
$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json)
Hash identifier: OKnAu4BsCng1Ri2WCgLM2jC3z/Q6VdB2gUnTkEljdyI=
Subject key identifier: 5A:79:81:5F:CC:AF:8D:2C:70:C0:4D:7B:C3:97:7F:02:6A:11:F0:BF
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
Manifest number: 01DA
Signing time: Thu 23 Jul 2026 04:57:49 +0000
Manifest this update: Thu 23 Jul 2026 04:57:49 +0000
Manifest next update: Thu 30 Jul 2026 04:57:49 +0000
Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: vBFAF+KUjXwqlcLnCknpCSHJxU8WcycIUZI0eWe/t+c=)
2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: ExYQsL4DX6Hi4BKxNjsrHvE6gNcBGNmimGeGw2+s/0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Validity
Not Before: Jul 23 04:57:49 2026 GMT
Not After : Jul 30 04:57:49 2026 GMT
Subject: CN=6a619f4d-7e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:2d:20:db:5c:66:36:a5:0a:fa:9b:5f:e9:
db:48:0e:22:55:c1:e3:09:6b:16:45:ae:5d:ba:75:
3a:50:35:99:c0:90:14:94:62:cf:b1:46:46:8e:ac:
fa:f0:46:0d:08:fe:58:a6:d0:76:01:6b:5e:6c:20:
38:3d:91:71:12:0c:46:e1:10:e1:7e:10:e2:fc:98:
72:02:9c:f9:23:03:15:42:5c:5f:1b:47:25:0b:97:
06:97:bc:4e:2d:6b:5e:9b:44:97:c0:20:d4:5f:58:
f7:e4:85:6f:6d:18:2a:ee:16:f8:d7:eb:e2:df:63:
61:57:a4:06:13:99:a5:65:4a:53:af:c0:c9:d0:70:
81:fc:f3:52:cf:b5:c4:d3:65:81:db:ec:ea:f0:09:
3f:2e:35:de:f1:38:dd:f9:62:cb:5b:a3:ce:29:32:
51:43:ae:ee:71:28:c5:f5:9e:43:02:74:e1:5b:a8:
82:c6:b4:02:21:d9:ae:f4:47:57:3c:e5:0d:00:49:
3d:45:36:85:e8:70:59:08:2c:ab:b3:1c:6a:74:5d:
a1:8e:07:f3:06:ae:ed:8a:87:9a:ea:9d:ec:87:aa:
27:35:77:be:98:6e:5a:3c:bc:fd:d9:91:99:92:c8:
52:d0:0f:a0:9f:ac:e7:e4:1f:cf:3a:d0:25:25:af:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:79:81:5F:CC:AF:8D:2C:70:C0:4D:7B:C3:97:7F:02:6A:11:F0:BF
X509v3 Authority Key Identifier:
keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d8:81:02:45:2a:3c:b3:a4:25:00:ae:52:ee:09:73:7b:52:
e8:00:20:bf:9b:e8:c9:e6:e3:b0:a4:ba:b3:27:07:fb:e5:7a:
06:52:81:b7:76:e3:c8:7e:82:c6:7a:04:7e:b1:ab:10:0d:c5:
b0:3e:cd:40:ae:ba:f7:af:62:c8:c2:17:64:a2:95:16:28:68:
4e:dd:9e:32:7e:0e:89:a4:08:17:27:34:d4:31:ed:f3:3a:06:
58:a9:cb:d7:53:ea:68:4e:f6:43:d9:94:c8:39:32:cb:08:92:
93:b2:52:e2:81:1e:a5:15:4f:b5:d4:78:61:1e:86:c1:35:4e:
ad:8d:91:3c:b7:26:42:96:4a:78:52:38:f2:a3:27:4c:82:aa:
3d:98:6b:e0:bc:26:05:ac:92:de:9c:05:a8:49:94:3c:38:fb:
94:8b:d0:10:69:ab:9d:a4:17:df:01:fd:8e:c6:d4:39:78:1b:
cd:87:08:48:2a:71:c2:7c:fd:93:14:d4:e0:95:d2:25:25:22:
0b:d5:dc:7d:4c:6b:71:0f:79:57:01:58:86:6a:1d:2d:4b:78:
55:fe:a5:49:68:ca:b8:03:de:8e:3a:ae:ae:17:93:76:8f:24:
4d:ae:c2:0d:90:cf:cc:ff:95:f8:da:15:95:b5:06:97:db:9f:
52:4a:0c:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB
NTAxNkVENkUwHhcNMjYwNzIzMDQ1NzQ5WhcNMjYwNzMwMDQ1NzQ5WjAYMRYwFAYD
VQQDEw02YTYxOWY0ZC03ZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA28stINtcZjalCvqbX+nbSA4iVcHjCWsWRa5dunU6UDWZwJAUlGLPsUZGjqz6
8EYNCP5YptB2AWtebCA4PZFxEgxG4RDhfhDi/JhyApz5IwMVQlxfG0clC5cGl7xO
LWtem0SXwCDUX1j35IVvbRgq7hb41+vi32NhV6QGE5mlZUpTr8DJ0HCB/PNSz7XE
02WB2+zq8Ak/LjXe8Tjd+WLLW6POKTJRQ67ucSjF9Z5DAnThW6iCxrQCIdmu9EdX
POUNAEk9RTaF6HBZCCyrsxxqdF2hjgfzBq7tioea6p3sh6onNXe+mG5aPLz92ZGZ
kshS0A+gn6zn5B/POtAlJa8qxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFp5gV/M
r40scMBNe8OXfwJqEfC/MB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4
NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6
ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvNiBAkUqPLOkJQCuUu4Jc3tS6AAgv5voyebjsKS6sycH++V6BlKBt3bjyH6C
xnoEfrGrEA3FsD7NQK66969iyMIXZKKVFihoTt2eMn4OiaQIFyc01DHt8zoGWKnL
11PqaE72Q9mUyDkyywiSk7JS4oEepRVPtdR4YR6GwTVOrY2RPLcmQpZKeFI48qMn
TIKqPZhr4LwmBayS3pwFqEmUPDj7lIvQEGmrnaQX3wH9jsbUOXgbzYcISCpxwnz9
kxTU4JXSJSUiC9XcfUxrcQ95VwFYhmodLUt4Vf6lSWjKuAPejjqurheTdo8kTa7C
DZDPzP+V+NoVlbUGl9ufUkoMgQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:35 2026 by rpki-client