
$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
File: RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json)
Hash identifier: zMjwkZt7cSfiOfyAKzkdIYi8pld73HcDyrDh+wmwt8E=
Subject key identifier: E7:D1:17:BA:53:30:D6:C8:29:04:19:9E:38:D3:23:3D:94:6B:34:A6
Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
Certificate issuer: /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Certificate serial: 1884
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
Manifest number: 1879
Signing time: Tue 24 Mar 2026 16:24:38 +0000
Manifest this update: Tue 24 Mar 2026 16:24:37 +0000
Manifest next update: Tue 31 Mar 2026 16:24:37 +0000
Files and hashes: 1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: mKq/KchMN1m3HtsGNoNnb5xDav/vI6Rcw7i2Ee71s0k=)
2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: 6HQUJT9HfaQ0kHLipfm5EZcRoS4c3RMqyseCSnA5uo4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6276 (0x1884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Validity
Not Before: Mar 24 16:24:37 2026 GMT
Not After : Mar 31 16:24:37 2026 GMT
Subject: CN=69c2bac6-2258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:e9:bc:82:03:46:12:c4:5e:b6:5b:d7:66:
c7:cf:6c:1f:71:bd:be:a6:1d:6d:2c:16:ae:61:37:
a1:7f:9e:3d:08:c5:24:a7:d8:a7:01:52:df:b2:e5:
07:d5:7b:da:d5:8a:4b:16:fa:1c:30:ec:e3:6a:4d:
94:59:69:ce:4b:6b:a9:69:1b:35:63:4e:aa:57:08:
24:38:dd:55:88:81:3b:e1:e1:01:b4:db:8c:42:1b:
8a:44:b8:91:47:61:9d:41:25:c5:0a:74:d5:39:8d:
8f:3e:f1:bc:b7:e1:19:7b:23:0c:5b:4b:dc:c0:d0:
a6:93:39:08:7f:ff:f4:c9:17:dd:a2:9b:a6:57:d5:
16:29:79:c3:bf:88:fa:bc:1f:39:f8:49:58:82:fc:
9b:fc:b0:ac:9a:66:f7:26:81:53:a8:91:4a:8a:56:
68:a6:5b:fa:f8:12:20:31:10:03:fe:e2:6e:06:50:
9f:9d:50:b2:54:8f:0c:b9:40:8b:1d:fc:05:a3:d7:
d7:41:64:89:75:41:c8:3c:b6:22:ed:a6:3c:42:b0:
55:c3:6c:3c:bd:d5:22:cf:eb:85:e9:dc:d1:a1:29:
6b:45:3d:0d:88:e3:09:58:e5:ee:26:2a:e7:45:46:
00:fb:8e:6b:dd:91:97:35:20:44:6d:6a:65:07:2f:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D1:17:BA:53:30:D6:C8:29:04:19:9E:38:D3:23:3D:94:6B:34:A6
X509v3 Authority Key Identifier:
keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:99:8e:0b:a0:fa:93:47:d4:8b:b3:55:28:59:46:a9:7a:c1:
c0:8e:d5:71:14:c5:c3:46:21:cf:3a:6e:25:d8:ae:d3:95:87:
67:ec:53:cc:0b:87:1e:a4:6b:5f:69:ce:87:0a:a4:dc:70:86:
32:40:ea:23:ee:1c:51:bc:a5:2b:a1:2a:fe:1d:ed:5d:37:ff:
31:5f:b8:fd:07:77:20:23:5a:49:c5:19:de:2c:80:b3:c6:80:
45:e8:58:3d:3f:00:b9:4d:3a:42:9f:1f:2d:38:1c:9a:71:68:
af:3f:b3:ff:3e:3a:58:ce:b7:69:87:b4:bd:7e:57:54:19:05:
49:06:72:32:c8:24:7f:7c:7c:96:2a:d8:05:41:bc:2e:61:44:
ba:8b:c7:61:a4:fa:8d:90:60:c6:08:6e:ef:2f:31:62:81:37:
4d:25:ee:39:a9:f1:b6:2e:e5:a0:d9:bc:32:36:d3:1e:d9:bd:
f6:50:b4:ff:53:8b:bf:e2:9b:3d:af:b5:ad:ec:7f:45:1d:6e:
ae:4f:17:23:6e:0e:08:a2:00:d1:75:98:2d:c9:6f:25:8d:8c:
d5:29:59:3b:d2:49:3a:31:4e:06:09:fa:a6:7c:7f:14:bc:1f:
47:5c:a8:9a:df:79:0a:5f:c5:d0:7c:3d:5f:63:08:3c:7c:b5:
19:8c:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:39 2026 by rpki-client