
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier: 6GyILG9ZfM1kLxCFkQTL//lw6c7J75FxC2gSKLxJ58Q=
Subject key identifier: CB:A0:E1:21:A1:C5:7B:28:AF:B9:45:D5:0B:04:DE:C3:C1:D2:6C:39
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial: 0C25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number: 0C07
Signing time: Sat 04 Apr 2026 18:41:08 +0000
Manifest this update: Sat 04 Apr 2026 18:41:08 +0000
Manifest next update: Sat 11 Apr 2026 18:41:08 +0000
Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: vGtVGlybFItEFI21hJJGEcPmRj1XhDm06DknA4vQCLQ=)
2: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=)
3: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=)
4: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3109 (0xc25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Validity
Not Before: Apr 4 18:41:08 2026 GMT
Not After : Apr 11 18:41:08 2026 GMT
Subject: CN=69d15b44-4843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:48:3b:54:3c:48:54:69:1e:69:7a:c1:6b:
bb:7d:63:f1:26:c2:4f:59:fc:1d:93:09:92:1b:31:
72:38:37:a1:41:3c:e6:cb:41:53:86:54:ef:2d:f2:
f4:40:fd:d1:5d:f2:32:90:2f:1f:2c:ba:44:1b:a5:
b7:31:81:c4:f5:4e:30:7f:a4:4f:c3:b1:af:ad:41:
b8:ea:75:a2:1d:ed:a9:4a:16:8f:eb:2f:04:e2:ca:
12:8b:cd:d7:98:61:b0:6c:16:b0:37:2f:3d:1d:72:
5a:7e:d8:bb:0f:81:4c:8f:ed:13:c9:1e:26:8a:07:
cd:e9:a6:54:14:2d:ed:fd:b7:2a:e1:4d:8d:fb:e6:
3b:ac:c5:b8:85:40:4e:21:38:10:7b:31:58:5b:27:
da:2c:21:06:c3:7e:e3:0d:45:4d:fd:91:95:61:56:
21:b5:15:a8:e3:8e:2a:2f:5a:59:be:26:03:84:64:
43:1c:03:a8:c2:13:72:ab:59:39:a4:57:1f:09:3f:
91:b9:0e:68:23:0d:3b:0d:bd:a9:dc:ca:86:82:68:
2a:3a:95:4a:3b:a2:95:1b:2c:ce:07:16:7e:37:7b:
a1:b2:af:7a:89:45:97:e6:cc:f0:a3:94:5b:51:3f:
6f:e4:15:d0:d0:f1:f9:b6:49:00:2b:6f:08:ec:17:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:E1:21:A1:C5:7B:28:AF:B9:45:D5:0B:04:DE:C3:C1:D2:6C:39
X509v3 Authority Key Identifier:
keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:5c:ff:d4:e0:ef:67:a2:f1:e4:0e:06:db:b8:df:73:98:0a:
25:dc:bf:6e:42:bf:ee:7b:b5:f4:ca:2b:4d:43:df:3b:07:63:
19:5d:cf:7c:57:24:c7:2e:8d:bc:03:56:3a:33:28:da:1d:28:
98:53:96:a3:03:ff:d8:cb:cf:7c:de:2e:6e:e4:76:7d:2e:3e:
aa:e6:35:c6:5a:a9:fa:f1:28:1c:04:98:5d:80:df:ea:d4:73:
68:2d:88:14:f1:f7:2b:00:04:ee:cf:a3:2c:5b:c7:a1:41:55:
d1:9d:58:c7:55:ae:d4:ae:47:82:7b:41:db:e3:d0:17:a8:8e:
3d:22:39:9a:a0:e6:24:ac:24:0a:dd:fc:f9:62:6f:6f:83:f0:
88:e8:0e:fe:b1:eb:40:a7:35:9f:e5:01:1c:ac:4d:4a:2b:d9:
f4:02:cc:19:c6:c8:f4:a9:30:4f:75:aa:d0:cf:67:09:e7:6b:
d1:17:bb:8a:4c:0a:da:fa:aa:d8:62:aa:1a:fc:0b:f4:88:f6:
35:79:5b:0c:7a:2d:47:5f:b2:7a:8f:ec:73:37:f8:d3:59:e5:
27:45:10:c8:f4:2f:b7:ef:b7:94:b5:7c:3b:40:e8:ea:6c:69:
fd:75:72:59:db:b2:ed:9f:2f:d6:6d:f3:f9:3f:c0:63:16:55:
48:35:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:46:59 2026 by rpki-client