
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
File: ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json)
Hash identifier: HG1+81W6LEpDShrOAPHkS65gU5pWQD8VOF0q41wkU94=
Subject key identifier: 2E:CB:73:BB:D7:71:86:71:39:74:79:DD:28:9E:AA:1B:70:93:73:02
Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
Certificate issuer: /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Certificate serial: 0672
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
Manifest number: 066B
Signing time: Tue 12 May 2026 22:41:19 +0000
Manifest this update: Tue 12 May 2026 22:41:19 +0000
Manifest next update: Tue 19 May 2026 22:41:19 +0000
Files and hashes: 1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: ejPBcS9pTmyO02q7qh8ndEBEHPfKuOCJFVKy4dvu7QQ=)
2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: Bfub3yt6yxVtW1jhLiJdVPcr/N44DddSwKU3KzJPUtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Validity
Not Before: May 12 22:41:19 2026 GMT
Not After : May 19 22:41:19 2026 GMT
Subject: CN=6a03ac8f-2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:32:9e:8c:25:44:c7:3f:a9:2b:ab:ab:23:
d8:e8:d3:59:72:67:a9:61:d6:61:f9:5f:e8:72:f1:
c2:84:88:29:47:fc:09:fa:1b:8e:b9:54:8b:b9:be:
d3:e6:e0:15:1f:68:a1:b3:89:c1:e6:21:a9:15:87:
f0:95:bd:df:11:4e:9d:14:78:7b:cb:4b:af:50:68:
49:c3:2f:f3:ed:be:24:8b:58:19:ac:ba:79:f4:57:
6d:c5:11:d8:2a:92:30:96:f9:75:6e:d0:d4:95:b6:
13:0e:a4:84:0d:35:5f:2b:d1:fa:31:28:0b:4f:5d:
6f:fa:9c:23:f0:13:b4:f5:b9:7b:68:6a:df:c9:de:
d5:d6:16:dd:67:38:df:8b:8f:27:47:7e:4d:bf:66:
fd:f2:d4:d8:10:7f:37:16:58:b8:0a:e0:b9:ed:fb:
bb:59:48:72:55:03:df:ab:63:9e:46:e5:86:77:95:
0a:5c:c1:18:f9:12:9b:46:64:2b:45:ae:23:41:40:
3d:54:ad:0c:48:09:7d:c8:e9:3e:b3:1e:b4:dc:65:
d8:df:04:2f:81:bf:56:2b:16:9a:14:a2:c7:db:b7:
f3:54:e2:5c:8f:e8:47:28:1d:17:14:f4:d0:05:eb:
ae:97:7f:09:02:ad:0d:1f:0e:fc:b3:7c:79:6e:3d:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:73:BB:D7:71:86:71:39:74:79:DD:28:9E:AA:1B:70:93:73:02
X509v3 Authority Key Identifier:
keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:af:c2:74:85:23:8d:24:02:bf:1c:b8:84:7c:e6:09:16:09:
43:c9:a6:d2:50:3e:85:01:83:2e:a4:c1:81:89:f2:83:4a:12:
8b:6c:23:1d:ee:09:96:07:97:86:a7:a9:3c:b0:a6:49:f5:98:
30:08:12:a8:25:9f:48:ac:a5:f5:83:3b:b1:db:ff:70:ac:2f:
3b:52:a4:02:89:f1:65:56:8a:a0:0a:b2:2f:d2:be:d3:f2:1b:
ac:ae:49:15:56:d4:c7:32:f5:8f:ab:4d:e3:13:e3:2d:ec:94:
5a:63:31:0b:f7:2b:96:19:1f:18:c5:31:b1:02:11:bb:f5:8c:
c7:18:58:3f:95:b2:6d:61:23:51:ac:e2:b8:f2:d9:5c:a7:2e:
08:c7:a1:df:0b:06:07:ed:da:46:c2:8d:8d:b1:ff:a0:80:e8:
30:34:ab:dd:be:5e:71:0f:66:a5:b9:2e:96:e2:00:53:46:ab:
9d:f2:ca:20:50:bc:a0:fa:a4:58:ee:f5:60:48:36:9d:65:fe:
25:47:a9:57:3c:b4:4c:a9:87:d5:d2:05:9a:fe:4d:d6:66:9d:
93:58:4b:12:e0:e0:24:56:eb:19:58:99:bf:30:c5:b6:06:ea:
e9:99:c3:10:bb:42:52:74:40:88:b3:4f:39:4a:d6:9d:d4:32:
f5:08:e1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:09 2026 by rpki-client