
$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json)
Hash identifier: czpXIl2+HqsA0HxrDEGEu3sAo9JzaBNhQlFoC56RFbc=
Subject key identifier: 86:7F:1A:2D:02:F7:C7:AF:AF:AC:CD:56:01:08:A8:EA:5D:4B:C7:D0
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
Manifest number: 01E0
Signing time: Wed 13 May 2026 03:33:55 +0000
Manifest this update: Wed 13 May 2026 03:33:54 +0000
Manifest next update: Wed 20 May 2026 03:33:54 +0000
Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: tYZ2SwrkgpP5SrI6HxsKI4TV424EPGYn89gAtdi2m88=)
2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: g62n6MuaUWV6TMBxgw6JfizdoiYQ10/TclDcRrurcgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Validity
Not Before: May 13 03:33:54 2026 GMT
Not After : May 20 03:33:54 2026 GMT
Subject: CN=6a03f123-803b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:37:86:46:23:e0:74:92:10:b1:b9:52:c7:
75:f2:29:16:78:49:09:b7:10:78:53:59:71:17:d5:
62:23:32:49:c1:6a:6a:c6:d9:03:91:d7:45:d0:4b:
82:ba:4a:d6:65:ab:3a:a3:f8:9f:1e:19:c0:95:3e:
a9:1a:0d:b9:78:37:a4:e5:5c:c8:73:78:7d:0e:48:
bb:d5:9a:10:59:ad:85:e1:05:e8:f1:be:51:b7:59:
c9:2c:62:92:47:34:db:d7:a2:d1:19:e2:20:c2:a4:
69:b9:31:5a:7a:20:e0:23:e5:a9:0e:a0:02:ce:22:
71:b6:52:3f:8a:09:2f:bd:c1:25:cc:8d:7c:10:f9:
d8:d0:59:38:5e:f6:9f:c3:7f:a3:30:81:5d:c2:f5:
86:12:63:77:ff:5a:0d:f1:f4:45:5e:60:df:a5:76:
19:1c:f7:aa:af:09:0f:57:9c:07:03:73:32:1b:e9:
10:2c:9a:4e:1a:be:73:ea:c1:b7:7d:c4:5a:21:ac:
c0:3b:0b:4a:04:8d:a1:da:94:3d:92:43:aa:67:85:
31:9a:88:59:a4:4e:2e:2b:ad:e0:3c:60:19:14:13:
69:cf:0e:92:c1:a8:49:68:d2:7d:cc:cc:8a:d7:26:
fa:01:53:54:90:46:3b:74:85:c2:08:87:cc:c8:7a:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7F:1A:2D:02:F7:C7:AF:AF:AC:CD:56:01:08:A8:EA:5D:4B:C7:D0
X509v3 Authority Key Identifier:
keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:56:92:99:94:8c:ca:73:85:b8:cb:a9:18:aa:03:44:b8:48:
79:b0:a0:84:a1:a7:1f:c5:11:ee:7c:26:15:d8:f2:ad:43:73:
cf:19:da:f6:58:ed:25:96:20:11:bb:92:d2:f1:b9:c1:fc:6c:
54:9b:ca:68:6d:3b:92:a2:dc:21:fc:06:c3:94:95:26:3b:3e:
ac:dd:59:14:2b:b3:5e:85:f1:6a:4e:f9:f5:5a:61:1b:ae:19:
24:6c:8d:50:af:15:84:71:a0:ff:3a:59:e7:66:d5:e3:a9:a0:
1f:ff:c4:90:b7:25:5d:ac:89:6e:ff:13:05:85:62:1b:e9:80:
b8:db:d3:f0:07:ea:08:7b:e2:74:a8:f4:fe:18:aa:55:5d:02:
18:70:6c:1d:bf:d8:06:0a:56:73:55:ef:b4:05:60:5e:5f:fd:
b5:a1:a6:00:25:7c:e5:da:4b:37:42:17:a2:f8:12:bc:73:e0:
9f:26:f3:e3:0c:08:80:4e:60:16:14:76:34:4a:67:ca:25:36:
e1:29:b0:ec:bf:0b:0e:55:84:4a:60:a1:d3:04:62:15:6a:26:
07:8c:81:95:93:f8:b3:84:28:5d:b9:c8:48:03:fa:07:22:be:
20:aa:bb:51:2a:1c:91:4a:93:16:97:90:8b:89:ec:11:32:ed:
a1:e1:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:46:18 2026 by rpki-client