
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json)
Hash identifier: Mwsk9SV9h8nPa542FTBnbw14QFlTkAUlZYXhJDYpAN4=
Subject key identifier: AC:84:BC:7E:EC:4C:27:12:75:73:CE:CD:3F:56:27:2F:4F:DB:C4:9C
Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Certificate serial: 0CBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
Manifest number: 0CAE
Signing time: Sat 04 Apr 2026 18:20:57 +0000
Manifest this update: Sat 04 Apr 2026 18:20:56 +0000
Manifest next update: Sat 11 Apr 2026 18:20:56 +0000
Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: RPMUB1jWzAsg91vwYIAh4P3sHckjp4UgZjeBYfiCq3k=)
2: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=)
3: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Validity
Not Before: Apr 4 18:20:56 2026 GMT
Not After : Apr 11 18:20:56 2026 GMT
Subject: CN=69d15689-02b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:d9:63:cc:95:f6:ce:7c:df:d6:c8:dd:91:
b6:ab:24:0b:37:1b:9f:e9:22:1b:0b:7b:7d:f8:d3:
70:5c:18:44:76:ff:d3:a9:68:58:d2:e4:0b:a2:05:
4c:86:44:50:64:45:39:84:59:5d:96:bc:dd:b3:5f:
98:b5:c2:3c:a7:a5:06:50:57:0d:27:f8:54:10:16:
25:d0:39:16:83:5e:62:18:e6:88:50:e8:74:23:8b:
ce:a6:cf:2c:de:e5:6c:72:53:9f:bc:f1:eb:3d:97:
08:91:f6:57:1f:e8:2f:0c:ec:59:3f:71:39:e0:bf:
10:4e:3b:fc:8a:7c:74:8f:db:90:fd:99:36:f5:94:
8e:5f:58:66:09:3e:12:d5:aa:3c:1b:6f:a1:cc:ea:
3f:01:70:4c:32:4c:9a:76:82:9b:f6:8e:4e:9a:1c:
4b:d5:88:de:d7:f4:70:a4:e5:7d:44:c7:33:8e:b7:
2c:03:e2:56:96:c0:e6:bf:84:9f:b4:14:a5:e6:f2:
53:11:c3:be:f5:73:41:46:1e:35:55:62:95:ba:89:
13:70:11:64:7f:20:1d:86:f0:04:a2:82:86:e0:4a:
ab:e4:79:19:77:a5:41:85:1b:ae:7d:62:12:53:5f:
8a:1f:f4:4c:6e:9c:82:94:f5:08:cb:dd:c3:ff:27:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:84:BC:7E:EC:4C:27:12:75:73:CE:CD:3F:56:27:2F:4F:DB:C4:9C
X509v3 Authority Key Identifier:
keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9a:13:9e:cb:b1:0f:be:63:d8:a5:cd:a8:94:9e:93:94:1f:
a3:c0:0d:90:f3:2a:7d:2b:28:ce:d9:42:1b:07:dd:ec:64:b4:
60:e2:ea:98:55:7d:5e:48:0a:98:3f:eb:52:35:62:e8:f8:c8:
37:bf:fd:f0:51:8f:8a:e7:5e:3e:4a:c5:55:1e:1e:cc:c9:7f:
71:0e:f3:cb:c0:30:1d:1a:a9:26:e7:b0:cb:3a:6f:62:89:05:
a2:e5:fd:fd:52:b6:e2:f7:29:ad:1e:cb:0c:b3:ce:16:7d:eb:
92:25:c5:f6:71:88:07:93:de:d2:41:57:10:55:0c:b6:37:f9:
bf:71:c2:ea:9e:8b:e6:5f:18:56:b2:f7:18:c9:c9:d8:ad:27:
72:e9:59:09:d2:7e:2e:b3:bb:62:29:a0:45:b1:27:6c:bc:de:
22:72:4a:0c:7c:c9:88:95:34:e3:96:92:fa:c1:2f:b3:c0:24:
c8:4b:78:00:56:b8:e5:50:2b:ff:35:e2:d5:13:97:0d:62:e9:
43:a9:95:4a:1d:08:61:35:ba:14:93:17:56:20:0a:ec:6e:f5:
93:3c:b7:30:f7:a8:53:3a:47:6f:5f:0f:e2:7b:29:95:e2:36:
3b:ad:11:b4:80:52:78:58:6a:b5:62:a4:bd:36:0c:ee:d4:a2:
f7:50:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:23:21 2026 by rpki-client