
$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json)
Hash identifier: QYQI9+RhsoNXYTkEwXCtSB6LTDBuytX9exf5BZ0nxbM=
Subject key identifier: 90:15:DA:0D:DA:B6:FF:7D:B3:A7:0D:E2:AA:C0:3F:80:FB:A4:F2:01
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
Manifest number: 0203
Signing time: Thu 23 Jul 2026 04:24:57 +0000
Manifest this update: Thu 23 Jul 2026 04:24:56 +0000
Manifest next update: Thu 30 Jul 2026 04:24:56 +0000
Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: 1LjEnB7dZKSlWw082d+FyVzblFdVQeJASrfxGjPNWMM=)
2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: g62n6MuaUWV6TMBxgw6JfizdoiYQ10/TclDcRrurcgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Validity
Not Before: Jul 23 04:24:56 2026 GMT
Not After : Jul 30 04:24:56 2026 GMT
Subject: CN=6a619799-1337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:5a:27:e0:a5:b1:ce:9e:1f:73:72:81:9c:
1a:3d:38:58:a1:94:2b:69:70:4f:45:72:75:2a:bb:
2a:37:c3:64:dc:5e:0e:68:e7:11:f3:f1:9f:c4:1a:
6f:19:3c:71:9d:2e:cd:b3:17:e7:f8:b6:d8:56:be:
b2:b7:dd:74:d4:5a:cd:69:21:a0:cf:86:e0:5f:d4:
e2:a1:2d:28:c1:19:e8:13:41:42:82:b2:50:3b:f3:
a4:0b:f0:bf:88:08:ca:a8:c1:da:0d:9a:7d:bb:d9:
90:0f:2f:14:47:57:72:6f:6b:0f:5c:98:65:4d:23:
b4:f7:b5:0f:6e:9d:b7:5b:a3:88:17:14:6d:4f:4b:
ae:ec:22:d7:d2:ec:9f:5c:83:ab:8e:b1:60:9a:e9:
55:d7:cf:3a:a3:87:56:b8:dd:7a:e6:58:51:ac:e9:
22:8c:ee:8f:e6:e1:6b:79:b7:87:da:b1:9e:ff:f2:
26:1c:90:63:2f:6a:1f:4a:1d:ed:c0:1f:c3:a7:d9:
56:f5:9b:0c:a1:43:82:e6:b9:2c:20:31:ac:7c:52:
37:b8:b6:29:c8:cb:09:e8:0c:c4:0e:a0:4f:bc:bb:
3f:c8:3a:98:15:be:15:cb:f7:7f:da:fa:80:c5:c3:
44:81:6a:2e:94:77:fd:a3:18:b1:89:87:c7:43:33:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:15:DA:0D:DA:B6:FF:7D:B3:A7:0D:E2:AA:C0:3F:80:FB:A4:F2:01
X509v3 Authority Key Identifier:
keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:9c:7f:64:5a:56:c2:7c:35:e8:10:c1:d8:f5:70:e3:db:13:
2c:69:df:00:99:c0:c6:e6:1e:f6:e2:4e:d3:66:23:47:76:f6:
80:f1:83:86:c5:5a:00:03:82:14:4b:08:1c:42:53:62:81:0f:
6b:db:fa:b5:f3:03:e5:09:88:2e:8e:e9:c9:50:4f:3b:94:63:
08:53:9d:e0:92:56:ea:e3:d6:0a:f9:65:ee:56:36:ef:5b:fa:
8a:a0:39:c2:55:09:38:83:74:82:cc:78:1c:1e:42:92:84:fe:
19:b9:1d:24:7f:64:81:81:46:a2:8d:c4:67:3e:cd:ce:a5:d2:
35:b0:cb:26:fb:b2:2a:3d:0d:33:4f:e6:b4:fb:7f:37:07:17:
a5:46:a5:87:75:00:19:ff:8f:87:af:88:c9:9e:b4:6d:4e:b8:
26:4d:81:4a:c1:c7:6d:5d:85:d1:dc:5b:47:e4:21:af:c4:d8:
4a:d6:f3:96:18:3e:76:2d:b7:ac:59:74:5b:66:2b:1d:1a:3d:
8b:2f:a5:cd:f8:e9:20:a7:37:8c:76:b8:2d:a4:2f:0a:86:e8:
da:52:83:3b:07:7b:e0:1a:a6:d8:f0:01:10:1c:73:02:20:c4:
2a:2a:f7:ac:be:9e:ee:64:7c:bd:78:de:18:c4:30:36:86:e7:
39:c0:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:32:57 2026 by rpki-client