
$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json)
Hash identifier: /s/ZdaL67eYMZmM79waipGLGYO+tTlKLaV6kQHEGs6I=
Subject key identifier: 24:44:EE:E5:BA:8A:48:31:0A:A9:3E:0A:5C:ED:84:F1:BB:47:31:D4
Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
Manifest number: D3
Signing time: Tue 03 Mar 2026 06:18:42 +0000
Manifest this update: Tue 03 Mar 2026 06:18:41 +0000
Manifest next update: Tue 10 Mar 2026 06:18:41 +0000
Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: ilq6dGjYFsl9Rgd2knnXfsGEBK3NAxLSGGBt2Nmx1FA=)
2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: XcWLcqq81azP3U6TBivGOyYKJ0IUJVaAPBiEqjAnhx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Validity
Not Before: Mar 3 06:18:41 2026 GMT
Not After : Mar 10 06:18:41 2026 GMT
Subject: CN=69a67d42-ab5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:14:43:fb:df:fd:4f:b0:4c:69:4e:b1:d9:
1b:6f:85:37:09:b3:de:d3:ee:79:02:91:25:41:33:
0a:56:3d:e2:94:d2:10:e0:a2:c4:54:e0:5c:86:95:
65:fa:c0:b0:ac:be:8f:2e:24:8d:90:93:ae:a2:3b:
0e:00:fd:ca:c4:71:8d:0f:1e:b6:5f:b9:58:4d:0f:
5a:a5:04:8a:14:41:70:87:b3:ea:54:f4:2e:07:54:
96:31:cf:41:44:79:fd:73:b7:fe:87:de:1d:55:32:
29:8c:16:00:d0:10:15:f9:a9:e9:d7:8e:9b:0b:1d:
45:66:5c:fc:17:47:64:c3:95:ba:59:45:ce:95:ed:
6d:f7:87:7f:7f:fc:84:ad:92:f1:03:1c:a9:0a:2a:
55:f5:f8:18:4f:ea:7e:f8:74:19:3b:da:40:21:73:
d7:f0:92:e3:34:a3:b1:b3:99:f3:a1:23:ae:ef:ea:
00:b7:53:3f:ef:21:cb:af:b7:ed:e8:18:f5:76:8d:
af:ad:61:0b:42:ce:81:7c:76:f6:89:56:92:b7:53:
4e:92:19:a3:4b:7d:6e:66:a4:5e:d5:a0:9a:97:0f:
d7:17:cf:2b:b0:c1:1a:d4:33:c8:a3:fc:11:bb:30:
3b:a5:3a:1e:6e:2a:9f:2b:e2:f0:1f:9d:20:a4:fa:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:EE:E5:BA:8A:48:31:0A:A9:3E:0A:5C:ED:84:F1:BB:47:31:D4
X509v3 Authority Key Identifier:
keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:c8:ad:3c:2b:41:23:20:8b:bd:9b:64:13:05:9d:63:d0:
ab:07:bf:14:32:6a:c3:2d:40:b7:68:1d:7c:b1:97:97:24:2a:
e1:97:46:cb:9c:87:3e:81:a4:72:c4:4d:2e:75:cf:06:51:be:
a6:71:46:02:98:8f:65:03:ab:06:fd:1a:96:2b:a7:f4:00:55:
d3:0e:8a:9a:d4:db:42:23:95:6f:0c:d4:0a:d2:db:14:14:7a:
25:94:60:5d:55:c0:1b:12:1e:62:85:76:2d:a1:8f:91:6b:a2:
77:e0:4e:5e:be:d6:91:7e:4c:74:29:64:c7:c1:8e:e6:3b:9e:
c5:41:3c:f1:5d:3a:08:2e:3e:4b:cc:05:3d:b8:5e:e8:01:cf:
58:04:27:e6:09:38:5b:27:7a:97:03:bb:0d:a4:87:3a:1d:df:
b1:f1:6d:70:f5:48:b6:08:ab:ed:c0:a0:4f:e4:98:ae:7e:c3:
de:33:16:0a:06:18:43:7c:da:3d:57:5c:2d:94:3f:96:35:5d:
96:4f:d0:ea:bd:58:35:61:ac:8e:b5:09:5c:97:e1:44:c6:4c:
c3:2c:26:ac:ea:9c:06:0d:b6:77:b2:c6:c8:f8:a1:b3:4a:1b:
bd:10:b8:79:49:fc:d4:b3:19:4a:46:a6:6b:5f:89:df:2d:7f:
86:06:c5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:11:00 2026 by rpki-client