
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
File: YbAiM19NheFtR3oAatyOPy_alGA.mft (raw, json)
Hash identifier: +xjtlKYm7s4tAqWu2E4BcBLSI7llVo3nqpbbz+w/IE0=
Subject key identifier: 39:DF:E0:CC:40:23:F8:35:3A:33:C5:5E:94:AA:91:5A:D9:63:78:B6
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Certificate issuer: /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial: 0531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
Manifest number: 052C
Signing time: Tue 24 Mar 2026 23:12:45 +0000
Manifest this update: Tue 24 Mar 2026 23:12:45 +0000
Manifest next update: Tue 31 Mar 2026 23:12:45 +0000
Files and hashes: 1: YbAiM19NheFtR3oAatyOPy_alGA.crl (hash: Bhwdpj0A9i8kIix84ax+YT/WkljWSFsjr6GKgnYkI1Y=)
2: FF4EB6B2395811ECA422C462C4F9AE02.roa (hash: 1EXMwCZdlr4n5uu1XLxW00w3UXh6JZwNTcRYA1sNXNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329 (0x531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7C77, serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Validity
Not Before: Mar 24 23:12:45 2026 GMT
Not After : Mar 31 23:12:45 2026 GMT
Subject: CN=69c31a6d-ecc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:0f:34:45:bd:41:cf:24:a2:db:35:9e:46:90:
ba:63:06:f5:10:36:a9:71:0b:3e:36:74:c7:39:c0:
8b:ba:73:1e:57:51:7f:22:9f:e1:cb:84:ba:63:f0:
de:f8:99:fd:64:81:ba:dd:0b:fe:54:94:ce:86:28:
84:29:f8:40:6b:f9:dd:c8:6c:44:e7:17:2c:11:ae:
9c:af:32:62:94:ce:bf:86:c3:b5:e6:f6:fe:30:37:
eb:79:56:54:3f:02:0b:e1:c5:53:7c:1f:3b:cb:c9:
4c:40:b9:ef:b8:c7:96:c5:e1:ff:aa:48:ed:0f:a2:
f9:9c:00:7b:d5:36:25:fe:92:b6:9a:23:c7:99:a7:
7c:ef:ae:4c:b4:b1:33:0f:dc:3b:6b:7b:f8:09:b7:
72:4b:75:8d:5c:d3:be:39:5d:d5:fe:4a:38:2f:0b:
ad:a6:2f:9d:d6:6c:d9:58:c8:cc:bd:34:6d:15:32:
c5:75:ff:20:5b:1a:41:fc:69:3e:53:e0:46:6f:09:
8a:ad:4b:e8:e0:1d:13:92:0a:6b:7a:28:a8:4d:7b:
74:ad:60:8c:ac:8f:1d:ca:04:8f:2c:60:ad:96:69:
bf:3b:d8:a4:da:10:66:8b:1d:76:22:92:5c:2f:f3:
cb:2b:41:57:c8:dd:42:72:dd:89:6d:6c:62:34:58:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:E0:CC:40:23:F8:35:3A:33:C5:5E:94:AA:91:5A:D9:63:78:B6
X509v3 Authority Key Identifier:
keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:43:57:3e:ae:97:d0:02:91:1d:b8:e6:d1:9d:4d:0e:19:d4:
7d:9f:6c:14:6a:78:60:5f:9c:c1:4c:c6:2a:2c:63:32:ab:0b:
62:33:b1:e1:39:d5:15:3b:3b:65:4a:48:da:ae:56:a0:58:8a:
4f:5e:55:b2:6b:a7:66:bb:e0:83:83:bb:29:f1:cb:fb:84:78:
f8:1b:74:38:f6:61:2a:b3:aa:1c:3f:b5:e5:c2:de:01:8c:ad:
38:e8:a2:16:d5:f0:88:a7:a0:b2:3a:37:5d:70:60:f0:89:d7:
3b:bb:76:f8:64:50:e9:38:7c:7b:06:d2:35:e7:b2:b0:33:e4:
02:40:17:68:33:71:02:1c:56:dc:70:46:bc:65:44:75:94:21:
b1:72:57:f7:bf:25:11:4e:cb:72:1a:97:d3:94:c4:0e:ee:f1:
24:27:7d:eb:20:e9:87:76:b7:cc:cc:22:fe:e4:88:84:66:05:
28:c0:85:d1:a3:59:9c:75:67:64:65:bc:8c:59:55:80:e7:1c:
00:be:56:b8:da:3f:0e:b0:8e:ef:07:3a:e8:5f:57:6d:db:73:
e4:4d:bc:f3:5f:dc:1f:38:cf:0e:cd:bf:79:8e:01:2f:25:a9:
7f:5f:04:b2:74:b3:b9:dd:d1:57:64:4d:29:7b:c9:c2:c7:f4:
a8:41:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:15 2026 by rpki-client