
$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
File: RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json)
Hash identifier: fW33aWDCoKuRDGv3RozL/pL61ap8xnLqCP90ySsVhu8=
Subject key identifier: 8D:75:DB:E2:93:5A:48:35:CA:8C:6F:2D:EB:45:59:BC:EF:84:18:01
Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
Certificate issuer: /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Certificate serial: 189D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
Manifest number: 1892
Signing time: Tue 12 May 2026 16:29:59 +0000
Manifest this update: Tue 12 May 2026 16:29:58 +0000
Manifest next update: Tue 19 May 2026 16:29:58 +0000
Files and hashes: 1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: LgKvxAfz2Kbx7ckLCxppMn/A7Hva3ePUI9xwEYDgxLQ=)
2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: 6HQUJT9HfaQ0kHLipfm5EZcRoS4c3RMqyseCSnA5uo4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6301 (0x189d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Validity
Not Before: May 12 16:29:58 2026 GMT
Not After : May 19 16:29:58 2026 GMT
Subject: CN=6a035587-4bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:42:22:02:83:df:e8:e0:c3:94:4a:4d:3e:
65:ca:db:d1:25:06:44:9a:22:d9:14:81:fa:23:4c:
7c:58:c0:91:b3:c9:c4:03:4d:a3:c2:dc:cc:ab:db:
2c:32:04:7c:a4:9f:85:b0:10:9a:85:1d:cb:5f:83:
fb:21:24:11:f1:e4:e0:81:f3:5c:9d:85:bc:86:7c:
d3:68:ec:cd:80:ea:2a:b5:38:6a:cc:64:6b:e9:a5:
f5:8b:24:d3:e0:2e:04:df:8b:7e:b2:eb:a2:4d:6c:
9f:eb:34:40:e5:0f:b9:4a:72:d2:ed:7d:44:70:57:
b4:b4:bf:c0:0c:cd:70:91:21:4a:6f:b1:fb:cb:76:
58:53:da:b4:af:12:09:58:e9:79:e3:5b:1e:6b:c5:
d9:cc:59:0d:48:7e:6d:0f:de:14:fa:5a:df:46:70:
a9:a6:02:00:c4:09:76:67:0d:f3:ef:52:b0:0b:0a:
32:9f:14:2c:d3:b7:d6:6d:40:4f:0b:8f:45:6e:87:
06:9e:6b:15:a6:97:40:ed:2e:a7:28:da:e4:7b:f5:
02:02:12:45:ec:18:30:ce:7d:b2:9a:9a:18:e8:56:
98:74:4b:41:70:65:67:35:41:11:59:62:18:2f:b3:
96:63:29:70:16:9a:3a:d9:ee:49:b5:ff:6b:98:38:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:75:DB:E2:93:5A:48:35:CA:8C:6F:2D:EB:45:59:BC:EF:84:18:01
X509v3 Authority Key Identifier:
keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b5:13:2c:bc:42:11:36:a2:9e:e5:28:a2:03:48:23:b3:f0:
33:62:ed:e8:2b:35:17:61:3a:fb:fb:7e:57:4a:b7:b5:01:2f:
8f:51:26:2e:7c:f6:e7:89:9e:af:fc:ad:c1:46:0f:8d:61:22:
94:af:c6:a8:b3:3e:b4:71:e1:e3:9c:f9:60:5f:65:6b:a8:de:
c0:5f:82:e0:e5:b3:d9:74:a3:d1:9d:37:c9:b1:f1:89:13:51:
b9:8a:93:8f:66:1c:12:91:91:f6:17:1a:2a:b9:a9:05:5a:a0:
c7:7d:23:06:cd:e4:ce:9b:98:f0:1e:5f:40:08:ee:04:91:c9:
73:56:98:fc:13:b6:20:b7:6c:77:d3:1c:ce:80:9b:04:5c:4e:
97:fa:f1:99:a7:e7:c1:6e:e2:6d:ef:63:cc:94:53:47:93:2c:
1e:4e:58:cd:95:1f:0f:d0:58:67:82:59:2e:fa:16:91:5f:f1:
ce:7e:82:53:0b:5d:97:56:bb:7a:e7:58:44:3c:df:63:86:98:
88:89:30:13:18:35:14:14:9f:46:64:1b:ca:c2:62:18:64:16:
5e:2c:ea:8b:56:d8:65:6e:69:1c:5d:66:13:5b:53:0f:09:40:
77:bf:ff:ef:c4:26:39:c6:fc:72:69:77:91:44:7c:6c:1f:9b:
d0:bb:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:22 2026 by rpki-client