
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File: yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier: TKammWVLuGYHbuus0/FrYI11HFZcPMcCyWCRw8UxeEw=
Subject key identifier: 01:77:20:BE:35:78:22:44:AB:AE:9D:68:CD:FA:8E:E4:AF:26:DB:D8
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer: /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial: 0CA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number: 0C96
Signing time: Sat 04 Apr 2026 18:23:14 +0000
Manifest this update: Sat 04 Apr 2026 18:23:14 +0000
Manifest next update: Sat 11 Apr 2026 18:23:14 +0000
Files and hashes: 1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: kdefzhubKxFm8K9BYk7/ZzXvuL7b+xON/D25cwNuHUg=)
2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: k4o/xpl05MWpxfINsWsD9ge7BlRuKXGB+2xC5Rxqzp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3234 (0xca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Validity
Not Before: Apr 4 18:23:14 2026 GMT
Not After : Apr 11 18:23:14 2026 GMT
Subject: CN=69d15712-89b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:7c:94:d6:42:8f:0f:1b:85:63:de:65:06:
2d:63:dc:49:e6:13:66:00:79:8f:13:f8:2c:67:e8:
b3:43:e0:a7:3f:6c:67:5c:59:27:e3:82:d5:10:48:
e7:97:57:05:7b:d1:bd:5f:80:7d:ce:9f:0d:f0:b5:
33:16:ba:e9:95:43:df:bb:f7:b7:f0:62:0e:fc:4f:
8f:bf:b4:6a:b0:c1:b5:21:73:93:4f:45:13:04:11:
e7:c4:ea:49:a9:3f:60:a0:7f:38:6e:92:35:dc:01:
44:89:1c:cf:56:af:9c:4d:fa:37:1c:64:e9:7a:92:
b2:93:cd:f7:05:4e:0f:21:8b:69:b6:0f:38:55:bc:
a9:3f:a0:cf:d6:62:e4:41:e9:58:ad:8c:87:1f:70:
fe:8e:cd:a2:63:e7:df:30:5f:7b:e5:4b:ba:ba:fe:
1a:40:72:b5:4a:94:6a:41:6f:c0:f6:6a:37:a5:55:
9c:37:9b:8e:f8:0f:a1:eb:ed:35:cc:9e:31:5a:62:
51:75:29:d4:af:65:71:18:d4:f6:35:f8:0b:c4:6d:
d1:5e:38:46:42:3c:d2:36:87:3f:b0:66:db:97:47:
7d:2c:5c:68:cd:8b:1c:f9:1e:54:f2:7e:8e:3f:22:
2c:21:20:51:eb:bb:27:2b:bb:4a:08:67:96:12:e0:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:20:BE:35:78:22:44:AB:AE:9D:68:CD:FA:8E:E4:AF:26:DB:D8
X509v3 Authority Key Identifier:
keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:82:24:aa:11:79:32:ad:16:3c:4d:df:55:a6:6d:f0:11:18:
40:75:2a:27:8f:90:15:97:d2:00:fd:76:08:0a:08:9e:f0:3a:
23:68:ca:b4:44:ab:84:54:5e:b4:02:c5:85:de:e3:ba:36:66:
01:a0:b7:16:27:9b:28:ef:4c:c5:3b:97:4d:c2:d3:cd:15:c8:
de:35:e2:99:a0:d0:1d:fb:11:d1:9d:d5:12:aa:91:88:7f:ff:
02:e5:7f:9d:4f:9f:df:f3:3d:ee:59:d7:79:77:40:2a:1d:0c:
d0:52:ef:c2:69:c0:f3:c6:b6:f1:19:a2:f0:22:10:9c:b9:33:
1b:e5:26:fc:15:e2:f0:3e:ad:be:6e:c7:e0:24:93:8f:5c:45:
95:df:b9:bb:30:a2:34:61:3c:ca:62:54:4c:a5:50:1d:34:eb:
ae:69:d6:b4:c5:ac:49:d7:b2:53:be:22:0e:df:ea:0f:32:36:
8c:18:24:35:7b:4c:57:8e:87:dc:6c:79:fb:63:be:f0:f9:13:
08:78:64:d7:ea:47:36:aa:c4:07:fc:32:6a:82:f2:8d:ff:17:
4c:fe:08:29:a5:25:59:b9:60:f7:90:36:36:7c:ce:a7:e5:72:
5a:be:0a:b5:cb:2b:4a:bc:f8:e4:9b:4e:97:c8:7a:3e:3e:a0:
f6:72:60:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:33 2026 by rpki-client