
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
File: vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json)
Hash identifier: YBl4D8y/mXk8BsxjQU2qYsDL35T/nmoVjlqQua58eYU=
Subject key identifier: D1:19:4F:3D:78:0A:DF:D9:63:4C:41:CC:91:FB:87:8F:27:6D:60:63
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
Manifest number: 65
Signing time: Mon 11 May 2026 08:07:50 +0000
Manifest this update: Mon 11 May 2026 08:07:49 +0000
Manifest next update: Mon 18 May 2026 08:07:49 +0000
Files and hashes: 1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: 4qTVk/E3FU8uGutGevmNnWXVwiqXxZsS9Jas+LYNCvg=)
2: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: 1fKhxfq/TrlnYFDoICW1zCAYtSl3cbSlKcSl1u+qus8=)
3: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: ZuP0uWcegjrbhw4CUiK7NSueNS7Vvex1xTz8Rpwula0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Validity
Not Before: May 11 08:07:49 2026 GMT
Not After : May 18 08:07:49 2026 GMT
Subject: CN=6a018e56-0a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:e7:cb:31:04:7e:a1:b1:ab:b2:82:cc:0e:
4f:8f:69:a5:94:36:aa:6b:30:11:16:48:f7:01:1c:
29:80:7a:47:f2:81:80:de:9d:fb:eb:95:4a:99:77:
dc:76:1f:5a:ec:b2:74:46:68:51:3c:de:65:eb:12:
49:a8:43:12:6d:62:0a:47:c3:2a:ad:58:cc:fc:4d:
b9:88:a0:5b:31:64:b9:56:c3:aa:e2:12:24:0d:30:
04:88:e6:49:3b:b7:8a:86:6e:eb:54:bf:1e:9b:a4:
0d:fe:6b:fb:04:bb:5f:94:68:d3:c3:6a:27:61:ab:
14:08:3a:88:e9:8d:8b:1d:b5:87:a6:5a:e5:82:85:
36:08:b2:5a:35:98:05:f9:98:8f:bc:ea:48:15:8b:
1d:bb:79:09:fe:14:81:04:a6:cb:2f:6d:b7:ec:f4:
82:2c:f5:ab:a8:0d:9c:ad:3c:c0:e9:7a:d8:10:6a:
c2:cd:bb:fe:6b:08:42:a4:15:df:53:f6:ae:42:2a:
b0:2f:ed:3c:a2:36:2e:73:ef:e7:e2:da:e1:4d:6e:
b6:9c:e1:76:81:e0:cf:44:8b:94:81:93:9f:6c:d1:
13:68:fc:49:de:85:9f:b4:4d:7a:60:17:c5:41:8d:
f6:2c:b7:7c:fb:a9:41:a2:12:e7:05:ec:21:b7:ac:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:19:4F:3D:78:0A:DF:D9:63:4C:41:CC:91:FB:87:8F:27:6D:60:63
X509v3 Authority Key Identifier:
keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3a:7c:4d:21:bd:25:e6:6b:d4:68:93:c8:d0:58:9f:41:98:
d0:a2:ba:ef:9d:60:c3:7a:0f:04:2f:9e:88:bb:db:b3:91:cc:
7d:54:4d:22:f9:0e:e6:66:0a:35:fd:6b:71:a2:f4:0b:68:93:
9b:bd:5a:f2:c0:c6:3c:c9:1e:98:1a:ba:94:40:5b:c0:99:06:
dc:61:6f:cd:92:7c:1c:90:45:49:84:fd:30:83:f8:92:06:03:
f7:e9:6e:06:59:17:d6:13:89:e5:46:c8:1d:83:23:6a:3f:c6:
be:34:7b:53:9a:1f:3f:7c:1d:98:92:79:1f:b3:5a:3c:57:17:
81:a9:ab:dc:dd:23:a3:bb:03:36:b7:ee:df:70:d9:e0:bd:de:
e1:06:93:a6:31:19:12:e0:40:24:0f:28:6e:12:56:d5:5e:30:
db:e7:7d:aa:10:4b:1e:b2:05:13:00:0c:35:60:52:d3:97:a8:
88:af:17:07:54:7f:1f:b8:47:61:74:29:e5:d3:10:55:ac:1f:
cb:3b:b1:00:ad:ba:9c:5c:b7:15:77:e0:87:ad:83:8b:db:72:
aa:30:31:94:e9:c4:32:72:26:26:6d:34:fb:e8:6f:e5:80:9e:
80:5f:6b:a3:38:9c:25:3b:28:33:52:d3:03:32:c7:f6:0e:a3:
be:bf:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:02 2026 by rpki-client