
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json)
Hash identifier: g4eDzIT9ObCxVAsDK8qMAujbs49m75CPKI6KnC6GaOs=
Subject key identifier: EC:DA:D6:0A:90:71:13:78:FF:F0:4D:73:EE:AF:52:47:18:3B:09:93
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 112E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
Manifest number: 1113
Signing time: Tue 12 May 2026 17:17:48 +0000
Manifest this update: Tue 12 May 2026 17:17:47 +0000
Manifest next update: Tue 19 May 2026 17:17:47 +0000
Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: FmU6yMr2sd0sYnMrodoVQq13W8Nf7eI55EpCFkIKqj4=)
2: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: aScypq58ma32Blk4gXAn5hRCMA++RlRKUglRyBdAIIU=)
3: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: MInSGZWk/+V+/O784VPQkOPEvkikcYw1hh5xAfaMy+Y=)
4: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: QNd+7yoJE7XGdb3l9stbVIXGPJdYrSjK5lDsTdFfmX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4398 (0x112e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: May 12 17:17:47 2026 GMT
Not After : May 19 17:17:47 2026 GMT
Subject: CN=6a0360bc-8279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:a5:00:70:a1:0e:ef:3f:8f:1e:82:e7:5a:
fc:e7:ae:41:ad:bf:fe:f5:5b:b3:65:0f:75:8d:39:
c0:75:65:6b:43:f7:3c:2e:ef:b7:06:9a:f3:8a:61:
f3:4d:14:f5:c9:d5:0a:91:34:91:64:81:8e:f0:65:
81:32:67:da:cc:9d:72:51:fe:f7:d3:08:36:ee:a6:
16:86:ca:38:d0:a2:71:ce:2c:b1:27:67:c1:7b:31:
94:59:80:ef:cf:3c:ac:1e:9b:03:24:a3:21:62:8d:
8b:ad:50:af:85:5d:d0:7f:b4:34:7f:54:1e:20:44:
33:54:e7:1d:8e:e2:1a:4d:5e:3b:c4:49:98:a8:da:
1f:80:30:ca:9c:15:5a:60:0b:47:45:3d:02:33:cb:
4c:16:93:0b:2a:e2:38:84:90:cd:da:b0:23:f9:92:
42:cd:70:39:27:8f:e1:92:c9:e0:13:5d:c3:ca:d1:
ff:ff:aa:b2:cd:cf:7c:72:d8:dc:e4:d2:82:38:76:
96:3e:e5:c7:da:97:f6:d1:db:c5:99:fc:f6:56:83:
c0:b3:0e:8d:91:10:92:6f:9c:61:c6:0b:d2:7b:ef:
15:c7:4b:33:16:90:d2:9f:f1:d3:73:06:ec:fa:43:
ed:a6:8f:0a:0b:ec:ec:03:47:51:8a:a0:7b:f1:fa:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:D6:0A:90:71:13:78:FF:F0:4D:73:EE:AF:52:47:18:3B:09:93
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:79:26:cb:90:33:7f:7a:bc:81:96:bc:09:bb:63:a0:44:29:
40:9b:14:1b:67:3b:04:b1:da:14:5b:6c:f6:f5:42:04:9a:f6:
68:c3:7b:21:0b:e2:de:0f:97:04:5f:1e:b5:52:d4:5e:de:a6:
90:bf:55:87:93:af:6b:26:df:57:21:8b:6e:b3:db:45:1f:6d:
4c:8a:2a:2a:40:3c:77:00:5a:e2:28:a3:5c:4c:08:b6:0e:89:
9d:dd:6b:53:fc:4b:1b:9b:7c:5c:6a:2e:e3:a1:ab:ec:81:44:
0b:25:41:7f:29:67:a2:fe:ff:7c:8d:44:31:37:6d:62:bd:c5:
6c:27:e8:7b:3d:95:5e:ac:ad:1c:01:e0:f7:00:a4:36:7b:ee:
a9:8b:7b:46:83:96:27:fc:11:08:89:05:2a:8f:17:16:3f:42:
77:ee:ef:1c:5c:d2:70:61:c2:e7:f1:03:59:29:11:56:49:58:
a9:60:86:cd:81:70:57:8f:c6:a1:bd:16:e4:0d:fd:66:c7:0b:
f5:7f:35:30:3e:1d:34:ba:4c:93:0a:1e:92:a9:2f:c2:d3:9f:
e1:18:50:54:7f:9d:23:e0:47:47:ca:7c:18:d4:ed:54:5e:19:
c2:3b:f7:8f:ce:dc:14:42:96:be:83:b9:f5:b2:24:a6:64:0d:
75:ef:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:38:14 2026 by rpki-client