
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json)
Hash identifier: qdyI5xSrHceygmadHijU0IqibQm9yRCzahakV61tWlw=
Subject key identifier: E4:96:33:70:6F:5B:87:52:26:DA:BA:7A:1C:73:66:CE:3A:C1:E6:30
Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
Manifest number: 026C
Signing time: Tue 03 Mar 2026 01:57:34 +0000
Manifest this update: Tue 03 Mar 2026 01:57:34 +0000
Manifest next update: Tue 10 Mar 2026 01:57:34 +0000
Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: /IM5yP3/1mS6RRI4dl4lFQ7pFFDTKnXxQ8/9eCPPG6Y=)
2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: B71votStEYYp/K2emTulLeZ6cRSZ/0mH+ncAa56QIjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 01:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Validity
Not Before: Mar 3 01:57:34 2026 GMT
Not After : Mar 10 01:57:34 2026 GMT
Subject: CN=69a6400e-f8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:e9:b2:ec:e0:3d:2f:c4:56:5e:13:a2:97:
e5:1d:11:da:57:24:c5:47:71:9e:27:26:10:b6:28:
19:c8:7c:06:36:6e:f8:72:5c:e8:b7:a5:9f:59:a3:
86:00:16:07:8d:96:8f:fd:e1:fb:d3:d7:31:62:e7:
1a:18:d4:a1:21:e8:5c:66:3b:0f:af:3d:0a:a9:b9:
e5:be:54:37:6a:af:71:ba:db:a4:63:7d:0a:52:e1:
7b:52:16:d3:10:8c:7d:a7:a3:60:01:ba:f6:c1:c8:
1a:9e:bc:7b:cf:c8:57:a9:6e:cd:d2:78:1e:ab:a7:
2f:6d:89:2a:34:20:19:a9:37:1e:7b:b6:b6:ac:af:
0f:a3:07:5a:d8:7e:5f:0b:f8:5e:8a:1d:6c:ed:63:
99:b4:56:c8:f1:0f:9a:c8:68:f2:5f:15:cf:00:f0:
cb:d2:03:b8:39:eb:2f:4c:45:02:c7:df:55:f3:4d:
85:08:64:49:f0:2e:17:1d:ca:a5:44:42:f0:17:57:
57:4a:37:6e:86:85:b3:89:89:34:07:ee:b9:17:5b:
c5:4b:e3:73:f9:fd:31:68:c3:96:26:87:14:22:37:
fc:43:7c:f9:95:9c:f2:2e:2a:cb:1c:f3:6c:14:9d:
5c:f4:a6:cd:3a:25:96:ae:73:a4:08:cf:07:85:ff:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:96:33:70:6F:5B:87:52:26:DA:BA:7A:1C:73:66:CE:3A:C1:E6:30
X509v3 Authority Key Identifier:
keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:44:cb:7f:80:f1:e0:42:17:20:9a:09:83:1b:05:c0:70:08:
bd:dd:43:36:24:2b:6b:c5:f0:d4:bb:e7:04:d4:ac:f0:8e:80:
6e:40:89:34:5b:73:6b:ee:2a:d1:9a:e8:b1:a4:c9:4b:3e:50:
8a:18:43:48:19:18:cc:11:d6:a2:fd:69:fa:86:3e:1b:40:cc:
d6:9b:29:a0:02:8a:17:4c:a7:b0:d3:98:13:98:b1:0a:ff:5b:
98:b5:60:94:20:66:a0:0c:95:b1:da:cd:5c:9a:e3:09:52:0a:
f7:97:a5:30:25:dc:34:f8:43:ec:9d:cc:a7:0e:5b:82:2d:af:
1f:52:81:da:13:4d:3a:32:e0:7b:11:a6:fc:6e:47:20:47:71:
2c:4f:54:89:b6:f9:b5:63:bb:bf:71:ec:62:d8:c4:b5:d4:8a:
04:1e:f2:29:f7:bf:35:a3:bd:75:19:78:76:83:d2:e9:bf:2f:
a0:06:0b:3f:91:e8:7f:0a:94:98:08:a9:b9:27:77:f7:38:1b:
a5:cf:db:18:c7:73:01:9d:a6:f6:f2:b3:20:87:5f:71:27:ac:
8a:13:59:d1:2f:6a:a3:02:8c:0d:0e:9f:c3:54:c0:6b:16:cd:
b9:05:64:2a:1c:39:9c:90:db:86:3f:c8:b5:06:77:fc:6c:22:
64:e2:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:02 2026 by rpki-client