
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json)
Hash identifier: rfDfAZAqRwSbIY2bqsJvaKAOe+ixqyTsPPz7BgQ6qm4=
Subject key identifier: 6D:A3:3E:20:D2:7F:69:46:16:26:29:1D:78:17:42:27:F2:8D:46:03
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 0380
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
Manifest number: 0354
Signing time: Thu 23 Jul 2026 02:00:45 +0000
Manifest this update: Thu 23 Jul 2026 02:00:44 +0000
Manifest next update: Thu 30 Jul 2026 02:00:44 +0000
Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: LrEMJS9AkvBmcf0zTu4hT4G9wZcFpfvb5HoD9cu0nCU=)
2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: PPilQKcKXmCzfDra94ptz+UOBe/ruKL5vBBrgys75yQ=)
3: 69046BD0ECFE11F0B05C9076386F56BC.roa (hash: YCe2AE1AYEPbcU1s9LwUlVk97WjIwXee65C9XOQSVi0=)
4: 35AB985C68B511F18E116D7B7F47A888.roa (hash: zJzm+IxndwR1rSvg7Wy91Pwrmnj3T3uEe3l4l9/HMCw=)
5: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: UazZSGRsaobkFh+uwdDtJ065Ep6bEbys8yH2m9dsJpw=)
6: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: U6gY9KKT7NSCpx8jpV/iJKW5bvGforRTQeZvJLFkBWs=)
7: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ayI2v9zEaoadhkrRa+ZcLsyQwGLPommiSdSXuXbqNDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Jul 23 02:00:44 2026 GMT
Not After : Jul 30 02:00:44 2026 GMT
Subject: CN=6a6175cd-80e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:0f:d5:03:d6:ed:bb:90:b7:cf:87:85:9a:
a9:e4:72:81:bd:9e:15:ff:d5:5c:14:e2:80:37:b8:
44:cc:23:02:bd:3c:d0:ae:5f:cb:b6:05:f1:59:82:
1b:0c:20:16:0c:ec:03:b1:ea:84:1d:b1:51:e2:9b:
35:1b:75:c8:9d:ff:17:6a:28:56:af:08:62:68:7c:
f5:a9:a2:a9:a6:79:ef:8e:fa:44:fc:1a:20:50:23:
90:f7:80:bb:83:e8:13:5b:0d:93:1c:b6:db:be:8f:
94:28:f3:5c:f7:c2:49:f8:88:75:bb:13:88:18:0c:
39:75:02:67:be:da:f8:b9:3c:25:1a:8f:86:f7:e4:
f0:9b:46:68:37:be:06:8b:24:ea:b6:45:d3:0c:e8:
7e:89:59:b1:7a:df:9f:23:6f:31:c1:9d:ef:6f:c4:
77:56:e6:50:e5:50:ec:89:06:b8:1a:6d:76:b4:28:
ef:a1:29:ea:58:af:ff:60:c2:53:71:5a:82:d2:e3:
95:e9:2b:b4:c8:a8:e7:0b:ea:8a:22:c1:9e:d3:a3:
ef:bb:99:76:8f:77:b9:21:3a:fa:81:d9:72:20:d5:
64:57:b4:ed:03:c6:6c:ca:89:7d:c3:5e:d2:08:f3:
c1:7a:6d:e1:14:e6:de:3f:b5:1b:37:92:9b:73:0f:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A3:3E:20:D2:7F:69:46:16:26:29:1D:78:17:42:27:F2:8D:46:03
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:3f:74:01:4d:7c:12:b5:d1:29:8a:94:db:9b:a0:c5:a1:6e:
bb:00:44:a5:c2:35:dd:82:f4:7d:6f:26:ac:bb:87:ec:1a:5f:
05:e9:bc:c8:0b:b6:ef:d5:30:30:38:7b:8e:1a:73:34:11:9b:
14:a3:8d:5d:e5:2e:34:ba:93:13:0e:35:de:15:66:aa:71:1f:
b5:1f:69:f1:4e:e8:ac:8d:6b:dd:13:3c:6d:c5:cc:59:d1:aa:
9b:66:57:d1:d5:aa:5d:14:37:cd:fe:7d:5d:5c:ac:27:f9:81:
8d:58:16:6e:72:3e:60:c2:37:f8:7d:5e:a8:17:c4:28:d9:ec:
4f:b6:4e:f1:f3:19:b6:c3:da:1a:81:23:b3:0c:aa:39:89:2c:
3b:92:1d:5b:74:8f:67:d9:b9:5e:72:dd:38:59:23:11:92:9a:
7f:aa:ad:4d:30:39:d1:df:9a:14:72:cb:f3:a3:2f:36:0a:94:
5e:6d:2b:1d:17:84:28:06:74:8b:1e:d4:0c:92:12:75:25:22:
a0:9f:51:b2:cf:3d:41:80:a8:4b:e5:b2:12:6d:f6:49:db:69:
8d:c0:3f:6f:af:1c:c0:b3:2c:ae:f2:b1:4d:66:5c:02:cc:b2:
b0:03:e7:5f:d8:92:7d:dd:d2:58:64:64:d0:6a:d6:fc:75:c1:
9c:c4:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:56 2026 by rpki-client