
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
File: YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft (raw, json)
Hash identifier: OJxdRnn63+mYyqcMZtxafPzfEvmjivBP3cCizl/iu1I=
Subject key identifier: B8:38:75:E2:7D:C5:6D:36:16:E0:7E:01:D7:C8:15:12:89:39:EB:C6
Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
Certificate issuer: /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
Manifest number: 27
Signing time: Tue 03 Mar 2026 08:28:16 +0000
Manifest this update: Tue 03 Mar 2026 08:28:16 +0000
Manifest next update: Tue 10 Mar 2026 08:28:16 +0000
Files and hashes: 1: YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl (hash: vO7llFD6/HofSZlje3BXqofx0yvBduTQeMwfaLIP0ps=)
2: F50431A0E48511F0BEFBEDFF436F56BC.roa (hash: biBbqFto51rOZiPG5JNmrRxR/U8JC7IUfuy2q4b9zao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Validity
Not Before: Mar 3 08:28:16 2026 GMT
Not After : Mar 10 08:28:16 2026 GMT
Subject: CN=69a69ba0-f537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:0e:df:7e:59:6c:82:9c:ef:bf:0d:4d:78:
ff:a5:08:3a:eb:39:d2:ba:79:b9:ea:7b:03:7d:b4:
94:e6:d4:cd:18:fd:0e:07:69:19:15:36:00:21:22:
45:48:d3:28:ec:78:0a:25:54:ff:ca:3f:69:a4:7f:
b2:9f:a1:da:99:29:7c:8f:e9:74:82:26:33:c8:f3:
d3:0d:3c:7e:f6:40:74:cf:2e:7b:0b:20:22:fb:14:
e4:95:12:3d:ea:88:54:43:c5:ec:fe:08:9f:35:44:
84:71:6f:2e:de:fa:a1:0b:46:fe:f4:92:93:8e:5e:
cb:6f:ef:41:4a:b1:36:1f:5d:f5:d5:a8:59:ca:36:
ce:f5:7b:f7:d4:ab:a3:2a:aa:a9:10:4b:65:45:36:
7d:20:54:24:27:6e:e0:22:c1:55:d4:84:58:7c:b4:
88:42:ee:5f:c2:8e:a6:1e:4e:ad:88:1f:72:2a:ac:
2d:ba:6b:45:78:60:6a:2d:78:17:3d:27:2a:a7:b2:
2d:67:76:8a:dc:06:ef:7a:14:dd:8d:c6:4d:98:19:
15:79:25:88:2d:61:f7:30:3f:2c:37:a8:88:b9:c7:
d0:e6:16:0f:89:79:0e:cf:42:8f:83:c8:1a:cf:bc:
79:c3:61:03:11:1a:aa:d0:27:7a:fd:9f:3c:44:9a:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:38:75:E2:7D:C5:6D:36:16:E0:7E:01:D7:C8:15:12:89:39:EB:C6
X509v3 Authority Key Identifier:
keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:7e:90:78:0a:8e:69:ec:76:87:cd:61:b6:d0:2b:85:2f:a9:
b3:46:04:bf:5b:2c:03:d5:5c:95:e6:bc:ef:fd:2e:be:aa:63:
dd:32:64:38:8d:22:ac:28:a4:65:fd:09:bb:32:54:92:f6:25:
d8:00:b2:28:c0:18:54:0e:5b:37:a0:4e:8b:16:e7:a0:09:aa:
b1:a9:1d:ff:1a:df:8f:07:be:9c:ac:3c:27:67:3e:8d:69:e8:
f9:ac:af:d7:d0:b7:50:bb:1c:54:9b:00:8b:06:8d:71:91:10:
7b:c4:ef:b4:1e:d5:7e:d7:20:72:fc:6c:28:2e:17:56:89:36:
a1:4f:75:b0:aa:7a:b2:b7:2b:46:fa:29:5c:45:0c:44:6a:11:
48:37:9e:ba:c4:fa:27:52:89:d7:57:e0:ac:92:d9:a8:c7:c0:
76:3b:ae:ba:96:7f:9c:55:3c:14:0b:5c:fc:57:10:f5:c3:61:
00:26:ac:4b:b2:98:e3:23:a3:40:83:96:3b:ae:43:c1:17:09:
49:74:f3:cb:87:c4:3b:82:06:8d:3f:a0:1c:4b:7a:76:b7:21:
0e:74:bf:b0:1c:4d:c0:04:98:71:2d:fa:30:19:c8:b3:6e:e4:
74:53:2d:23:23:2c:7e:f7:7f:aa:4e:cf:30:c2:36:de:f2:f6:
84:84:76:14
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MjUwOTExMC8GA1UEBRMoNjJBMjNGMzNFOTBCNzIwNjA1NTM3MTk1MTREMEM1QUJD
MkUyMzQ0NzAeFw0yNjAzMDMwODI4MTZaFw0yNjAzMTAwODI4MTZaMBgxFjAUBgNV
BAMTDTY5YTY5YmEwLWY1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCk4w7ffllsgpzvvw1NeP+lCDrrOdK6ebnqewN9tJTm1M0Y/Q4HaRkVNgAhIkVI
0yjseAolVP/KP2mkf7KfodqZKXyP6XSCJjPI89MNPH72QHTPLnsLICL7FOSVEj3q
iFRDxez+CJ81RIRxby7e+qELRv70kpOOXstv70FKsTYfXfXVqFnKNs71e/fUq6Mq
qqkQS2VFNn0gVCQnbuAiwVXUhFh8tIhC7l/CjqYeTq2IH3IqrC26a0V4YGoteBc9
Jyqnsi1ndorcBu96FN2Nxk2YGRV5JYgtYfcwPyw3qIi5x9DmFg+JeQ7PQo+DyBrP
vHnDYQMRGqrQJ3r9nzxEmlhBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuDh14n3F
bTYW4H4B18gVEok568YwHwYDVR0jBBgwFoAUYqI/M+kLcgYFU3GVFNDFq8LiNEcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNTA5LzlCMUNFMjEyRTQ4
MTExRjBBQzQ2N0JDMTQyNkY1NkJDL1lxSV9NLWtMY2dZRlUzR1ZGTkRGcThMaU5F
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWXFJX00ta0xjZ1lGVTNHVkZOREZxOExpTkVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy
NTA5LzlCMUNFMjEyRTQ4MTExRjBBQzQ2N0JDMTQyNkY1NkJDL1lxSV9NLWtMY2dZ
RlUzR1ZGTkRGcThMaU5FYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA2fpB4Co5p7HaHzWG20CuFL6mzRgS/WywD1VyV5rzv/S6+qmPdMmQ4jSKsKKRl
/Qm7MlSS9iXYALIowBhUDls3oE6LFuegCaqxqR3/Gt+PB76crDwnZz6Naej5rK/X
0LdQuxxUmwCLBo1xkRB7xO+0HtV+1yBy/GwoLhdWiTahT3WwqnqytytG+ilcRQxE
ahFIN566xPonUonXV+Csktmox8B2O666ln+cVTwUC1z8VxD1w2EAJqxLspjjI6NA
g5Y7rkPBFwlJdPPLh8Q7ggaNP6AcS3p2tyEOdL+wHE3ABJhxLfowGcizbuR0Uy0j
Iyx+93+qTs8wwjbe8vaEhHYU
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:52 2026 by rpki-client