
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
File: YgNWI5rPPPQIizzmK88YvKgIncc.mft (raw, json)
Hash identifier: e4pALUeXLDqAREl/L0bzDewzlM4ID9KuNi5MQQnTRq0=
Subject key identifier: 46:44:DC:31:56:FD:2F:08:D5:A5:28:2D:DD:13:B3:D0:BD:DC:F1:8B
Authority key identifier: 62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7
Certificate issuer: /CN=A9168497/serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
Manifest number: 2E
Signing time: Sun 05 Apr 2026 08:02:24 +0000
Manifest this update: Sun 05 Apr 2026 08:02:23 +0000
Manifest next update: Sun 12 Apr 2026 08:02:23 +0000
Files and hashes: 1: YgNWI5rPPPQIizzmK88YvKgIncc.crl (hash: Hx+OjfrYp9Lvea4+DPqAT0Ns5k4+4uR0KzX2WP7P0v8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl
rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168497, serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7
Validity
Not Before: Apr 5 08:02:23 2026 GMT
Not After : Apr 12 08:02:23 2026 GMT
Subject: CN=69d21710-b1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:71:f3:d6:65:a3:9f:3c:5f:be:64:3c:4b:
a1:8a:c6:24:b2:4b:aa:24:6e:9b:f9:55:ea:99:a8:
91:18:2c:eb:d7:da:e7:7e:22:c3:7d:b6:01:53:82:
78:54:29:de:8d:d9:c1:29:be:e3:8a:65:ea:e9:98:
56:20:b6:67:ad:15:84:a4:de:bc:a5:f8:ad:25:1b:
ef:53:8b:a5:8b:e4:0d:33:fa:e4:51:b5:6c:d6:1f:
e5:db:f1:a9:b0:92:ed:e4:f2:54:c9:85:96:01:bf:
81:08:1a:8e:cf:a6:b4:43:9b:9b:a9:90:5c:05:df:
10:d5:c6:0c:42:4c:43:ac:dd:8c:7e:ba:ed:dc:bb:
59:34:a6:e5:eb:65:78:e9:02:a6:54:96:f1:fa:b0:
fe:39:09:d3:1f:76:8d:31:d8:2c:78:62:5e:c0:f1:
02:06:09:de:e6:ea:f3:d4:0a:88:18:8a:52:58:65:
c0:c4:a1:44:6a:63:72:3f:4b:78:35:94:2a:4c:1e:
7a:73:f4:4b:46:d1:8e:c7:1b:b2:3b:e8:2f:0c:37:
d2:cb:f0:93:b5:20:5b:3a:6a:3f:b1:92:35:39:bb:
7d:c5:9d:30:47:ed:f2:30:a7:1c:ca:31:b6:f2:76:
79:d1:b7:b6:02:83:14:0d:55:94:72:36:2b:0a:eb:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:44:DC:31:56:FD:2F:08:D5:A5:28:2D:DD:13:B3:D0:BD:DC:F1:8B
X509v3 Authority Key Identifier:
keyid:62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ab:98:c1:29:d6:3e:19:9c:3a:04:42:ec:9e:2b:c2:2f:18:
35:1c:6e:f2:a5:7a:93:5a:6b:bb:0c:66:05:fe:1e:28:e2:c5:
81:5c:e8:86:29:10:7d:f4:83:7e:dc:7b:02:01:f1:98:6e:99:
6c:a4:05:41:2b:62:3a:8c:48:0f:e6:4e:0e:a3:ee:97:40:c9:
46:60:f0:f3:f7:d8:ec:aa:0a:3c:2f:37:33:4a:61:9b:08:21:
93:31:3a:c4:52:9e:30:d0:73:8e:1c:0c:0a:8b:ac:fe:b5:47:
ab:2a:26:d7:77:65:c7:1f:6b:c7:c5:49:6e:03:5f:ce:5c:c6:
d4:5f:44:b3:89:82:c3:60:c8:5f:e1:90:a5:bd:48:93:28:2f:
b1:97:70:a4:8f:61:0f:75:7a:ca:a7:d3:e4:a7:5a:c8:ef:e7:
52:90:13:e3:fd:f6:1e:70:0a:b7:1d:46:21:4a:73:c9:fd:ac:
b5:8b:5c:c3:7e:ba:ef:42:ec:97:81:f2:ce:7b:7a:dd:cf:fc:
47:c8:7e:7c:a7:b0:c7:c5:1c:95:8d:7c:f4:e3:4a:51:cb:3d:
93:9d:eb:6b:6a:86:ba:04:c5:96:c3:18:8b:ac:4e:9e:c8:eb:
d8:08:a5:38:df:fc:34:64:2f:26:49:f6:02:ef:c4:97:6e:07:
c5:32:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:59 2026 by rpki-client