
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
File: YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json)
Hash identifier: nTEysSGvMSWFejIGl6ZsTLNgQAVejfI3U7+PRWbDx3c=
Subject key identifier: 36:89:32:53:C1:92:F5:23:48:B2:A8:69:30:0D:9D:99:AF:3C:1E:B8
Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Certificate serial: 0AE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
Manifest number: 0AD0
Signing time: Sat 04 Apr 2026 19:16:11 +0000
Manifest this update: Sat 04 Apr 2026 19:16:11 +0000
Manifest next update: Sat 11 Apr 2026 19:16:11 +0000
Files and hashes: 1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: GIlWn0sSqqVQh2KNaGYBZ0odJwe1NEsXqv+Otz5ygfY=)
2: 1B2FD0247B3511F0AB5E9728C4F9AE02.roa (hash: Q1rC4uxku9zNUGZfldpV6C2HUrRjj+DFtRhXQLJUhNQ=)
3: E3DD6362787A11ED89732760C4F9AE02.roa (hash: vve9hwKv+mYDRAl8TbHYr+BUbKVZsWenZHWGJC3Di3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786 (0xae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Validity
Not Before: Apr 4 19:16:11 2026 GMT
Not After : Apr 11 19:16:11 2026 GMT
Subject: CN=69d1637b-7cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:94:a8:e0:9d:df:8b:e6:ca:78:44:23:6a:
47:19:bf:79:8b:e1:1c:1c:c4:7c:87:cf:b1:77:37:
00:9d:3b:f5:b0:b4:e1:40:10:cd:da:b7:dd:bf:2a:
9b:79:84:d4:99:14:bf:44:c0:42:0e:e6:9d:8c:b2:
96:06:98:c5:a5:b0:bb:52:0f:8f:3d:14:92:fd:41:
b7:1b:00:b1:98:99:7a:f8:4b:c8:dc:5b:44:35:a6:
e5:5d:7f:b2:d3:c2:f3:bf:e4:4b:fd:45:21:1c:5c:
35:7b:93:ec:00:7c:a7:03:60:11:ea:c5:63:1f:d6:
f0:03:e0:e4:fd:5e:b2:a7:84:3e:74:97:27:8b:5f:
23:fd:1c:06:a2:bf:c3:5a:13:af:8e:a1:f9:b1:2c:
f7:44:03:48:0d:bb:d2:46:4f:21:77:55:1a:b8:7e:
fe:7a:2a:94:a3:b9:9c:17:fd:fd:21:45:23:42:6f:
50:fa:5a:ec:f8:a8:ed:62:b5:9c:6d:55:76:6c:0c:
ee:63:00:14:7e:fd:dc:94:aa:dc:21:6e:56:91:fe:
05:f8:cf:6e:71:43:fe:63:76:05:a8:2e:fe:fb:53:
ae:4b:6f:e3:c6:79:3f:0f:69:f3:71:06:bf:a0:f2:
c7:ab:43:30:4b:4f:bc:f4:d8:52:46:00:a5:25:f4:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:89:32:53:C1:92:F5:23:48:B2:A8:69:30:0D:9D:99:AF:3C:1E:B8
X509v3 Authority Key Identifier:
keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f9:82:66:f1:20:fd:66:36:66:10:02:01:aa:be:58:79:1b:
13:6d:24:88:e4:69:b1:4b:a1:c4:07:94:3b:0e:26:4f:43:ea:
cd:a4:ef:69:dc:dd:6e:9e:c1:a2:19:32:85:54:12:f4:af:63:
50:dc:67:c4:cf:e5:31:98:8d:e3:e7:8c:28:11:14:76:b4:bc:
3e:04:30:0f:7a:3a:f0:a4:8f:f8:8e:9f:50:86:42:b8:ac:82:
2f:93:42:72:48:7a:b8:06:72:da:4a:e4:b6:de:b9:63:62:e3:
9a:99:4d:36:39:c2:54:92:23:cb:e6:2f:cd:24:6e:c5:8e:37:
94:38:3a:7d:f4:81:ed:94:a7:60:87:d3:20:4f:9b:64:a9:c4:
ad:74:66:d1:06:91:39:24:b8:95:65:20:2b:b5:98:73:12:21:
18:dc:9a:49:3a:19:a9:ac:35:a5:b9:55:db:50:16:ea:4a:cf:
94:a5:fe:7e:ff:2d:2c:21:d8:a9:4b:87:56:17:e9:4f:3f:34:
f7:11:b3:8d:78:f7:58:93:3b:3e:0b:2a:ae:c9:fc:0f:8f:21:
34:4d:9a:39:d8:f4:91:42:ab:4a:e3:0d:79:76:86:43:2a:e5:
60:b9:a9:b6:61:de:c5:d0:a1:a0:be:a7:6c:74:79:1c:e2:d1:
52:ef:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:32 2026 by rpki-client