
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json)
Hash identifier: FkOeM1NzV0EQzEPeUhE6uAYDAdZW5yYTBVGGeACWgZM=
Subject key identifier: 6E:DE:60:40:FF:5B:B1:73:98:D4:D7:71:EB:D2:3F:3D:57:B0:BE:20
Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
Manifest number: 0190
Signing time: Mon 11 May 2026 04:32:51 +0000
Manifest this update: Mon 11 May 2026 04:32:51 +0000
Manifest next update: Mon 18 May 2026 04:32:51 +0000
Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: DXd89oOThIzNl6TG3WGwxTAihHEAJ1Tbgs41z5JjtKA=)
2: 1B7430784BD411F1A6EB1F4394833773.roa (hash: DQuyMeCRm4a8iG98XqAoF7qWLf73xYDbUnQ5Pzno1lA=)
3: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nFIjLEFtVNOTTMiweqb0gcEFYFfR+U3yovX2UqgW1o4=)
4: DAF8A746E01B11F097920A16646F56BC.roa (hash: LGOwTBglBUqnmp1uBsE0bwegkvn6MaHVF43SRoKPz84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Validity
Not Before: May 11 04:32:51 2026 GMT
Not After : May 18 04:32:51 2026 GMT
Subject: CN=6a015bf3-1ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:bf:2d:35:08:13:7a:c9:0c:ac:56:85:64:
dd:98:33:4e:c2:49:ad:5f:3d:69:d7:7a:ad:2c:62:
56:1e:df:8c:81:83:84:7d:46:6e:d0:2f:f4:64:53:
4c:d0:dc:f1:c1:31:ed:f7:93:89:65:f0:2a:b7:c0:
bf:3e:7b:61:8a:0b:29:70:49:01:8f:61:a6:97:02:
f6:ef:f5:c7:b7:e3:98:79:a6:d6:14:45:2d:ac:38:
5c:84:0c:59:0c:5d:0a:68:ae:de:b2:af:0d:6f:81:
54:fc:af:cc:78:07:a2:fa:0c:28:82:c0:e3:34:06:
33:b7:25:2e:69:c2:22:d0:96:1f:ed:33:8d:67:da:
99:47:87:99:d4:bf:78:bb:0f:ab:84:ec:f2:62:21:
36:be:f8:11:b3:58:c2:a9:e9:49:ba:09:b2:30:3a:
f8:75:49:88:59:c0:23:0c:ce:72:aa:72:4e:e8:b9:
3a:46:fc:44:c6:3b:11:a1:f7:6f:52:57:f5:0f:45:
ed:a6:11:e6:f5:7f:87:0c:35:0e:db:76:99:ba:8c:
60:d3:ee:31:bb:29:1b:01:6c:06:03:7d:c5:cf:13:
69:98:2a:4a:6f:28:55:1d:4d:12:ae:3b:51:75:76:
40:c1:03:4d:d1:03:30:92:83:53:56:d1:e9:c6:cc:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:60:40:FF:5B:B1:73:98:D4:D7:71:EB:D2:3F:3D:57:B0:BE:20
X509v3 Authority Key Identifier:
keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:20:10:21:f8:3a:33:7d:42:aa:fa:02:6e:09:13:8f:05:65:
f8:4f:64:74:c1:0b:98:da:3b:24:33:d5:90:1f:00:2c:2a:71:
34:c2:1c:65:a4:8c:14:75:9b:23:ae:51:e7:78:8b:15:a0:42:
0c:cb:2b:ff:07:0d:61:54:a3:66:cb:17:1f:ec:f5:b2:fc:c9:
e5:49:76:c8:48:45:9d:29:6e:7e:0b:09:b7:e8:de:f9:5b:66:
80:c2:e8:15:45:8c:f0:57:e1:99:e1:6b:e9:d8:cd:fb:b3:9b:
c2:79:2f:9e:56:24:54:00:2d:03:13:c5:f7:27:cc:65:f1:cf:
e2:20:4d:0a:7b:a0:be:3c:a0:4e:7a:80:72:b1:ba:1c:d8:33:
66:c4:1f:58:59:de:82:cc:87:fa:e1:8d:f7:bd:fa:1e:3e:08:
8f:8b:70:40:b4:a1:7f:1f:ca:0b:47:ed:1e:01:37:32:2f:ce:
6f:7e:00:56:bb:0f:bb:0e:c6:d8:95:02:5a:99:8a:cd:6a:81:
f6:c5:9a:c9:0b:a6:6d:55:ed:0e:9d:ba:4e:ea:05:fd:dd:9b:
12:61:fc:1f:05:02:8b:74:aa:1f:4f:f6:42:e4:48:a8:82:b8:
55:2d:b0:20:58:20:82:65:c0:dd:3d:53:08:b7:b4:c8:87:b9:
c4:c2:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:31 2026 by rpki-client