:69:be:b5:36:cf:5b:a4:9b:74:cc:ea:
13:9e:9b:68:70:61:15:e8:6e:7b:a2:fc:b9:fa:c6:
1e:b4:c8:b7:bf:77:55:32:13:94:7d:f1:a6:0b:f4:
2d:e6:35:f1:79:10:e4:41:48:24:2a:7a:d2:37:3f:
54:63:fa:e3:bf:12:0e:bd:94:65:dd:f9:91:fb:36:
57:cd:b6:5c:5d:7c:ab:d3:bb:6e:1f:c6:13:88:99:
9c:51:16:39:52:46:a8:dc:94:1f:62:6e:ef:97:8f:
d5:ec:73:ee:20:ff:c0:56:40:e8:ab:ee:c6:1d:6d:
24:b0:15:d3:a8:47:99:52:5a:32:ed:a4:28:49:a0:
1f:5d:0a:3f:8f:da:50:89:7d:c2:d0:77:04:9a:93:
21:56:ae:38:24:dd:d0:95:dc:11:1c:7c:ab:04:4c:
bf:f9:4d:06:84:f0:bf:27:69:93:15:cf:ba:f8:70:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:A9:A7:C4:1C:58:AC:9F:F2:DD:4C:C1:F8:6C:5F:5C:B6:8E:88
X509v3 Authority Key Identifier:
keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:70:8f:92:b8:e1:67:a1:7b:53:83:94:90:f5:a0:52:d1:f9:
08:53:bc:da:3c:c6:56:db:0e:23:44:bc:f1:5f:1b:ec:84:13:
11:ff:07:2a:25:c6:10:ae:ea:33:84:57:aa:aa:d6:56:d8:73:
4c:3a:70:f6:10:c8:78:95:d3:08:5e:ba:ca:38:1c:35:0d:b4:
fd:5e:57:15:17:79:f8:09:ef:fb:b5:2d:97:c3:7c:66:1f:5c:
28:63:1f:26:4d:6b:26:b0:a1:2a:9e:39:dc:ab:28:0a:51:eb:
f0:d8:bf:ea:66:88:f7:3b:51:9e:37:6c:1c:12:3b:f7:ce:ea:
2d:c5:21:74:0b:a8:55:83:c9:13:af:a3:19:41:17:0e:76:18:
d0:b0:d9:e7:7b:f0:56:c7:5d:4f:7d:7c:c8:b3:aa:8f:14:68:
5b:9d:ed:26:26:96:8c:81:0e:87:61:80:a1:95:20:e0:f3:36:
4f:23:8a:69:01:c7:d3:76:7a:7b:c8:82:c6:2e:ec:32:d6:2b:
9b:f6:38:06:de:5e:e3:60:e2:60:4c:7a:51:8a:5a:4e:80:6c:
8f:aa:49:21:c6:1f:7d:0e:d6:0c:ed:24:d2:d9:58:01:59:94:
82:d9:34:95:01:c9:47:c5:da:ce:96:8b:57:72:cc:79:c0:8b:
31:bd:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:57 2026 by rpki-client