
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
File: y4244fF7x3I0bdn_uyByz6j9plI.mft (raw, json)
Hash identifier: cMcWudUNZp8hyUKisWm91aMWJ1hgX9ZTcJ1bTE8ct90=
Subject key identifier: A2:65:1D:67:A6:41:C1:88:C9:01:8E:1A:3A:4A:71:8E:FE:F3:9B:FE
Authority key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
Certificate issuer: /CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
Manifest number: 01C2
Signing time: Tue 03 Mar 2026 03:31:32 +0000
Manifest this update: Tue 03 Mar 2026 03:31:32 +0000
Manifest next update: Tue 10 Mar 2026 03:31:32 +0000
Files and hashes: 1: y4244fF7x3I0bdn_uyByz6j9plI.crl (hash: nHer2Zih2cuf3w8TlV1ir1Iu23s1AsbzFaBrhfQp988=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652
Validity
Not Before: Mar 3 03:31:32 2026 GMT
Not After : Mar 10 03:31:32 2026 GMT
Subject: CN=69a65614-d089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:01:d6:1d:91:b8:98:03:ce:f5:e0:0e:52:
f4:82:01:6a:96:42:04:da:e6:d7:aa:7f:48:12:96:
68:0b:7a:51:75:16:e3:58:68:51:00:3a:98:9e:74:
0c:c9:15:1b:09:2d:c2:74:4a:cb:57:52:59:c2:d8:
ee:da:83:6d:be:a8:e5:d1:8e:2e:aa:c4:48:03:a1:
c4:3e:78:54:d0:ef:83:54:4a:46:0d:40:2e:4e:61:
5b:af:e4:4e:89:77:7e:e4:01:15:33:03:d7:2c:fe:
02:51:20:0d:de:6b:28:07:16:f5:af:e8:7d:c6:01:
d7:40:02:55:e2:05:62:99:92:a6:08:80:c6:cf:bf:
27:93:aa:b3:34:db:34:29:30:bf:f2:39:a7:f6:bd:
51:11:5f:4e:25:26:b6:0b:d5:74:ce:1b:c7:15:2f:
35:80:74:5e:c9:5c:e8:17:86:3c:17:e8:e4:54:f5:
e9:45:4a:a5:fb:aa:6a:9a:54:30:bc:2b:46:dd:51:
dd:aa:2e:44:d9:48:c7:d2:b2:24:7e:91:79:b5:64:
dd:b8:a7:9e:bc:71:63:f3:db:df:b8:3d:9e:5d:fa:
b9:e1:7f:14:e3:0c:74:5a:7c:9f:6b:28:e0:02:7d:
cd:4d:ee:73:b8:54:17:01:17:46:f7:5e:ce:60:52:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:1D:67:A6:41:C1:88:C9:01:8E:1A:3A:4A:71:8E:FE:F3:9B:FE
X509v3 Authority Key Identifier:
keyid:CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:84:3b:3f:b2:5a:6f:fc:d2:59:e3:9c:39:6e:9f:2b:52:91:
88:b9:3b:85:e0:2c:70:5e:f8:da:53:20:10:77:d0:21:4b:79:
21:9c:6b:3e:96:49:ba:e1:fa:81:25:9d:d7:50:11:c4:c0:60:
2e:d0:ed:07:aa:85:60:c9:5e:03:ec:6e:45:1e:fe:04:37:5b:
6d:29:92:67:38:75:38:d8:52:0e:4d:01:45:9e:b5:c6:79:a4:
91:01:ae:6b:9a:37:45:4e:02:53:21:73:9a:66:2f:26:fc:69:
7b:ba:23:bd:33:ab:af:04:39:64:31:ac:e5:6c:5c:5a:09:77:
28:65:80:cd:ef:e4:77:33:26:ee:f3:6c:aa:7f:ff:48:9f:e1:
ec:31:d2:60:63:33:09:6c:10:de:9d:92:33:47:3f:53:b5:b7:
d9:a5:99:f0:a7:c5:28:59:79:7b:dd:ec:de:ee:ca:d9:7d:e3:
5f:bf:96:28:24:13:4b:4d:0e:dc:00:fd:66:34:90:28:de:84:
30:65:82:06:ab:48:3d:2e:54:b6:e9:ab:ef:06:67:cb:ef:1b:
ee:b3:50:10:9d:b5:60:15:07:cc:91:12:80:78:ab:c6:26:fb:
a9:15:68:0b:43:0a:ca:49:e9:2e:f9:61:1f:61:93:94:46:fa:
98:04:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:31 2026 by rpki-client