
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json)
Hash identifier: AxUxunxCFEnjpmweuhpNi4CCgqqqiKHOl1X2hD76Sxo=
Subject key identifier: 8D:F1:B4:07:7A:08:65:FA:3C:B8:E6:43:3F:49:32:A0:97:A2:77:BA
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial: 26D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
Manifest number: 26B5
Signing time: Tue 12 May 2026 15:41:41 +0000
Manifest this update: Tue 12 May 2026 15:41:41 +0000
Manifest next update: Tue 19 May 2026 15:41:41 +0000
Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: Lv47bd3AesEn6A79K2A4WmyAlb/MyjFAhoifFht3NJc=)
2: FBD68828FCBF11F0A4D02CBC666F56BC.roa (hash: SxJM2aFKgBGF6I9rZ7S9/EziiSoyCz/xteiPP/MBsS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9936 (0x26d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Validity
Not Before: May 12 15:41:41 2026 GMT
Not After : May 19 15:41:41 2026 GMT
Subject: CN=6a034a35-8167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:99:b0:ae:31:47:48:5c:7e:a6:2c:30:e5:
38:b5:e6:da:e9:0e:c4:9d:4e:74:dc:c2:7a:36:8a:
fd:b6:52:5b:ac:b4:b4:15:7e:37:ad:6d:20:ce:b3:
ee:8c:8d:7c:06:e8:82:9a:7c:bf:99:f7:6f:69:4f:
b1:f2:57:76:9f:94:d7:a7:d0:0d:4c:ef:f7:3c:d7:
c8:0a:41:c7:9f:bb:a3:7c:8a:04:70:a2:99:31:ae:
56:05:26:90:89:df:d0:46:7e:fc:2b:79:44:e0:b2:
ea:da:7c:9a:7b:04:6f:67:67:b2:f9:7b:68:4a:52:
06:50:94:5b:cd:80:ac:8a:5f:e0:cd:05:fe:24:f3:
29:dd:24:3b:49:fb:e0:73:ea:76:26:50:00:40:f4:
14:ac:1d:85:e9:08:c1:34:a9:58:0a:63:8d:0c:ee:
d1:54:5f:e2:b5:f1:e9:c3:a5:fc:86:9e:44:d6:5d:
19:7d:36:5d:b4:95:c2:89:06:42:35:0d:c9:4d:37:
5c:12:5e:57:61:fd:63:0a:56:a9:f4:40:93:24:0b:
e7:0d:39:ac:89:af:27:f2:94:28:7b:44:e3:90:c2:
f8:e0:20:cd:30:a1:2d:4e:02:20:03:1a:a9:38:93:
f9:ff:37:4b:98:8b:a6:d9:a7:b5:1b:51:d5:72:5d:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F1:B4:07:7A:08:65:FA:3C:B8:E6:43:3F:49:32:A0:97:A2:77:BA
X509v3 Authority Key Identifier:
keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:fb:8f:a9:d6:02:6f:56:a3:5c:fe:0e:cf:19:6f:2c:b1:bd:
dc:95:02:24:32:34:07:a1:a6:e2:fb:46:62:32:17:c9:55:43:
38:df:35:7e:27:c6:40:7d:5c:60:62:12:d3:3c:cc:7e:0c:fa:
43:cb:47:2d:ce:c2:d2:5f:ea:5d:07:97:6e:97:ae:19:c5:22:
dd:9f:6d:20:8b:83:e8:f2:ec:f0:3a:8b:5f:19:64:bd:86:84:
63:a2:2b:94:15:64:a0:67:ab:84:0c:32:dd:dc:ce:2b:93:c0:
fe:ea:27:f9:94:30:c0:9d:11:dd:a7:0e:c8:a0:cf:c9:09:ab:
4b:97:fe:cd:7b:a0:7d:ca:a0:52:2f:81:52:74:29:55:c1:94:
ee:20:f4:d9:f3:8c:2f:ab:0f:63:bc:c2:04:ca:e3:ba:c2:66:
c9:04:05:2d:10:07:f5:e2:8d:23:c4:b0:5e:bf:7f:69:1a:b3:
a6:25:4d:32:fd:dd:75:d4:a1:16:e5:da:9b:ef:54:5e:91:2b:
75:a3:d8:6e:24:1f:6b:16:d8:9a:42:22:02:57:56:83:b0:7c:
09:ca:dc:fd:bc:fe:91:e6:b2:e0:7f:04:db:4c:98:1a:77:c5:
2b:82:68:42:24:11:9a:1e:6c:42:3c:18:31:78:c3:74:80:6a:
40:f6:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:04:26 2026 by rpki-client