
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier: xAjY8YAp1ziDqMH6wlodLZ7l/8ZsWEZMGBOwIjb8MU0=
Subject key identifier: 12:0B:C9:5D:3E:FB:F1:65:66:02:B3:37:FA:8D:63:0C:D3:5D:1D:A2
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial: 1B21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number: 1B0E
Signing time: Tue 12 May 2026 16:18:02 +0000
Manifest this update: Tue 12 May 2026 16:18:01 +0000
Manifest next update: Tue 19 May 2026 16:18:01 +0000
Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: b2WfWwkQWyFa/Y4ekECCnAX9+EmSnj5rg7RoInqBhVM=)
2: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: qWp/XIY6bx5m6zPuPTYxt/QlRjZYjzeSmVqLyGiCJPQ=)
3: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bVX95h5YGIEFl/nNsvVn6rJFnDmppDxCWRFjlU5VtvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6945 (0x1b21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Validity
Not Before: May 12 16:18:01 2026 GMT
Not After : May 19 16:18:01 2026 GMT
Subject: CN=6a0352ba-2724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:82:7b:cb:31:99:5f:3d:3c:90:2e:d2:2c:
4c:a6:73:4b:6c:89:b9:62:eb:ed:7c:fb:59:e4:2d:
be:15:a0:ea:86:c3:ef:af:6e:d4:5b:37:d0:55:9f:
c1:6a:8f:9d:09:00:09:86:b5:be:70:1f:f1:fa:44:
e4:e0:62:4d:47:a4:1e:6a:9f:67:26:24:fe:1b:08:
ba:b1:a6:71:41:76:dd:15:28:82:ad:6e:a4:16:c0:
84:b5:fe:7d:87:cf:d4:f0:7b:1b:90:50:b0:b7:bc:
a0:99:09:3b:b4:05:c2:12:5c:06:7a:b0:92:b9:05:
c0:20:95:af:fe:4a:6e:50:e4:79:58:53:75:1d:a9:
20:4f:20:5f:e2:8d:c2:2e:10:42:5f:11:9f:39:30:
49:71:a3:cc:fc:4c:de:e5:aa:77:fb:6c:77:d5:af:
9e:50:66:3d:93:30:29:1e:c8:8c:6a:64:93:31:25:
32:8e:91:ba:49:fb:40:1a:ac:68:b3:9f:ef:75:6f:
b3:af:51:14:a3:ea:6e:95:1a:79:27:ff:73:5d:5d:
30:ba:85:a4:bd:a8:f6:41:07:9e:73:ad:1d:b8:44:
25:b4:e1:22:1f:72:f8:fd:6a:60:8a:8e:3c:ac:7d:
4d:d9:0c:8f:9b:a4:a6:e5:1e:f2:76:0d:04:d9:39:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:C9:5D:3E:FB:F1:65:66:02:B3:37:FA:8D:63:0C:D3:5D:1D:A2
X509v3 Authority Key Identifier:
keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:fa:48:89:a1:8a:a8:f7:96:ad:26:99:a2:72:e1:2d:06:8f:
11:fb:a9:23:a9:45:1b:f2:ed:b3:85:66:22:21:a4:89:e5:d5:
89:e4:7d:1d:05:a9:51:92:fb:73:8b:68:23:f0:2e:9e:5a:85:
41:94:9d:d4:fc:17:fd:10:77:4c:44:f3:24:52:6d:2b:ec:d0:
85:78:01:6c:f2:e4:41:ae:5a:08:70:11:3d:a5:3d:f4:63:3f:
ce:24:19:39:fc:62:0e:7a:50:6a:48:fc:49:90:8f:a4:a1:f8:
97:98:09:84:53:b7:06:92:4d:a6:33:e8:40:14:8a:ff:73:70:
ee:77:8d:45:d5:74:43:63:df:26:b9:7a:42:c5:8f:4b:49:cc:
4a:4d:b4:e9:94:a1:fa:78:b2:ee:e6:69:d8:e5:56:93:21:4c:
a7:6a:66:f3:b4:97:e7:ba:56:07:39:a7:f2:ae:a3:48:01:5c:
06:b3:3b:4d:25:e2:e8:d7:ff:68:a1:74:4e:22:53:64:75:f2:
a6:cc:5f:b8:b8:8b:f6:23:02:c2:fc:09:15:03:36:40:21:20:
42:c1:2c:89:b6:99:e1:9f:68:96:2b:c2:66:a0:9f:1b:fa:b4:
58:e5:30:87:a0:82:53:0e:79:f9:02:83:fe:98:b3:fb:2f:e9:
9e:7f:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:13:33 2026 by rpki-client