
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
File: 1ybobzALJko1PClnPgdxb1RUteI.mft (raw, json)
Hash identifier: KhNEi4igAhCcIp0KhhVqo8LOLhUHiES1gssqbeW+heE=
Subject key identifier: F3:55:67:B2:D2:BA:10:7B:53:81:99:94:9D:3B:61:8C:05:A8:0F:73
Authority key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Certificate issuer: /CN=A91B4053/serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
Manifest number: A8
Signing time: Mon 11 May 2026 07:22:38 +0000
Manifest this update: Mon 11 May 2026 07:22:38 +0000
Manifest next update: Mon 18 May 2026 07:22:38 +0000
Files and hashes: 1: 1ybobzALJko1PClnPgdxb1RUteI.crl (hash: eIovfMW4dsfpAmTqU3GktEH5y0wkPn7DrDoZFHP3Sn0=)
2: D28B7DD450E411F081600061C4F9AE02.roa (hash: Y6rYOMG7RxOkx0Rcd3xNkDAcaCpb3aXvFYNyebOyITc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Validity
Not Before: May 11 07:22:38 2026 GMT
Not After : May 18 07:22:38 2026 GMT
Subject: CN=6a0183be-7d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:73:f1:5a:b6:4d:5c:7f:d3:bb:18:c6:3c:
52:fb:f4:33:fe:2d:b0:be:e0:a4:85:57:de:b9:92:
32:dc:38:4b:53:d0:3c:1c:0a:4a:7e:5b:51:e1:c6:
13:3d:d0:cf:5e:ad:8e:25:0a:2c:1c:03:7f:9b:d2:
39:e5:54:4c:8f:00:46:32:80:e8:83:8b:4a:18:f6:
8a:48:6f:04:a2:ae:2e:3b:6e:ad:e9:77:7e:9e:05:
0a:32:06:13:e5:fd:ec:16:88:5f:43:40:e1:94:e2:
c6:ee:d8:17:a0:e6:ff:00:00:c5:7d:81:7c:05:c4:
9e:0d:e9:dc:fd:af:75:38:06:07:24:12:e8:02:b3:
1b:3c:b5:bd:9a:65:3e:6e:fc:a6:f3:cf:85:d9:e2:
b8:89:09:61:b9:f9:55:f0:f0:a5:dc:3a:db:13:b3:
c1:c8:19:24:2b:0f:50:82:d2:14:05:e9:31:63:e1:
95:2a:ab:fc:6a:c1:e0:fc:60:a7:eb:7a:6f:2b:b1:
86:c0:c9:4e:fc:5d:10:1c:81:fb:e4:10:80:1a:69:
7d:29:96:ac:f0:37:ba:3b:3f:90:44:15:ce:29:aa:
75:8c:3d:dd:03:d0:9d:92:29:3c:34:46:ec:83:94:
a1:30:ae:4c:63:a7:8d:55:04:82:9a:19:46:42:90:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:67:B2:D2:BA:10:7B:53:81:99:94:9D:3B:61:8C:05:A8:0F:73
X509v3 Authority Key Identifier:
keyid:D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d7:d5:27:aa:41:a1:cd:e0:da:04:15:4a:d3:12:75:2d:52:
21:06:6f:da:55:de:1f:e0:4e:46:6a:f2:fa:f0:27:ba:0e:9d:
81:7f:88:78:f9:50:31:0d:62:2e:7b:cf:9f:70:d1:7d:b5:2c:
2a:3a:6f:a8:cf:71:d9:43:61:53:9b:d8:75:e0:12:13:d1:04:
76:16:0d:91:8c:0d:a7:ed:ca:af:88:6d:9b:9a:58:99:86:ec:
21:e2:05:92:03:f3:1e:77:d7:1f:f5:2c:16:f2:56:f9:7b:74:
b0:02:6b:e6:22:95:50:c2:7c:37:6d:54:00:b8:56:39:4b:7a:
05:de:09:9a:db:42:2b:b3:2f:7a:d0:95:5f:e2:33:b6:9b:04:
5e:de:c6:7b:f8:18:64:31:56:67:2b:cc:86:78:2b:59:be:6b:
a8:31:b7:96:77:f4:53:8f:ac:5e:aa:79:ec:9b:99:c2:ff:05:
62:8d:bc:e6:f0:cd:4c:79:16:f3:3a:8b:8b:e7:ad:eb:ea:a9:
c9:fc:aa:32:df:9a:0a:12:52:ff:30:82:8b:21:0e:24:76:82:
88:92:e8:59:74:05:aa:7c:de:7b:12:ba:ce:08:a8:f5:55:50:
92:df:6d:ad:be:3f:99:bb:72:5b:f2:22:98:98:8f:c7:54:f7:
d6:6a:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:26 2026 by rpki-client