
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
File: YlWvHFTHD2B02LCsoatcuHg4dic.mft (raw, json)
Hash identifier: rbzpbQfOI7w2OSJHbhSnYbOLqJ6E3HeBxRM6IN+bNAs=
Subject key identifier: 41:7A:FB:EC:F4:7B:EB:7B:99:1F:3D:0B:27:99:B6:C6:C4:E7:06:94
Authority key identifier: 62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27
Certificate issuer: /CN=A9148CCE/serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
Manifest number: 95
Signing time: Sun 05 Apr 2026 06:48:21 +0000
Manifest this update: Sun 05 Apr 2026 06:48:20 +0000
Manifest next update: Sun 12 Apr 2026 06:48:20 +0000
Files and hashes: 1: YlWvHFTHD2B02LCsoatcuHg4dic.crl (hash: yi+OW5ds1pDwqbGqfJSn1aWoV1DvDhWdTUD3w8Ii0ZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl
rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148CCE, serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627
Validity
Not Before: Apr 5 06:48:20 2026 GMT
Not After : Apr 12 06:48:20 2026 GMT
Subject: CN=69d205b5-1d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:85:ce:c4:c4:06:2a:c2:81:dd:c4:e6:7c:
aa:80:e9:6e:96:63:ef:d3:7a:fe:54:17:46:f5:cf:
68:2b:cb:4f:2b:1f:fb:1f:1a:72:d4:b0:a8:2c:c1:
52:cf:48:af:25:42:2b:3d:69:7a:c1:97:40:a3:98:
2b:4b:bf:4e:87:d0:c7:16:04:7a:1c:e0:b5:1c:1f:
8f:76:cd:f2:99:da:75:5f:99:53:35:5c:a7:73:b8:
4c:00:eb:2f:dc:41:d5:6f:77:d2:17:19:81:e5:71:
06:fb:79:b0:8c:d2:69:f0:c4:c4:06:d6:a5:7d:a4:
00:dc:59:e2:42:1a:03:62:eb:93:ab:44:98:fd:2a:
6a:b1:2d:58:f5:1d:39:20:a9:e2:d2:f2:9a:1a:21:
96:4b:d8:5b:3b:17:91:18:e0:2e:2a:6a:24:36:47:
84:ac:41:6c:4c:3a:76:f7:e1:b3:14:9c:9f:4f:50:
86:34:b1:b6:9d:fe:2b:5c:91:40:01:1f:35:de:2e:
17:8e:e0:d9:6d:d4:39:c1:b5:c7:7c:7b:39:c0:84:
cb:ac:81:73:32:ca:39:35:02:6a:d0:74:fa:22:e6:
d2:9b:94:87:5c:ba:e6:4d:48:8b:38:50:e9:aa:9f:
39:63:4f:37:94:45:a9:f7:8c:ad:d6:bc:d8:63:3b:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7A:FB:EC:F4:7B:EB:7B:99:1F:3D:0B:27:99:B6:C6:C4:E7:06:94
X509v3 Authority Key Identifier:
keyid:62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:3a:f8:f8:c7:d6:55:fc:42:4f:14:85:8f:8d:57:9a:0f:63:
d9:86:99:01:38:58:8d:89:79:00:81:bf:c0:36:5a:0d:ca:e6:
46:5d:32:ea:09:d0:5c:81:63:07:51:fa:fd:cd:7d:bc:30:f4:
f6:da:04:55:4a:62:8d:06:b1:14:d2:cc:8f:93:bf:e6:9b:6b:
11:9f:ad:23:f5:cc:ab:49:7c:57:de:b8:80:d2:ba:44:d7:7d:
3a:9e:79:4a:15:82:2e:c2:7c:94:13:ad:af:03:c7:d1:c2:1a:
e6:2c:e5:05:b5:96:75:a8:04:6f:20:0c:e3:55:2e:73:bf:d9:
a6:27:ea:5a:e0:1d:a6:92:fa:c7:f7:a5:61:35:f2:55:21:33:
58:51:f2:2a:d3:90:84:86:27:61:df:12:c4:4d:b7:35:52:dd:
7f:a3:b8:0a:5b:6b:e7:13:4d:9d:23:fa:c1:c9:36:85:9b:7b:
5e:7e:33:7f:09:98:86:7c:be:01:cd:f2:35:1b:dd:6f:82:3e:
b5:50:f4:43:0f:b4:b6:a0:a4:c8:ff:74:97:68:c9:27:5c:55:
3f:0e:99:f5:6b:0a:1d:fe:6f:3b:17:0b:2b:7e:d7:96:6e:ff:
52:2c:a9:f2:a4:73:30:6d:01:b9:9c:c5:ab:eb:6f:70:b3:9c:
23:77:01:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhDQ0UxMTAvBgNVBAUTKDYyNTVBRjFDNTRDNzBGNjA3NEQ4QjBBQ0ExQUI1Q0I4
NzgzODc2MjcwHhcNMjYwNDA1MDY0ODIwWhcNMjYwNDEyMDY0ODIwWjAYMRYwFAYD
VQQDEw02OWQyMDViNS0xZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQCFzsTEBirCgd3E5nyqgOlulmPv03r+VBdG9c9oK8tPKx/7Hxpy1LCoLMFS
z0ivJUIrPWl6wZdAo5grS79Oh9DHFgR6HOC1HB+Pds3ymdp1X5lTNVync7hMAOsv
3EHVb3fSFxmB5XEG+3mwjNJp8MTEBtalfaQA3FniQhoDYuuTq0SY/SpqsS1Y9R05
IKni0vKaGiGWS9hbOxeRGOAuKmokNkeErEFsTDp29+GzFJyfT1CGNLG2nf4rXJFA
AR813i4XjuDZbdQ5wbXHfHs5wITLrIFzMso5NQJq0HT6IubSm5SHXLrmTUiLOFDp
qp85Y083lEWp94yt1rzYYzvJXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEF6++z0
e+t7mR89CyeZtsbE5waUMB8GA1UdIwQYMBaAFGJVrxxUxw9gdNiwrKGrXLh4OHYn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OENDRS85M0VGRTJCNDRG
RUUxMUYwODAzNzk0ODJDNEY5QUUwMi9ZbFd2SEZUSEQyQjAyTENzb2F0Y3VIZzRk
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lsV3ZIRlRIRDJCMDJMQ3NvYXRjdUhnNGRpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OENDRS85M0VGRTJCNDRGRUUxMUYwODAzNzk0ODJDNEY5QUUwMi9ZbFd2SEZUSEQy
QjAyTENzb2F0Y3VIZzRkaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFzr4+MfWVfxCTxSFj41Xmg9j2YaZAThYjYl5AIG/wDZaDcrmRl0y6gnQXIFj
B1H6/c19vDD09toEVUpijQaxFNLMj5O/5ptrEZ+tI/XMq0l8V964gNK6RNd9Op55
ShWCLsJ8lBOtrwPH0cIa5izlBbWWdagEbyAM41Uuc7/ZpifqWuAdppL6x/elYTXy
VSEzWFHyKtOQhIYnYd8SxE23NVLdf6O4Cltr5xNNnSP6wck2hZt7Xn4zfwmYhny+
Ac3yNRvdb4I+tVD0Qw+0tqCkyP90l2jJJ1xVPw6Z9WsKHf5vOxcLK37Xlm7/Uiyp
8qRzMG0BuZzFq+tvcLOcI3cBQg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:01 2026 by rpki-client