
$ rpki-client -vvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
File: YGtPQu6X90iOwgtj2LGq9tQtnKc.mft (raw, json)
Hash identifier: 6g/vmbviU1vCzbWAxdhsenSeDodiPwT32sLJ2gEIUX4=
Subject key identifier: E3:4B:D6:BB:EB:47:4A:0C:2A:53:4C:25:38:F9:69:B4:D7:A9:80:B4
Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
Certificate issuer: /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
Manifest number: A5
Signing time: Thu 23 Jul 2026 09:03:23 +0000
Manifest this update: Thu 23 Jul 2026 09:03:22 +0000
Manifest next update: Thu 30 Jul 2026 09:03:22 +0000
Files and hashes: 1: YGtPQu6X90iOwgtj2LGq9tQtnKc.crl (hash: AX4yaQ7wXFeMejIeYvGC2yGPS9qLq65dirQyZnvPZ7Q=)
2: 720ED6F487CB11F0B605C67DC4F9AE02.roa (hash: DkL8mKFGzHdVRylK1rD4tLxN/q/oxjuNdQSmCvoiiL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Validity
Not Before: Jul 23 09:03:22 2026 GMT
Not After : Jul 30 09:03:22 2026 GMT
Subject: CN=6a61d8db-aa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:49:d4:09:72:7c:a0:98:c4:4e:d4:55:5c:
f0:75:b9:5b:ad:7e:22:b8:30:45:29:b5:d0:91:a3:
64:7b:03:dd:c8:0c:c1:71:3b:d2:9f:38:8c:a0:f8:
99:0e:2a:80:13:28:93:4a:f3:6a:38:3a:4a:6b:01:
5f:b1:d2:c9:97:55:c8:8a:29:f7:18:8c:c1:e6:c2:
6f:43:ca:50:a8:f4:37:fd:be:31:07:f8:90:ed:6f:
da:36:3d:75:e4:b4:76:86:e4:a6:c9:57:e9:83:f9:
35:d5:16:c5:1f:19:67:c9:0b:52:0a:bd:03:b7:47:
eb:af:e4:13:44:60:85:2f:28:e9:4a:42:6f:f4:cd:
27:81:7f:48:50:7a:36:c2:a0:89:b5:c8:df:fc:e0:
e1:a3:2f:6c:43:20:36:d7:c4:86:02:a2:d1:67:8c:
a3:c1:47:c6:c0:90:3c:aa:e6:44:80:73:27:54:d6:
30:13:78:d3:e2:cc:c0:d3:ea:a9:1d:ad:1c:39:7e:
45:2a:e5:ed:0c:2a:a9:e4:1b:e1:44:e6:4f:35:ae:
84:6d:9e:50:1f:70:d1:67:8b:d1:99:68:a5:48:50:
74:85:5c:b5:31:1c:2f:a4:e4:7a:83:4a:ab:03:b6:
9e:84:10:87:fb:c9:98:86:97:ae:70:0c:ae:66:26:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:D6:BB:EB:47:4A:0C:2A:53:4C:25:38:F9:69:B4:D7:A9:80:B4
X509v3 Authority Key Identifier:
keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:82:7d:25:bd:1d:22:1e:95:e7:1c:5c:ff:5f:56:45:f3:fa:
d1:08:c5:01:d1:a1:22:81:43:85:a9:f9:5a:7a:bb:57:30:48:
a9:9b:f5:75:38:20:a9:b8:a6:4a:11:4a:ed:fa:ac:6c:c3:eb:
db:8f:e8:14:a1:44:92:42:90:f6:7d:b0:ac:f7:76:0c:86:c1:
da:1f:cf:c3:fd:31:9c:b3:f5:f4:19:5a:6a:e4:02:6e:5f:51:
11:bc:21:cd:66:61:8f:f7:a4:0b:0b:e8:80:01:9a:55:6a:9f:
38:3e:e7:c5:a6:22:ee:a2:d1:0f:1e:6f:74:5b:03:0e:b8:dd:
07:ef:a6:20:12:d4:98:84:46:95:9a:6c:1e:ef:ce:ee:42:0c:
6a:ce:e4:b9:6a:b1:da:7c:38:9f:7c:57:75:63:b0:c2:f2:7d:
ab:35:2e:38:d1:c7:01:c3:2e:16:24:02:b3:25:2d:27:33:ca:
50:e6:a8:cc:94:ee:a9:99:22:2b:1d:d3:90:b9:e3:15:94:f8:
1a:e0:54:15:6a:98:7b:b1:af:0f:8e:f9:30:5c:24:d7:f9:37:
c9:d6:b5:bc:84:ee:27:71:d0:f5:43:9c:80:3f:6d:2b:fd:68:
39:2e:1e:ec:58:ec:75:0b:67:17:4a:b5:fe:56:1e:a8:6e:d4:
81:46:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:42 2026 by rpki-client