
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
File: 1ybobzALJko1PClnPgdxb1RUteI.mft (raw, json)
Hash identifier: trB3OnCZOZxEfl/tKn31tp9IoC+GF0xoErtpjK5+Pg4=
Subject key identifier: 37:2F:CB:49:FA:94:76:E5:9A:4A:87:46:D7:4B:26:CC:23:A6:B5:F5
Authority key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Certificate issuer: /CN=A91B4053/serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
Manifest number: 90
Signing time: Wed 25 Mar 2026 06:44:06 +0000
Manifest this update: Wed 25 Mar 2026 06:44:06 +0000
Manifest next update: Wed 01 Apr 2026 06:44:06 +0000
Files and hashes: 1: 1ybobzALJko1PClnPgdxb1RUteI.crl (hash: OXbZsPlLfNStOaWsYN324/lWz5LUHpvQrBcsfL84Fqc=)
2: D28B7DD450E411F081600061C4F9AE02.roa (hash: Y6rYOMG7RxOkx0Rcd3xNkDAcaCpb3aXvFYNyebOyITc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Validity
Not Before: Mar 25 06:44:06 2026 GMT
Not After : Apr 1 06:44:06 2026 GMT
Subject: CN=69c38436-03f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:34:22:e9:f5:fa:97:4a:60:97:b7:7b:55:
99:01:68:d4:59:93:8c:bf:d7:51:f4:ac:02:96:c3:
1a:87:a5:e9:82:3d:65:c2:98:db:0f:e7:10:02:f0:
7d:e5:ea:3f:3e:5c:bb:ef:14:9e:b5:66:20:23:21:
2b:b6:3c:60:5a:bb:14:e2:97:11:48:69:2d:d2:86:
a9:95:f1:db:53:cd:44:fb:bf:04:4c:2c:f8:5e:1a:
85:65:0c:53:2a:2d:8c:eb:fb:ea:61:a9:40:81:09:
60:51:d0:13:33:a4:6b:5b:eb:a2:3d:50:b4:74:03:
4b:71:ba:aa:11:14:d3:5c:37:25:c9:51:99:72:d6:
48:24:bd:4d:d9:09:ca:50:05:8f:d9:27:48:fe:59:
f8:6b:0d:bc:e6:31:96:14:2d:9f:7e:fa:90:14:31:
65:fa:db:66:07:98:a8:38:f7:ce:1f:0f:3b:82:9b:
70:ef:76:06:0f:63:66:ab:7b:82:35:57:0b:7a:66:
c1:c3:af:8f:cb:e3:cd:9d:82:cd:aa:5f:33:a4:6e:
b0:d9:97:db:d0:c1:cc:38:36:bb:f8:db:37:40:cf:
fc:b2:b1:d7:f5:df:71:df:11:fd:d5:6d:b8:34:aa:
b4:1a:8d:16:4a:63:d6:29:85:fa:47:a2:52:90:a1:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2F:CB:49:FA:94:76:E5:9A:4A:87:46:D7:4B:26:CC:23:A6:B5:F5
X509v3 Authority Key Identifier:
keyid:D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:1e:41:ef:cd:f6:ba:09:d8:ed:20:b8:79:bc:ca:66:f3:4f:
8c:68:0b:d7:75:fb:45:f2:15:3a:bd:57:40:39:03:7f:d5:59:
80:61:19:7c:a1:89:3c:29:62:de:15:01:20:ae:95:da:24:85:
d8:d2:72:0e:1d:f3:38:c2:93:56:02:d3:32:31:86:b7:71:0b:
9c:00:8f:37:4d:ad:f1:c3:69:7f:f6:10:4d:b9:21:0e:91:7c:
96:f8:45:d0:b0:31:01:a9:fb:07:cf:4d:89:1b:dd:75:27:33:
3f:0e:40:74:5a:79:4e:07:3e:1c:74:f4:9a:da:42:3c:23:de:
b5:e0:4f:a0:f5:92:d4:e5:d5:19:80:c9:35:66:3c:d0:7c:d9:
17:4c:11:4b:67:c4:0d:d5:36:ce:b1:b5:5e:52:f0:ff:27:f2:
21:3c:31:82:cc:a1:c9:4f:cf:b9:1a:e2:ea:e9:1f:c1:19:b3:
8c:c1:60:9e:a5:d1:90:d9:8e:19:d9:be:cf:e3:2d:2e:f4:b6:
c7:21:62:15:63:10:bb:95:81:e9:1c:a4:46:f5:19:da:ad:41:
35:b4:5f:46:d4:95:24:8e:7a:04:19:ff:f1:15:44:83:cb:79:
37:79:41:d3:40:75:0e:65:cb:9d:09:3b:24:71:e5:6d:31:cf:
c2:37:ad:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:00 2026 by rpki-client