
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier: hQWbmNVMubwNMzNtGtTEKG9Qu6jsTFgYwjZn89Oz6PU=
Subject key identifier: 63:84:4E:FD:B5:57:FF:02:6B:F2:97:FD:F1:3F:66:ED:22:3E:DA:B1
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 051E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number: 0517
Signing time: Sun 10 May 2026 23:39:22 +0000
Manifest this update: Sun 10 May 2026 23:39:22 +0000
Manifest next update: Sun 17 May 2026 23:39:22 +0000
Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: U5fObceB2/sg3Yc8w66KYF17GE0aUvEhlNyMRhPP+8M=)
2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: FCX1sDJ2lcFZeK81Yi1zKSTIFWnL4W2ESjtnUZrEFH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1310 (0x51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Validity
Not Before: May 10 23:39:22 2026 GMT
Not After : May 17 23:39:22 2026 GMT
Subject: CN=6a01172a-759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:7d:ca:a5:da:c6:00:c1:71:ed:36:8d:f2:
14:d0:72:e4:ec:43:e1:d3:6d:be:ff:d5:4c:2f:00:
94:5d:82:27:da:c3:be:7b:ae:0d:f7:bf:6f:77:ec:
a4:a1:72:d9:11:73:83:64:00:ff:bb:86:7e:b8:fc:
c0:79:19:e2:69:b9:c5:f7:00:d5:07:11:26:ee:6a:
2a:ed:27:0b:4d:48:d0:50:11:87:87:9a:95:1c:1a:
6c:93:ab:4c:56:78:be:5a:37:7d:5d:2d:2a:75:6c:
16:f4:b3:7c:19:8c:91:3c:4f:b0:f7:81:b7:d0:ce:
18:8a:db:df:97:cf:4e:7f:11:db:94:a6:b9:8b:9b:
66:f0:36:5a:c6:6c:76:21:16:7a:5c:a8:76:4a:81:
05:74:4a:d8:b6:e0:38:3c:09:88:b1:43:49:0e:00:
03:19:85:96:14:fe:9d:90:ef:52:9c:4d:ba:42:9a:
6e:5c:3e:5a:b0:0e:ad:1b:99:22:35:d4:4d:43:5b:
b1:fc:24:11:00:f1:87:50:fe:e3:d1:b7:08:03:16:
a5:4d:25:b2:00:51:81:d6:94:81:46:2b:7c:ab:f6:
34:6d:a1:59:32:55:b8:38:c5:aa:50:f2:a7:02:f3:
de:39:ea:e3:fb:28:17:5a:56:a7:e4:c8:62:3b:15:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:4E:FD:B5:57:FF:02:6B:F2:97:FD:F1:3F:66:ED:22:3E:DA:B1
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:4d:10:91:2e:be:96:91:83:dd:33:f8:39:48:4e:1e:06:29:
88:81:75:ed:1c:31:8e:df:69:1e:df:0d:06:c9:6e:52:d1:bc:
f7:2f:22:c1:b9:50:6d:b8:2f:80:d6:28:f2:54:eb:be:3c:d9:
78:12:5c:84:9c:81:e1:e6:e2:e1:55:16:a8:f5:3b:0e:ec:04:
fe:95:09:16:41:88:2c:32:c0:f5:79:b6:4f:bf:bc:d8:63:ab:
c3:a8:47:d2:83:b7:fa:59:27:8e:c9:19:78:02:de:a2:eb:ad:
ab:58:e1:ef:17:39:42:0a:6d:99:ff:3f:85:4f:3a:20:b5:b1:
a0:01:b5:2b:76:68:25:e2:56:5e:44:fb:27:0e:32:9b:4b:78:
bc:fb:8f:3a:86:d5:47:30:f0:c7:fb:eb:48:fa:61:cb:9b:95:
10:cc:59:b7:85:49:b6:20:94:fd:36:b3:b7:0f:42:f4:91:c9:
8d:d3:80:9e:9f:ca:c5:6f:08:e8:2e:3d:d8:d6:70:6e:0c:1b:
5e:7a:14:03:b6:4e:cb:e6:f1:34:3e:90:bc:c8:fe:17:62:f1:
7d:5b:80:13:88:2c:79:2a:4b:f9:65:b2:fb:36:68:c2:0c:71:
30:88:ee:aa:94:b4:1b:e1:ca:54:e0:a7:15:61:bd:d2:1c:8b:
a3:93:73:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG
NkExM0VGRTUwHhcNMjYwNTEwMjMzOTIyWhcNMjYwNTE3MjMzOTIyWjAYMRYwFAYD
VQQDEw02YTAxMTcyYS03NTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlPt9yqXaxgDBce02jfIU0HLk7EPh022+/9VMLwCUXYIn2sO+e64N979vd+yk
oXLZEXODZAD/u4Z+uPzAeRniabnF9wDVBxEm7moq7ScLTUjQUBGHh5qVHBpsk6tM
Vni+Wjd9XS0qdWwW9LN8GYyRPE+w94G30M4Yitvfl89OfxHblKa5i5tm8DZaxmx2
IRZ6XKh2SoEFdErYtuA4PAmIsUNJDgADGYWWFP6dkO9SnE26QppuXD5asA6tG5ki
NdRNQ1ux/CQRAPGHUP7j0bcIAxalTSWyAFGB1pSBRit8q/Y0baFZMlW4OMWqUPKn
AvPeOerj+ygXWlan5MhiOxXQCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOETv21
V/8Ca/KX/fE/Zu0iPtqxMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD
QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl
cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc00QkS6+lpGD3TP4OUhOHgYpiIF17Rwxjt9pHt8NBsluUtG89y8iwblQbbgv
gNYo8lTrvjzZeBJchJyB4ebi4VUWqPU7DuwE/pUJFkGILDLA9Xm2T7+82GOrw6hH
0oO3+lknjskZeALeouutq1jh7xc5Qgptmf8/hU86ILWxoAG1K3ZoJeJWXkT7Jw4y
m0t4vPuPOobVRzDwx/vrSPphy5uVEMxZt4VJtiCU/Taztw9C9JHJjdOAnp/KxW8I
6C492NZwbgwbXnoUA7ZOy+bxND6QvMj+F2LxfVuAE4gseSpL+WWy+zZowgxxMIju
qpS0G+HKVOCnFWG90hyLo5NzPw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:50 2026 by rpki-client