
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File: YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier: 15hXDABBxE2CSP+iQlMRNQQMiJVoMScHNI8P3/I7beo=
Subject key identifier: A0:B1:9E:6D:C1:5A:36:57:FE:7A:98:63:51:E9:4C:D5:05:6B:6A:18
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer: /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number: 0275
Signing time: Sun 05 Apr 2026 01:32:33 +0000
Manifest this update: Sun 05 Apr 2026 01:32:33 +0000
Manifest next update: Sun 12 Apr 2026 01:32:33 +0000
Files and hashes: 1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: i+NdOmWmcKOcj/KNFMk2Y695jQfe0dJ59ur1kw80Dz8=)
2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: /uGLQIrlBTxMwkdtG3jyxMXG6mL7PGCkVKPH/j33iG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Validity
Not Before: Apr 5 01:32:33 2026 GMT
Not After : Apr 12 01:32:33 2026 GMT
Subject: CN=69d1bbb1-90df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:7f:c1:c3:f1:6b:90:fe:0c:fc:6c:14:87:
cc:30:b1:d5:d7:41:25:24:ed:1d:de:f8:f0:81:5d:
12:67:42:f5:11:97:2b:8d:cb:83:8e:3a:59:c1:1e:
57:3f:a6:16:7b:94:e4:ca:96:a1:6d:46:c5:25:3d:
a5:79:38:12:88:f6:cc:52:b6:d2:5b:59:f6:f0:6c:
24:64:65:a5:26:52:70:04:8a:58:54:e8:d1:9a:69:
01:fc:65:75:04:9e:bb:8e:41:6d:70:2e:7e:f0:98:
6f:63:d0:95:c2:44:6f:61:f8:d5:64:da:e2:16:a8:
55:dc:6b:36:d0:75:ed:d1:0d:56:e1:e9:cf:10:52:
85:bb:9c:d7:06:b9:0a:64:2a:d3:cb:31:cb:23:ec:
56:f6:5e:e8:dc:f8:12:a0:b6:e4:c1:40:77:63:d7:
36:de:5c:a3:93:bb:85:ae:19:dd:f2:0f:1e:f0:9a:
cb:f9:0e:66:43:da:9b:2e:26:58:82:30:ac:61:8d:
bd:c7:c7:96:4b:fa:3c:10:fc:fb:29:0d:67:3e:70:
ac:5b:d3:fd:f3:39:24:aa:7e:de:52:87:4b:a1:69:
bc:92:0c:af:08:95:26:00:97:2f:db:19:4c:f0:f3:
ce:7b:b6:e3:22:19:c6:45:a4:a4:86:35:f0:16:9c:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:9E:6D:C1:5A:36:57:FE:7A:98:63:51:E9:4C:D5:05:6B:6A:18
X509v3 Authority Key Identifier:
keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:68:9d:7f:17:d3:cb:9b:5c:18:f9:38:3a:cb:6b:f5:84:94:
4c:2c:32:72:4a:3a:8d:be:bc:f5:f8:66:26:81:5e:cf:4f:0a:
09:bd:e6:00:d4:cb:ce:8e:21:85:30:8e:4a:3d:11:e7:7d:d1:
9b:f0:4c:2d:3e:13:40:3b:e7:75:5c:0d:04:7c:eb:70:44:bd:
77:87:8a:2f:4c:a8:87:0a:e4:75:4e:3f:2e:87:e0:dd:73:c2:
ad:b3:ce:53:38:34:cd:cd:5b:b6:c8:0d:6e:44:7b:fe:f5:a4:
79:34:9c:82:2b:02:05:88:72:32:65:d9:5c:ef:95:e8:4d:f1:
3a:01:a7:3d:26:d5:e9:fd:5d:c5:a6:ed:9d:78:2b:10:a9:93:
8d:4e:18:5b:41:c0:0f:6f:e4:ca:16:a8:15:e3:1d:1d:b6:b7:
e1:4f:10:28:70:70:17:d7:d8:ff:51:93:42:01:9d:3a:3f:63:
6d:98:64:3b:72:cf:ee:0e:35:1a:52:0a:1e:b7:0c:2c:93:fd:
0e:37:a7:10:ed:e8:45:03:7a:08:7d:02:56:bf:b9:e5:06:52:
4a:7c:7f:42:b4:78:cf:90:a4:43:74:75:64:24:40:29:d3:3f:
49:fd:f0:84:38:ab:d0:52:d3:21:e0:1d:44:8f:f4:0d:a7:d4:
59:42:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:08:33 2026 by rpki-client