
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
File: ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json)
Hash identifier: mDXwP4nWKePd34499ZmyfWXEb6nHS1blRw9SYwz3MpY=
Subject key identifier: EC:53:27:D9:78:17:22:1B:41:49:DE:EE:8D:B1:67:4C:27:17:0D:AC
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial: 3563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
Manifest number: 3551
Signing time: Tue 12 May 2026 14:45:20 +0000
Manifest this update: Tue 12 May 2026 14:45:19 +0000
Manifest next update: Tue 19 May 2026 14:45:19 +0000
Files and hashes: 1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: Uul4GQTIx3X6W+0KIFoXF90Ela7+ft0N2ngY3CKPRmo=)
2: 67AAC7161D1411F1B0E2BAD80C3D8C67.roa (hash: CHdRjKAYDzl4mARbLMEIedXV1bESXGd76YlTxW4AhVo=)
3: 5D8B2B06D90B11F0A960BEC67CD3641D.roa (hash: yOZ7NWihMQh2xMOicbiIAZG+/dVYwm+tNO5GsESSJA4=)
4: 4821776AD9A211F092913C6268D3641D.roa (hash: Sy1HvppFOycihdTszz/358rIRt69yzzeT9izOzy0CC4=)
5: 929D25381D1711F1981A78170E3D8C67.roa (hash: i9GKuEAC1w7Uzsve2QE3rzgfDee7AvdLIQUdi85I8+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13667 (0x3563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Validity
Not Before: May 12 14:45:19 2026 GMT
Not After : May 19 14:45:19 2026 GMT
Subject: CN=6a033d00-6a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:6e:bc:d6:86:1c:46:16:08:a7:d2:14:e1:
75:96:27:e8:e9:41:59:9d:89:44:8a:09:54:95:9a:
66:7b:f8:44:3f:bf:6f:eb:e3:7a:39:d8:ac:83:a1:
95:1d:9a:ea:ae:05:68:c8:df:7e:63:f7:79:62:97:
18:e5:30:e1:f3:ed:5b:c8:31:e6:cb:02:bf:d6:71:
fc:58:53:1e:67:f0:c0:12:37:82:66:d4:de:cd:1b:
89:ca:63:ae:47:23:bf:92:d2:c3:79:34:87:fe:7b:
c1:38:cb:e7:7a:03:03:4a:c1:8a:73:eb:e5:d3:ed:
86:19:49:56:25:b0:14:86:30:09:de:57:99:6b:87:
8e:ba:fd:f1:f5:59:c8:50:f2:ca:3b:b2:d1:13:fa:
e6:32:bd:82:d6:34:7b:27:00:55:d4:e1:de:88:43:
11:3a:5d:77:07:6f:36:e4:60:1b:2e:a9:1b:a8:cd:
8d:0d:91:8c:9d:79:16:2a:7f:07:b8:45:7a:53:5f:
05:ec:cd:5a:ab:4c:b1:8a:ca:33:4b:51:dd:5c:8b:
fb:a8:ef:5a:2d:84:fd:c6:49:9f:bf:a6:45:f5:43:
19:89:92:e4:b2:16:70:51:9a:d1:e7:21:b6:e5:25:
41:05:b9:f4:47:27:0b:f0:16:25:b4:d1:83:46:3e:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:27:D9:78:17:22:1B:41:49:DE:EE:8D:B1:67:4C:27:17:0D:AC
X509v3 Authority Key Identifier:
keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:71:d1:e8:8d:67:f1:44:fd:71:2c:90:5f:b7:41:12:98:de:
87:4e:fc:4c:a7:11:b0:e8:ea:9d:14:be:6d:c9:97:07:34:95:
fb:70:7b:8b:83:bf:3f:1c:73:73:bc:c7:15:ae:55:9a:e5:88:
f2:db:5f:e3:b1:57:10:fa:77:b0:c8:a2:a8:db:a0:dd:e1:f7:
f3:22:73:c6:3d:cf:a5:98:8e:05:73:30:74:3e:4e:d4:12:c9:
75:95:2c:f9:06:e1:c1:e9:3c:0b:96:e2:c6:2a:86:96:05:46:
45:50:29:be:84:92:31:d5:b2:1c:ed:bb:2f:d9:bf:42:6e:38:
13:10:ad:a4:dc:83:50:18:7c:21:c0:89:ee:46:e8:1d:68:c6:
cb:d3:88:6f:fe:4d:6e:6a:c0:16:55:eb:7c:d2:78:78:85:04:
eb:d4:45:8c:fa:76:d6:1d:0b:ed:93:72:b4:50:91:3b:49:b9:
fb:23:c4:47:49:3d:5a:f5:a1:60:9e:d3:01:79:aa:1f:4d:bc:
2b:6d:25:e5:bb:a7:f4:ad:89:89:f2:17:dc:25:6a:1c:23:db:
7c:29:fa:b6:27:8e:ca:06:b1:9b:e9:ae:d8:f8:f9:d8:72:3f:
4e:05:eb:d6:23:48:57:49:d4:b8:ca:72:a8:e7:20:13:6b:7e:
92:88:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:05 2026 by rpki-client