
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier: 2G3zQ36rWnYA+wwAl2C9m3wmvcGmf2DeayJZ0ccxz58=
Subject key identifier: 77:38:A4:9E:66:2D:0E:27:53:EF:54:B3:82:7F:62:50:DA:9D:7B:F4
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number: 013F
Signing time: Sat 07 Mar 2026 04:40:36 +0000
Manifest this update: Sat 07 Mar 2026 04:40:35 +0000
Manifest next update: Sat 14 Mar 2026 04:40:35 +0000
Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: hVweOdzvSvf5XoN8cVudi47RBKalPwKeqyT7TSUeI2M=)
2: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: QjR9A/HMp05od+zO3VCnyHZYpiHXbBVwXb61oJSOZeY=)
3: 09799D96F36811F0BB995E0C666F56BC.roa (hash: k3tbTsuNd/0VaZo35U6WBx+uMYBIhVnOPOnYzqjLUfs=)
4: 09F2AE3EF36811F0BB995E0C666F56BC.roa (hash: 3qyXQf9X9ypzRtr6ed01ZGzQMiK+H459JYw687uWAE4=)
5: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: iZo2C57Z9aeJt224wtweP1I+ZMSYFsBAndFJeCnjn1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 04:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Mar 7 04:40:35 2026 GMT
Not After : Mar 14 04:40:35 2026 GMT
Subject: CN=69abac44-7562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:f6:7b:03:ef:27:de:1e:1e:d2:e5:93:b7:
95:52:e3:0e:0b:25:b1:07:61:c0:3f:7c:32:5a:6c:
b8:59:31:53:bd:27:99:92:0b:41:a0:bc:8c:e4:d9:
fc:07:bc:3e:cf:7c:96:94:c2:fc:b3:29:26:cc:5b:
4e:02:7c:c1:a4:f8:82:b2:07:21:e9:99:b0:5d:aa:
ea:04:69:b2:c6:21:e2:49:0f:dd:37:05:40:49:94:
0a:78:1a:a0:66:8e:20:d8:7a:2b:e8:ed:f9:6b:bf:
8d:00:44:90:26:58:86:57:da:cb:e8:3d:d9:72:1e:
53:1d:bd:e4:61:f0:75:db:2e:78:7e:38:63:94:30:
6a:c5:83:df:94:78:3e:ef:e9:2e:08:d2:ec:0c:e1:
51:98:79:f2:fb:65:42:14:8d:52:60:72:8b:8e:ab:
a5:52:a9:79:53:b0:af:b5:e6:16:3b:37:4f:c2:b1:
74:b8:71:0e:4c:28:6a:b6:d2:49:b4:29:31:1b:2c:
27:92:f6:73:51:1e:75:93:74:40:e7:78:a4:5c:d5:
d4:4e:dd:3b:ec:e9:c2:75:05:f4:4e:c7:ed:5c:ce:
1b:a3:5b:c5:68:9e:5a:13:5a:a2:81:0b:ce:0c:63:
8b:39:53:48:21:e2:13:58:e3:a2:e3:93:04:7b:d1:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:38:A4:9E:66:2D:0E:27:53:EF:54:B3:82:7F:62:50:DA:9D:7B:F4
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:e8:d8:60:0f:c4:e1:d7:42:ba:ac:cd:c9:17:9f:97:80:5c:
5d:5d:1a:66:42:db:3d:e5:29:7b:c3:1c:10:04:13:e5:fd:24:
8d:68:18:53:23:1d:d3:0d:18:b0:9b:89:e6:ac:d4:91:18:bb:
36:ec:6e:e8:00:b6:68:53:b4:b2:5c:92:2c:e5:e5:c1:bc:17:
b9:f2:5d:a4:19:3e:60:e6:83:ba:9d:f5:71:73:56:f9:66:2d:
ef:d1:e1:e0:1d:55:ed:ab:84:9e:11:18:8d:3e:63:73:2e:2a:
40:12:31:9b:9f:3b:fe:de:7b:4f:4e:32:97:6f:b9:65:8e:d5:
94:86:fe:4b:96:8c:04:af:e8:35:43:f2:c8:c8:a5:fd:ed:40:
ef:c6:02:fa:c0:e4:fe:1a:59:b9:87:8e:61:88:6b:c4:96:5e:
9c:9c:15:fb:0f:14:db:4d:ca:29:ef:3a:87:ef:9d:af:92:17:
af:93:33:c2:de:b1:64:41:21:2c:66:98:e4:f3:99:e7:30:a1:
84:fc:b1:0b:09:72:05:74:1f:1b:a0:f2:93:eb:ff:ad:95:17:
15:93:96:b1:f1:0d:62:01:10:53:e2:eb:ce:5c:4d:27:05:35:
6e:b3:4c:38:79:15:9b:b4:45:61:85:b3:b0:9f:77:ce:22:52:
c2:08:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:13:05 2026 by rpki-client