
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
File: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft (raw, json)
Hash identifier: q+rPYGZmY5PvQh+N+uDebn2ZPeTK3ysicEvPAhpU188=
Subject key identifier: 43:04:39:7B:5E:3D:FB:7C:72:30:C7:FB:B5:6D:2E:5D:4A:64:78:55
Authority key identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
Certificate issuer: /CN=A915AA2E/serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
Manifest number: 0131
Signing time: Sat 21 Mar 2026 04:32:03 +0000
Manifest this update: Sat 21 Mar 2026 04:32:02 +0000
Manifest next update: Sat 28 Mar 2026 04:32:02 +0000
Files and hashes: 1: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl (hash: efrBQ88cmE991riefmWxfjyRncUGpx+Sx17VmKw2l+4=)
2: 485D1C1AABD111F09DF58512C4F9AE02.roa (hash: EZ3/Kk3uRqT229OhpdvT9ZtoEOP/xAjuG1tip+FaJI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl
rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AA2E, serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Validity
Not Before: Mar 21 04:32:02 2026 GMT
Not After : Mar 28 04:32:02 2026 GMT
Subject: CN=69be1f43-f43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:78:73:3c:dd:be:53:74:2f:fe:d2:97:b3:
bb:1e:4a:61:d1:70:24:7c:4d:a8:61:4b:b5:5b:5e:
65:c1:cd:69:14:77:29:38:5e:c5:ed:e8:c8:7d:7a:
26:e7:be:3f:35:ae:7c:19:7e:3b:64:dd:9c:f1:ba:
44:d9:3b:ad:af:70:b3:c4:8a:df:2c:4d:d3:8d:e9:
28:39:41:6e:ac:4e:5d:3a:79:d6:d0:db:16:82:45:
d1:08:96:f9:af:1a:87:66:12:6e:73:76:85:a9:8e:
0d:1c:6f:4b:fb:c5:1d:f8:a6:3a:6b:d6:fd:0f:f7:
4f:f6:c0:0a:98:f9:c9:27:0a:a5:85:c7:74:b2:c0:
af:48:99:8a:b9:52:2d:b2:b9:ec:dc:cc:6e:c1:1e:
2f:40:8d:d4:44:91:eb:f5:55:c9:d7:80:81:dd:2c:
1e:c5:8b:a8:1b:ab:bd:e4:67:0c:a1:7a:4d:dc:c1:
fe:fb:ff:e6:da:9c:27:86:a6:46:04:67:ae:58:60:
75:a6:e0:b7:99:71:e0:9c:73:d9:27:58:8e:24:65:
5c:4d:44:b2:66:9c:c9:40:e2:49:7a:20:0a:a0:b2:
1c:45:fe:de:f1:5f:18:d1:b8:6d:ca:4c:05:37:58:
93:4b:14:4c:cd:00:e0:e7:18:d6:89:67:7b:74:b5:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:04:39:7B:5E:3D:FB:7C:72:30:C7:FB:B5:6D:2E:5D:4A:64:78:55
X509v3 Authority Key Identifier:
keyid:F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:26:c0:b7:7c:bf:45:c3:f9:ca:1d:68:b9:00:98:c0:a0:77:
db:21:be:b1:0a:c5:f8:c0:68:79:8f:ff:d1:7d:50:06:f2:2f:
9d:75:90:85:88:44:61:0e:a3:ce:84:29:0e:f8:8a:76:cd:14:
3b:fb:d1:e2:31:cd:3f:96:07:f2:28:93:18:a0:69:d4:39:19:
33:ca:b8:62:3e:2f:38:f5:41:0e:36:2a:32:cc:e8:01:68:dc:
5c:19:42:08:6f:08:57:09:36:e6:bd:3c:c1:17:95:9b:f6:58:
b3:b2:3f:19:30:02:05:51:1b:f4:01:2f:4e:ae:49:7c:ec:23:
2a:1d:b0:e5:5d:4b:31:c3:c1:90:d0:5a:53:da:4e:50:7f:75:
66:03:26:14:69:be:79:57:bb:72:b6:ea:2e:fa:82:c4:99:f2:
d1:04:dc:06:ce:3e:2c:b1:3c:a4:79:a6:3b:8a:23:98:28:4b:
91:4f:8b:fd:79:7d:b7:14:e7:b8:08:b2:3f:90:dc:7c:82:92:
0e:19:c3:0f:24:84:44:2c:30:89:e6:ba:55:19:14:7c:5f:55:
6d:41:96:32:8d:5b:21:1f:7f:21:0a:29:cd:70:27:92:6d:a5:
b8:f5:fc:a0:47:26:4a:b4:98:32:da:a8:91:a6:45:20:ec:03:
ca:0e:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:49:54 2026 by rpki-client