
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
File: YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json)
Hash identifier: HfuT+7vUk5FtTPybVePVlReQAvwLgTXNd8LhwT88Tmo=
Subject key identifier: D2:10:9F:56:03:C1:07:0A:05:E3:06:26:5E:0D:C9:39:E1:38:8C:A3
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Certificate issuer: /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
Manifest number: 0597
Signing time: Sun 05 Apr 2026 00:11:14 +0000
Manifest this update: Sun 05 Apr 2026 00:11:13 +0000
Manifest next update: Sun 12 Apr 2026 00:11:13 +0000
Files and hashes: 1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: vr25YlcvhHLC96vKuvSszJtgUQNVdAwN++juYHM7AR0=)
2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: Qj7+4DVUCuo+XKpk6kPAWlDfbi1GJFCenpHteTcWifg=)
3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: G79QDfoI4Z2O2HdywLlewm1mSw0BHbCZUp009tKKDn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Validity
Not Before: Apr 5 00:11:13 2026 GMT
Not After : Apr 12 00:11:13 2026 GMT
Subject: CN=69d1a8a2-8ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:cd:cb:e0:07:ac:a8:b7:f1:f2:cc:c5:77:
78:b2:62:29:96:a1:86:8e:71:53:5b:34:99:5a:1d:
13:60:50:83:f5:f8:59:1b:73:f6:05:84:96:8c:de:
a3:ce:a5:2e:26:8f:a7:c9:7a:5f:ea:94:60:0f:5d:
03:cc:b8:db:7c:05:17:90:49:d3:9b:dd:92:10:de:
2e:5c:ac:27:dc:c5:04:55:ba:48:f8:48:f7:47:05:
4b:c8:b6:4b:63:3f:a2:aa:04:31:c5:1d:0a:ed:74:
40:b8:5c:b1:79:ea:7e:49:dd:e7:ce:bb:31:1d:76:
c1:37:7d:02:40:34:c6:23:ac:3c:59:28:61:99:c8:
29:f6:6e:d7:31:7f:21:d8:2b:69:67:db:12:b5:3f:
2b:d6:7d:bb:e3:72:79:19:4b:fd:df:b0:b1:c1:95:
64:52:7d:15:6a:07:b5:b9:b1:70:ec:77:f6:32:80:
e7:38:c0:78:46:84:35:fc:8a:0a:3c:e6:bb:9b:1e:
a4:0c:33:41:57:a6:85:50:6b:e7:1e:dd:6e:7e:7d:
5b:72:1f:1c:46:75:e9:00:32:bd:27:c3:3b:b4:13:
c7:1b:de:ce:5e:7d:94:3d:c3:b4:ce:7f:76:3b:f1:
76:cf:bb:e4:2b:1e:d9:22:38:45:6d:a0:3a:a2:aa:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:10:9F:56:03:C1:07:0A:05:E3:06:26:5E:0D:C9:39:E1:38:8C:A3
X509v3 Authority Key Identifier:
keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:89:44:87:34:9f:3c:ed:7d:02:60:0b:55:51:0c:8a:d4:b6:
12:5c:dc:d0:99:a9:a7:fd:4c:0a:2b:d3:2f:57:82:35:c6:32:
a7:d7:ce:61:25:f2:79:4e:21:32:15:76:c0:9d:ac:e2:22:2e:
13:ba:05:49:eb:9b:f5:f2:bf:ce:df:e7:40:da:6d:92:ea:b8:
b4:f4:28:22:72:ac:8e:53:61:fa:f4:14:4f:9d:0f:cc:7c:d0:
09:98:1a:73:32:d8:52:f5:3e:12:70:c9:56:b5:5f:a8:69:99:
ba:6d:8f:8f:c2:40:76:5f:b8:0d:95:6f:08:01:48:ca:a1:38:
b6:00:6c:9a:11:9e:76:57:8d:99:c5:4e:09:ca:0d:99:0e:b1:
8a:b7:92:c0:22:d2:ce:b1:3a:43:c2:e5:9b:73:12:ea:05:bc:
24:94:05:3b:e1:02:9a:9c:6a:59:19:cd:ad:df:29:51:6d:5d:
95:21:df:b6:84:1f:c7:40:2d:28:8f:4b:4c:bc:16:e1:1d:b5:
e7:d3:27:8a:a2:7e:65:89:a4:8e:38:93:8d:6c:55:bd:0a:44:
6d:f1:36:51:a5:31:d4:3f:c8:f9:1f:9b:50:ac:4e:0c:61:ae:
8f:12:c9:69:1c:b1:c8:a4:4f:3c:21:5d:b2:ec:0f:47:e4:12:
bd:52:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:33 2026 by rpki-client