
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
File: 1ybobzALJko1PClnPgdxb1RUteI.mft (raw, json)
Hash identifier: cMbmdWYVgil1kBdp6tlFVbNejmtEnP95mn0TJfQeVqQ=
Subject key identifier: 57:C3:FC:7B:70:30:4B:F2:21:88:0C:3A:C7:8F:7C:4F:0B:93:1B:BB
Authority key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Certificate issuer: /CN=A91B4053/serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
Manifest number: CE
Signing time: Thu 23 Jul 2026 08:35:20 +0000
Manifest this update: Thu 23 Jul 2026 08:35:19 +0000
Manifest next update: Thu 30 Jul 2026 08:35:19 +0000
Files and hashes: 1: 1ybobzALJko1PClnPgdxb1RUteI.crl (hash: ggZQJxFsjbTh7rFvVa9g/9aTYmrSFKLTCNgS7onV4Q0=)
2: D28B7DD450E411F081600061C4F9AE02.roa (hash: oi0JC/Dg/qtN4Sq4ydksp3+2DNk0fSKtyYZSAHUSHgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Validity
Not Before: Jul 23 08:35:19 2026 GMT
Not After : Jul 30 08:35:19 2026 GMT
Subject: CN=6a61d248-10ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:b5:dd:bd:ef:47:c9:1f:f1:65:ef:58:8b:
9b:d9:65:2e:a3:d1:34:de:30:ee:e0:ff:8d:bd:a3:
bf:e2:be:29:17:c8:f1:0f:a5:a1:62:62:9f:5c:52:
c3:60:74:2a:0d:53:b3:a4:16:dd:7c:6e:be:3b:23:
9f:d5:24:33:5c:66:89:c1:0c:31:b3:00:e5:3f:a3:
b8:2a:ae:2d:5c:6b:60:a4:75:0e:cb:cf:27:9e:57:
b2:b6:79:47:71:ec:e6:61:f0:5d:9f:12:54:06:65:
92:a7:37:4e:09:81:56:b9:e9:be:a0:79:a1:a8:c3:
59:d1:33:ae:61:9d:be:2d:46:69:ae:5c:59:aa:9c:
48:fd:79:46:e6:3f:58:02:04:c9:ab:31:40:70:ee:
5d:87:f3:1c:25:d6:0a:d4:dd:eb:2a:2d:0d:61:df:
40:bd:cc:1b:2a:5a:ea:3e:0e:d5:a0:dd:7b:02:11:
f1:74:74:7e:c1:66:e0:07:cd:1f:7f:6c:89:67:2c:
70:17:b5:85:26:ca:f1:c4:40:8e:9d:93:00:3e:81:
a9:6d:ea:90:44:e4:81:33:53:84:63:a5:ef:e4:a6:
7b:5c:2d:0e:95:e3:21:6e:81:86:ad:ae:21:93:71:
c5:4a:9f:08:e6:6d:40:85:46:3f:a1:f1:53:d0:ba:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C3:FC:7B:70:30:4B:F2:21:88:0C:3A:C7:8F:7C:4F:0B:93:1B:BB
X509v3 Authority Key Identifier:
keyid:D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:64:35:60:62:be:31:7f:d4:e1:c8:c5:cb:fa:fd:28:9b:cd:
7e:75:f0:b7:22:5f:fc:2e:a6:77:cc:b0:59:22:c0:34:82:31:
54:1f:42:10:eb:1b:2f:36:df:ce:43:b9:27:fc:9f:9c:1f:75:
54:c0:79:91:d1:29:82:17:63:3b:c8:da:21:b0:35:00:47:0e:
9d:b0:80:b3:f9:ff:82:21:b1:08:10:fc:b6:c3:3b:e6:e8:38:
0b:9a:ee:b3:0b:44:17:1d:46:51:29:ef:81:22:be:c8:65:98:
87:ca:8c:d4:1f:8d:1b:77:0c:09:c2:75:0a:b6:32:40:6a:28:
cf:d8:54:7c:89:75:41:7a:66:59:f8:7c:f9:e1:82:1f:78:b9:
53:6c:a1:70:cb:91:3f:e4:dd:0e:64:97:b3:d0:7b:b9:b1:60:
02:b6:4c:dc:d5:a0:1c:db:3d:ed:7d:93:c6:0c:b4:07:af:06:
7f:eb:de:61:1d:70:dd:e0:d5:fd:91:ab:9b:2d:5e:58:94:8b:
f3:4a:86:fb:38:ed:38:c8:e1:b1:22:60:7b:aa:96:d4:dd:d4:
85:ec:eb:09:89:9c:5a:71:51:8e:59:84:17:5b:c7:62:5d:2b:
b3:56:1e:da:a0:3e:36:d1:cd:e7:56:40:55:fe:85:27:4d:fc:
2f:44:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:25:23 2026 by rpki-client