
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
File: YqwbuVgKcRmBnntrbrLDUVNHh_0.mft (raw, json)
Hash identifier: auK3wc0LhqyiguLl0rYKXwgoREWScB8vQ7Fbxlsp6mU=
Subject key identifier: 0F:16:DE:03:8E:81:BC:69:DE:07:54:CE:9C:4A:9B:C0:04:E4:53:63
Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
Certificate issuer: /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
Manifest number: 0138
Signing time: Sun 05 Apr 2026 04:51:19 +0000
Manifest this update: Sun 05 Apr 2026 04:51:19 +0000
Manifest next update: Sun 12 Apr 2026 04:51:19 +0000
Files and hashes: 1: YqwbuVgKcRmBnntrbrLDUVNHh_0.crl (hash: mlGiaf8Gq6BqnB0PiMuy6mwBZhRJvIa5mj6pLUb9zBk=)
2: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (hash: BuxXyoL8osjsOVkcemiUlr0GNXekE0nxlamBP/kmyXM=)
3: 652283665B1A11EFA78B847EC4F9AE02.roa (hash: UsVYh0cMVNRpr+Gc87SWu7LilmsEheyEv/IWx8kKIpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Validity
Not Before: Apr 5 04:51:19 2026 GMT
Not After : Apr 12 04:51:19 2026 GMT
Subject: CN=69d1ea47-9e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:bc:b4:8f:4b:97:01:8c:dc:bd:34:d8:10:
37:0e:b2:95:eb:00:48:f7:01:90:d8:ae:e1:62:12:
55:f8:e2:87:4d:68:a9:1b:29:dc:d8:62:27:2f:2e:
e0:50:04:6b:eb:73:d7:b2:d7:3f:61:6c:78:9d:06:
5d:a9:81:43:e5:48:75:27:f9:7b:3e:4f:8c:bc:21:
fd:df:81:c2:eb:e2:b0:ad:0d:dd:8f:28:c8:c7:ca:
ac:20:5e:b1:d7:f8:63:c5:82:6e:d4:2b:9f:7c:e2:
37:c8:86:33:bb:26:26:49:b6:9b:c8:1a:58:1f:1c:
39:42:33:b4:94:f1:00:6b:6a:04:36:0f:d1:5d:ff:
89:f7:f8:8d:93:c2:29:6f:86:3d:e8:a2:76:ce:25:
9a:ef:ea:20:dd:0b:26:be:3e:fd:cb:b6:c5:6d:0f:
65:70:4a:e3:a3:b6:cd:7d:1b:84:3d:5a:9d:f2:f3:
c5:94:42:77:18:4b:45:91:ea:db:5d:e3:ca:24:65:
f9:1f:77:7f:02:5e:3a:87:95:e5:50:6f:a7:97:14:
92:1d:ba:0c:32:31:75:53:ce:da:18:dd:d2:f9:af:
1d:61:d7:6f:09:85:90:c9:7e:03:83:93:13:bc:59:
01:bc:77:d9:5b:e7:7d:bc:07:dc:12:84:b2:74:35:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:DE:03:8E:81:BC:69:DE:07:54:CE:9C:4A:9B:C0:04:E4:53:63
X509v3 Authority Key Identifier:
keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:13:a0:49:b1:f4:ff:2c:df:5e:cf:e9:60:1f:89:2a:24:
98:ee:ce:43:ef:ed:73:7c:49:81:97:1b:ab:cc:69:82:f2:ec:
07:65:c8:8b:25:19:81:ca:cd:5e:1e:4b:16:c2:dc:0d:e3:96:
34:a4:38:f6:d4:3f:e2:b9:6f:3f:17:eb:7a:6b:77:d1:d6:0a:
45:f2:43:5b:51:2d:f2:9d:5e:1a:12:d3:f6:f8:fb:ff:c1:bd:
ec:c2:72:28:b7:d9:35:89:83:bb:89:a6:03:fd:da:10:14:46:
5d:76:65:33:b0:6a:34:53:26:42:3e:ec:4d:db:d0:73:ac:1d:
5d:9d:35:c2:77:3f:92:4f:0b:3a:91:46:a8:dd:2c:a2:cc:ce:
f7:c3:35:f3:f4:c7:79:69:a9:d6:ed:b8:cd:3c:99:15:d2:ca:
a1:f6:9f:ea:3d:21:8e:10:3e:fb:12:b5:2c:94:d3:05:8d:7d:
4b:86:41:71:5d:54:f3:e6:46:01:53:5d:8d:bc:8f:29:2b:c4:
0b:d8:76:13:5f:9f:f5:a1:79:a9:ed:bb:36:2d:66:c8:3e:6b:
e5:61:bf:84:5e:89:db:4f:49:45:ac:71:3d:da:76:44:92:d2:
82:96:38:3b:69:d0:4f:3c:32:13:f8:48:10:37:9d:04:1d:04:
ac:61:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:03 2026 by rpki-client