
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier: FNuc+KpsGWJelx/zTDWl57/SkoWjdu6NzQWEbQyVAQM=
Subject key identifier: FC:88:E7:3A:4E:49:5E:84:81:08:16:55:0D:DC:9D:CE:74:2E:B1:C8
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial: 0580
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number: 0575
Signing time: Wed 20 May 2026 23:23:29 +0000
Manifest this update: Wed 20 May 2026 23:23:29 +0000
Manifest next update: Wed 27 May 2026 23:23:29 +0000
Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: rM/DobdnraFgsVepZnN1jYTgExdNuhsRmX1sGbOCfBY=)
2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ekGdq5XwvQSiFAECeI1yOoTTSMBYmajgvzc3Dt6ibs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Validity
Not Before: May 20 23:23:29 2026 GMT
Not After : May 27 23:23:29 2026 GMT
Subject: CN=6a0e4271-6d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:e3:f5:0b:76:d9:51:a0:03:98:68:03:b8:
e4:04:e5:05:f9:6c:11:7b:95:98:1a:2e:93:1b:71:
6c:9c:71:98:da:40:03:9c:e9:bb:a1:75:2d:d2:1e:
5a:49:60:16:a5:77:74:1f:4e:e2:d5:f0:78:bc:3e:
b3:d3:40:95:1d:1d:f9:42:d0:d7:6b:4e:ee:51:a6:
9a:36:e4:cb:b5:d7:6a:9e:33:dd:f4:b4:bd:69:4c:
b8:0e:20:aa:2e:32:e0:37:82:38:e3:ad:77:51:8c:
5c:53:fe:33:90:d0:b0:f0:d8:79:cb:5c:fa:a7:00:
6d:86:cc:c8:7d:99:88:84:34:e5:29:a4:eb:9e:47:
bd:e6:59:1b:52:c2:8f:f2:01:c3:19:b0:37:4e:c8:
03:0f:68:7a:9e:7c:1f:34:7c:dd:04:df:34:46:15:
a5:a7:f5:e2:c2:62:f1:5f:7b:32:56:1e:44:3f:b0:
de:bd:ae:8a:c6:92:3e:0c:49:58:27:6d:36:06:69:
86:24:1a:a6:35:b5:8c:bc:71:c3:3f:61:f4:ec:96:
88:29:a0:18:40:cf:f4:eb:4f:22:b3:6e:5a:e2:3e:
35:2b:6d:ac:01:02:3a:aa:c0:e6:f1:81:51:ae:68:
ee:7d:26:11:2b:4e:ac:1c:3d:d4:7a:a9:76:93:ed:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:88:E7:3A:4E:49:5E:84:81:08:16:55:0D:DC:9D:CE:74:2E:B1:C8
X509v3 Authority Key Identifier:
keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b7:71:67:9f:7c:b8:8b:bd:1d:35:34:4c:b4:20:29:0a:65:
e2:ae:e7:ef:9b:f5:23:d9:09:e3:0a:0e:cf:ea:e1:0a:7e:7b:
c9:32:50:d9:f0:56:58:df:9e:96:d3:93:06:d5:41:2b:c0:5b:
35:ea:68:b0:6a:a9:7e:10:e1:63:60:cc:ec:60:15:c5:e2:77:
4d:d2:30:d7:39:39:14:a0:0e:0c:74:3b:b4:8a:5d:e3:97:06:
46:c3:2c:1e:c2:6b:7c:f3:d6:33:a0:c6:e6:33:91:bc:68:ac:
a5:5d:e9:d4:95:61:c9:8c:7c:b0:0c:55:87:63:02:1c:ce:fa:
e4:9a:2f:9d:40:d7:e7:d4:b1:c0:39:a7:3a:f1:91:32:db:39:
fb:a3:92:d0:67:52:9c:b1:af:0e:c3:c0:4e:ae:44:11:44:50:
32:4e:92:91:3e:b3:eb:11:c9:50:bc:48:4d:d0:ce:1d:3b:8d:
9d:79:2c:66:9d:f8:a1:7f:18:d3:0e:4e:05:c3:3e:9b:d5:99:
00:a4:22:9f:fa:41:7d:05:7e:a7:58:cd:03:e7:fc:51:36:0e:
d7:23:60:18:c1:61:c2:4b:db:af:02:a1:d2:2d:01:3a:ae:d9:
5a:1e:29:5e:09:7a:6e:04:c2:6f:89:60:ab:3c:91:7d:ba:44:
00:4b:f0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:25 2026 by rpki-client