
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier: 59kqJ9sLKWr31jVUjCUxHEj1GhWMI1ITeGlg6XK6fXQ=
Subject key identifier: 28:98:7E:1E:8F:8C:55:01:42:81:68:0C:E7:9A:6A:42:0C:15:19:08
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number: 0119
Signing time: Wed 13 May 2026 06:21:02 +0000
Manifest this update: Wed 13 May 2026 06:21:01 +0000
Manifest next update: Wed 20 May 2026 06:21:01 +0000
Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: IIbm1GLSLKqy9pzzdS+LXyQ1M2C2Nj53vWryUe2ZQ2w=)
2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: yjuBkaQ9iRKgMQ7a+4P/BtzlYCvqc8B89mQbeBjPRXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: May 13 06:21:01 2026 GMT
Not After : May 20 06:21:01 2026 GMT
Subject: CN=6a04184e-ca41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:9f:58:88:7f:65:ab:27:b6:2b:17:93:88:
51:76:60:04:fe:70:70:50:8a:33:35:fa:56:a4:08:
dc:46:cc:b9:bb:04:e0:29:0d:35:32:52:70:53:a1:
af:53:ba:56:69:10:ef:c4:70:ca:90:a5:00:b4:99:
f6:05:7b:85:6d:91:93:e3:90:fd:6c:7e:6a:46:ec:
ef:41:96:1d:b7:77:9e:d3:78:93:00:62:99:16:a5:
71:ec:ae:e1:1b:4e:b2:f7:84:0a:ef:e8:08:5e:ee:
64:53:aa:e4:25:90:9a:38:09:b5:8f:65:4f:93:11:
7c:6f:94:33:89:67:ca:de:16:55:ab:f4:53:38:f7:
72:50:24:11:02:61:91:b0:30:95:45:22:cd:1e:23:
cc:82:bd:05:32:2d:55:d9:be:9b:c5:77:c3:1c:85:
eb:40:d8:2e:e6:6b:1f:cc:41:49:0f:77:4e:8a:c9:
e7:b0:d5:76:af:35:d2:a4:fa:e8:c5:62:b9:ad:ac:
ba:a8:0c:a2:52:15:33:a9:15:41:6b:12:18:a7:c4:
cf:df:ca:b3:43:d2:c6:ed:1f:cf:63:fe:00:0b:4d:
1b:c5:e1:13:93:09:9d:09:a6:51:df:db:35:33:40:
a7:19:f8:ed:61:d5:8a:a5:e7:ee:db:73:98:29:4e:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:7E:1E:8F:8C:55:01:42:81:68:0C:E7:9A:6A:42:0C:15:19:08
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:f0:2b:d6:63:c9:2c:cc:8b:ac:f5:b9:14:36:c9:7f:f4:57:
fe:8e:91:b6:ff:a1:3d:13:4f:b5:94:5d:41:46:12:d1:9a:51:
ef:74:3e:d1:38:c9:c3:31:40:d4:07:64:5f:83:d2:fa:3f:0f:
83:8f:d8:f1:ab:4d:8a:17:e6:3c:7c:38:0c:d6:82:dc:9e:91:
ce:25:8e:30:fe:ec:d2:18:6f:2a:03:4f:9f:61:03:3a:e5:c9:
ff:d4:20:98:1b:a6:99:9c:90:2a:13:18:ee:43:56:59:29:f3:
a0:67:b0:d6:27:58:d0:ae:99:54:48:a3:02:55:01:2e:6e:61:
87:24:0e:a6:11:f0:d3:f0:99:6d:ba:f7:38:d4:4c:85:de:75:
6a:ba:47:8c:ad:4d:5b:58:f7:05:e1:f5:3a:7a:77:da:2c:ca:
6a:73:d7:39:b4:56:43:57:d4:af:9b:eb:3c:8a:b0:58:2e:da:
46:f7:e5:b7:0b:42:0f:02:34:fd:c2:ae:6d:f3:82:61:3c:11:
9b:1d:b9:07:aa:62:ed:9f:56:a5:cb:1f:90:1a:8e:be:ab:b0:
d7:e0:7f:b3:a5:70:1d:ce:99:b3:70:26:3e:bf:62:21:6a:04:
33:49:0f:5a:b0:ce:b4:a5:02:87:83:f0:a7:ec:b7:42:5e:42:
44:fa:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:10 2026 by rpki-client