
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier: ayF+gcDBAxd3UnQIH4BPJkxmCyb59XYOgbzoaa58uJk=
Subject key identifier: C8:AB:64:27:AD:A3:08:0B:62:50:88:F3:25:54:A8:31:D2:E6:DD:9F
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number: 0104
Signing time: Tue 03 Mar 2026 05:48:57 +0000
Manifest this update: Tue 03 Mar 2026 05:48:56 +0000
Manifest next update: Tue 10 Mar 2026 05:48:56 +0000
Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: qGwigC1AUwtFez6u6b1oBY8SQ18MEp7C3MqfmBcwZRs=)
2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: 5oMhHK5GexMn6Fihs/+IOJ93dC15hw4lCqu3Gtv/Uc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Validity
Not Before: Mar 3 05:48:56 2026 GMT
Not After : Mar 10 05:48:56 2026 GMT
Subject: CN=69a67649-6870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7c:f8:a7:81:21:35:45:45:4f:c6:f9:ff:97:
f2:03:0f:d4:f2:56:03:df:a5:e3:8a:14:ce:70:27:
97:2d:21:fb:d2:b3:86:0e:d7:8d:8e:2a:df:33:e9:
5b:8f:6b:a1:5f:6b:a0:e2:78:2f:d8:40:aa:0d:95:
f8:5e:ce:b2:d7:60:f9:0c:3f:cf:23:85:59:62:ce:
6b:92:38:92:2f:f5:95:a2:cf:a5:87:eb:34:cf:a3:
a6:88:80:a9:74:b5:61:fe:eb:38:f1:9c:a3:82:04:
2a:8d:9e:c1:55:d1:da:bb:9c:0b:69:75:e7:4f:df:
2c:20:a1:d0:35:77:fe:bd:bc:b6:32:14:65:15:b0:
a7:39:b9:9c:bd:90:7a:31:c7:d1:49:dc:b6:63:ed:
92:46:e0:8e:1b:ab:6f:61:23:1a:f4:38:fb:42:6a:
b2:f7:1d:d7:96:14:db:d0:78:f5:a1:15:c0:f1:65:
26:99:8c:d8:99:d6:54:2d:67:44:cf:8c:80:7b:18:
7c:7d:3a:ac:98:83:90:6f:ab:f3:e0:d9:28:99:c0:
af:16:f9:7e:63:ed:18:30:8c:a8:a8:2f:b8:ae:74:
75:a9:e6:55:8a:f0:cd:4d:0e:70:fb:a5:f1:dc:4c:
24:69:f5:25:48:f9:18:8c:33:a8:2c:00:83:59:d0:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AB:64:27:AD:A3:08:0B:62:50:88:F3:25:54:A8:31:D2:E6:DD:9F
X509v3 Authority Key Identifier:
keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7b:a8:c4:41:c8:8f:de:7f:a9:75:a2:c1:45:18:b2:d4:61:
be:2f:f1:f2:38:a6:2b:58:ed:57:95:ce:94:c1:32:b5:6f:fe:
18:43:0e:f5:54:b2:17:66:fa:1f:5a:8b:23:86:34:61:3e:96:
f9:3e:86:38:bd:4e:ec:8d:95:7f:78:89:3e:2b:ac:2d:a8:43:
69:53:64:02:79:2a:75:f9:89:d0:38:0d:37:18:3a:43:3d:d1:
5a:d9:a7:01:e7:3f:71:70:7f:10:8e:9a:f6:bf:a5:d7:86:4c:
f6:99:69:8e:41:3f:84:ae:76:42:b5:f1:d2:20:2b:fa:93:b7:
f0:00:2c:3e:53:3f:ae:19:3a:52:83:09:63:30:48:85:9a:3d:
71:59:62:5e:bf:3c:ab:cd:3b:71:95:bc:e1:9b:dd:3c:30:04:
60:40:9b:17:a2:c2:03:36:77:68:f1:86:74:2c:a1:3a:3f:ef:
d4:8e:9c:96:fd:d6:ba:90:da:4a:5c:6d:c1:48:08:68:3d:f2:
cf:08:b9:83:11:1e:a9:b0:75:18:7a:2c:7c:21:5f:a2:1d:06:
10:ce:86:26:8b:24:30:70:a6:f1:d8:f2:f3:8a:34:58:f0:11:
2e:e5:85:32:e1:ac:ae:e6:6b:eb:36:14:c8:88:c0:3f:40:01:
12:c5:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:36:28 2026 by rpki-client