
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json)
Hash identifier: poPJul8ZR47zfNQr9QiJUrj2zeIPS6X3pIwTfd76t94=
Subject key identifier: C2:86:2A:10:61:23:6B:96:46:AA:65:35:60:CA:6D:02:62:62:D8:51
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
Manifest number: 022D
Signing time: Thu 23 Jul 2026 03:59:08 +0000
Manifest this update: Thu 23 Jul 2026 03:59:08 +0000
Manifest next update: Thu 30 Jul 2026 03:59:08 +0000
Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: actudoXihK0Dfr7OHITdwGbSj3xgRW40wdbaLlcvjrg=)
2: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=)
3: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=)
4: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Jul 23 03:59:08 2026 GMT
Not After : Jul 30 03:59:08 2026 GMT
Subject: CN=6a61918c-3a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:86:d5:4c:cc:9b:d4:52:fb:4b:ca:b4:b2:
e8:63:61:a0:ca:d0:62:14:a5:48:fe:82:50:ff:60:
3a:bc:f7:91:e2:ae:05:bd:9a:22:64:95:70:94:e2:
b2:19:09:b5:7f:34:62:a2:46:4e:d8:92:e2:85:0f:
6e:7e:fc:9c:40:96:0f:2e:ba:d9:6a:43:c0:d3:b6:
39:e2:5a:73:7a:66:a3:e9:a4:e8:bc:8b:41:95:6f:
61:0e:ad:dd:f9:34:aa:ff:71:be:38:fc:55:86:c0:
0f:0d:34:30:87:35:c4:30:26:06:ca:91:85:15:d8:
20:ff:c3:68:a8:d1:ff:1d:ef:ce:37:f7:6d:e8:3d:
58:24:74:26:6c:0a:dd:c5:68:b8:47:1b:c1:30:cc:
c7:0f:b0:41:fd:2b:e9:27:48:ef:76:d9:1c:1f:1e:
45:0f:26:cd:15:8a:2c:f7:f2:4b:30:37:6f:35:40:
40:75:29:33:1f:bb:14:56:e4:ba:4a:3d:f6:6f:f9:
9a:ac:4d:50:1c:ba:5d:61:ca:2c:5b:f3:a6:9a:0b:
7b:da:39:1f:59:5f:7a:71:5c:07:41:e6:20:24:59:
d4:d7:81:15:24:69:59:80:79:c8:ba:c3:19:c9:a3:
89:02:25:f4:02:ec:e3:79:9d:39:1a:1a:36:00:2a:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:2A:10:61:23:6B:96:46:AA:65:35:60:CA:6D:02:62:62:D8:51
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:af:1b:c0:00:87:0c:d1:e6:df:3f:22:60:ab:0f:2c:62:b7:
d7:1c:15:bd:07:c1:04:6f:82:e7:0b:11:cc:5e:2c:d3:b9:fa:
0a:98:e4:82:5d:4f:c3:fe:57:ee:20:d8:a8:93:c3:ff:4a:66:
f7:7b:71:82:9b:44:b9:55:c3:0e:0b:e9:c4:77:5e:58:15:43:
76:f6:2c:f7:6a:22:0b:6a:7c:5c:1d:ea:d0:fb:9d:ce:25:73:
76:91:34:42:d7:ff:6a:3c:0c:ea:f6:57:ef:dc:b0:50:23:60:
cd:00:68:e5:fc:a8:69:f0:b0:a9:34:8e:32:d0:7b:ec:df:ca:
d1:98:1c:97:9b:c4:da:67:5b:9b:ef:7b:97:f2:ec:34:e4:8d:
39:0c:a8:34:fb:ed:49:bb:f9:c8:a9:8f:b9:e7:ff:a4:22:eb:
13:98:67:6e:b5:f6:57:00:89:fa:fd:49:7d:5f:32:ab:54:c4:
66:d5:b8:b5:ad:cb:10:7f:03:88:5f:76:ac:cd:67:e2:a0:a8:
9b:da:a1:34:f2:ba:94:5b:11:4f:31:f3:df:2a:4c:20:d9:27:
88:94:c5:d6:1f:59:40:e3:0a:f0:76:e3:18:84:c9:a8:30:bb:
83:c7:e4:c8:28:8e:ad:69:b3:56:4c:f8:16:c1:30:d1:24:02:
ca:b2:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:32 2026 by rpki-client