
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier: juWmUxNszYUjf3ie8hrXm3GC6ag6LZj+pP7T0rYcJ/8=
Subject key identifier: 19:2B:82:76:96:E4:48:6D:64:E9:2F:8F:8A:B1:A8:7B:9F:83:08:9E
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 35DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number: 3577
Signing time: Sat 04 Apr 2026 15:15:38 +0000
Manifest this update: Sat 04 Apr 2026 15:15:37 +0000
Manifest next update: Sat 11 Apr 2026 15:15:37 +0000
Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: agTPPIiMFS7h/dE96Y6FCF4/JqpyMuF+EwnX7KMDdPY=)
2: 7BAC7A5621D411F199DF6C46233D8C67.roa (hash: /mDg6LUZzeHlaNJOXKegHskznJoBNs4nZJuthgsnsWg=)
3: 0F3E8640D99D11F08333CF1766D3641D.roa (hash: qzuruNPj+CxqWUofv9I42+V40MXD4+oF0yeOUf6AX+Y=)
4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: CujlrPZRzwdLdoypUA6XG0sSyWx22QqMi3Wunv/TANU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13788 (0x35dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Apr 4 15:15:37 2026 GMT
Not After : Apr 11 15:15:37 2026 GMT
Subject: CN=69d12b19-29fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:4c:db:78:a5:66:77:35:bd:85:e2:0d:af:
e6:14:a3:71:40:38:20:53:f7:26:de:93:1c:15:68:
a9:ea:b1:22:e9:1c:a0:eb:19:48:3f:2a:5c:75:ea:
45:f9:be:33:7a:cb:b7:da:91:75:7c:81:5b:22:7d:
75:16:8c:a6:6c:cb:8d:ec:44:b9:90:28:22:45:19:
83:33:28:ae:66:24:e9:6b:fe:8d:d7:7d:a7:08:9a:
a6:ce:63:36:1b:cb:43:f0:b1:6d:f6:01:c7:5a:f3:
19:db:58:fd:1f:d1:26:0b:76:3b:28:b5:cf:2e:dd:
48:bd:d3:76:2d:08:04:6c:da:13:60:e4:b6:d8:e9:
c4:33:87:53:31:eb:da:d1:49:7f:b3:0f:fd:17:a9:
04:f3:ff:9e:b5:96:8f:e0:8b:f7:f5:6f:ca:ca:4e:
73:e0:f9:e3:6a:70:87:7d:f8:ea:8b:e9:49:84:aa:
5b:58:de:72:bc:ac:3a:92:f8:ec:63:12:96:5f:13:
7a:31:b0:52:f2:4e:30:ca:ad:15:7d:d1:82:70:11:
93:1b:93:a5:15:95:73:00:41:9c:19:38:12:13:36:
6f:ff:a9:64:f9:c2:79:21:21:23:1f:23:3f:0d:d0:
2a:b4:81:b1:b7:5e:8d:05:7e:16:6c:8c:a3:74:e9:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2B:82:76:96:E4:48:6D:64:E9:2F:8F:8A:B1:A8:7B:9F:83:08:9E
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f7:c8:a8:73:cf:3c:c3:f4:55:ed:62:41:82:36:3b:33:ae:
5b:2d:17:d2:2e:de:4a:90:4a:ac:5e:11:80:2e:2e:31:99:c2:
ed:0e:53:4a:0c:cc:43:48:09:3d:f4:a3:1f:e4:3f:f5:f9:3e:
ad:13:eb:7a:a9:ac:07:a5:6e:21:49:00:e0:4f:d7:23:61:ed:
2b:54:e0:36:13:59:8f:3f:87:2d:78:0f:6a:35:f0:85:7d:15:
64:0d:14:26:e1:88:8f:de:e1:8b:ec:ef:0b:90:c3:94:86:78:
9c:ce:65:92:87:17:18:73:2f:33:0c:cf:e0:40:59:de:26:9b:
e3:b5:6c:3e:2e:96:be:80:96:d9:4c:97:2f:bf:e4:d5:33:2f:
cb:d5:34:cd:c1:d3:5d:2c:bc:3f:13:1b:24:88:a8:bb:d1:a0:
10:fd:87:a4:e7:52:25:fa:b5:57:87:09:ee:d9:83:3e:05:94:
69:f4:f6:36:dc:e1:a9:28:31:16:e5:d3:d9:62:da:30:37:35:
b9:21:e8:2a:d1:cf:94:f5:79:d5:e5:86:6f:7e:bf:40:51:0f:
39:e3:4b:97:e4:2f:b6:e3:d0:34:b5:39:d6:64:f6:3c:60:0e:
d6:3e:14:3c:56:23:e7:6a:bd:19:dd:b7:f1:ba:7c:99:81:53:
22:42:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:49:17 2026 by rpki-client