
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
File: yy5uwVWepHY5RAtAqtdfleb9vF8.mft (raw, json)
Hash identifier: a1hXoGUQKJ8LQIt/Zri7U/Ifib2sPGUV+U1K7siu7tA=
Subject key identifier: 8A:4D:06:7A:7B:16:7A:5E:17:47:34:6E:CF:09:FD:E4:4A:64:DC:5E
Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
Certificate issuer: /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
Manifest number: 64
Signing time: Tue 03 Mar 2026 07:36:03 +0000
Manifest this update: Tue 03 Mar 2026 07:36:02 +0000
Manifest next update: Tue 10 Mar 2026 07:36:02 +0000
Files and hashes: 1: yy5uwVWepHY5RAtAqtdfleb9vF8.crl (hash: rZWXFsyHk97Bl7G0nVxdrzmivFgNirrEb2jqSdA6hiE=)
2: F9B1B1167E3F11F0B7941020C4F9AE02.roa (hash: 6ut+hJgutmu3/f4DHRIxmtYIF24wDhGZAw9tYwessYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl
rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Validity
Not Before: Mar 3 07:36:02 2026 GMT
Not After : Mar 10 07:36:02 2026 GMT
Subject: CN=69a68f63-293e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:29:6d:e9:33:93:56:60:dc:2c:21:f3:f3:
bc:76:88:95:77:25:50:b2:19:92:6d:35:73:9f:46:
16:a8:32:ef:62:46:1a:2f:3f:5d:54:60:50:0d:d7:
ee:a4:e3:31:90:1d:f6:2a:cc:72:8b:7d:e3:07:0c:
25:10:76:d4:c7:7e:41:13:8e:27:34:ee:f4:c9:c0:
c6:10:58:78:0c:9b:85:76:42:50:1f:84:0c:8a:96:
2a:c5:c4:f8:ba:d8:84:aa:29:da:d6:71:21:97:c7:
78:6e:39:08:8c:93:35:be:0a:14:68:70:d6:2f:65:
58:21:51:2f:c3:40:dd:e0:45:fc:97:d3:d7:26:44:
e1:1c:a3:9c:f7:69:e2:e6:45:30:dc:9c:3d:a3:1d:
dc:c2:ff:42:81:3d:cf:96:ee:3e:2d:45:2e:7c:a3:
0c:32:8f:1e:7d:eb:d2:28:02:29:21:85:25:16:47:
05:ca:6d:91:25:6d:58:c3:b5:46:45:78:18:b3:c4:
55:58:7c:10:f6:85:6b:c3:76:03:ab:be:03:47:35:
76:7b:af:5c:2b:9c:b7:49:b2:c4:86:2b:ec:18:59:
28:8b:c0:e1:3e:a3:a5:8a:ad:80:e2:73:91:9a:fb:
41:10:39:7f:96:69:7d:bd:93:1d:ef:95:46:b9:0d:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:06:7A:7B:16:7A:5E:17:47:34:6E:CF:09:FD:E4:4A:64:DC:5E
X509v3 Authority Key Identifier:
keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f8:70:ea:55:5e:28:44:fd:1b:7c:47:51:2f:c6:5f:8a:e4:
ad:64:bd:fd:7a:53:01:ee:e4:18:ec:7a:c2:0c:49:21:0b:f3:
5d:fd:93:d4:d9:af:04:bc:f7:ca:84:0b:72:f2:d7:bf:13:3b:
d6:63:56:29:62:f9:5a:5e:86:c6:b2:c8:ea:8f:cf:21:01:83:
02:83:27:f9:93:14:23:6a:d1:f9:a4:30:36:50:d3:02:c0:1b:
33:cb:ea:bf:f5:60:b4:03:b4:ca:d6:ae:84:e1:8f:08:b1:70:
7a:04:c3:02:b5:b2:2b:0b:f4:76:b9:64:46:89:07:63:a4:de:
47:27:f0:9d:e8:41:e8:50:0a:4e:a8:ba:0f:c0:d8:9b:9d:ed:
f9:6c:69:04:eb:e3:90:d5:d4:19:ff:bc:fa:ed:05:0e:4e:25:
91:5e:3a:75:74:b9:df:28:c4:da:52:d4:50:e0:88:4f:44:84:
57:25:3b:e9:5c:73:f9:dd:01:be:6b:b7:6d:3b:28:cb:13:b9:
cd:c7:c4:0d:2b:7a:c0:86:58:2c:51:b4:4a:31:b5:df:b8:65:
44:27:24:a9:7b:31:6e:8b:1a:01:6c:eb:85:60:44:21:31:10:
c3:4c:e5:59:1d:b8:fa:5e:be:cc:87:93:33:2b:27:9b:3e:f6:
55:89:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:23 2026 by rpki-client