
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
File: kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft (raw, json)
Hash identifier: jycN6LTGfRfc76PoWEHdbtY8cBRrIXM0QiaU1jhz4Gg=
Subject key identifier: 7A:01:AB:21:3D:CB:A9:9F:49:65:5A:50:6E:48:5E:BF:65:FF:90:CC
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Certificate issuer: /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
Manifest number: 124C
Signing time: Wed 22 Jul 2026 17:15:25 +0000
Manifest this update: Wed 22 Jul 2026 17:15:25 +0000
Manifest next update: Wed 29 Jul 2026 17:15:25 +0000
Files and hashes: 1: kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl (hash: 3tfrnFjwK2W+iYQ+SQrwt5nURyM1ZCjtafSP0yP/7aY=)
2: 59ACBA1E5B5011F1A484689580EE528E.roa (hash: zSFiu1yhrWQYfzXu7XQ3kTYOr9VS9WdRx3KYSDFhSHI=)
3: 5ACD46A25B5011F1A484689580EE528E.roa (hash: /3nrgcWXZ56O1J79Bt7Rp4QcJq7XbMY/jy1oMPLgjcM=)
4: 59142EC05B5011F1A484689580EE528E.roa (hash: /QO8wNozJq4m8L+0sf+XY52fc/jZly2rqPjfRvQ5K9w=)
5: 5A3D22165B5011F1A484689580EE528E.roa (hash: e03XnEPO3o2zr+89RCtKmVF1UA9g/w/QMsdb9CferY4=)
6: 58722CCE5B5011F1A484689580EE528E.roa (hash: ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Validity
Not Before: Jul 22 17:15:25 2026 GMT
Not After : Jul 29 17:15:25 2026 GMT
Subject: CN=6a60faad-0968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:67:0e:2a:c4:eb:5c:8d:de:d0:f8:06:5d:
b1:66:93:43:53:12:f0:c2:68:c2:85:cf:b1:14:df:
5f:15:c7:c9:7f:29:45:bf:95:bd:fc:66:a3:87:c8:
38:dd:b2:28:58:11:30:ab:26:88:ac:c1:46:b5:82:
1a:98:bd:69:e8:63:b6:ac:ac:98:e6:2c:ee:03:42:
41:83:2f:dd:b6:6c:d2:40:a2:6c:e7:86:be:c1:1c:
ea:8a:80:23:27:27:02:6f:21:c8:24:6e:ea:72:77:
a2:88:85:3c:84:5d:3f:2e:67:0b:80:10:68:9c:c7:
bc:aa:85:12:2d:a1:f2:e9:46:ec:9a:67:b7:2d:2b:
0a:21:38:31:b1:0c:15:70:c6:35:60:67:7c:a7:dd:
39:41:e8:68:25:f4:c8:18:7f:42:e7:72:3c:21:24:
cc:da:c4:fe:8f:d5:72:51:e9:f0:52:90:f0:5f:fa:
5c:52:b9:ab:ba:80:c8:c4:6e:ff:74:90:84:02:61:
bb:8f:1a:f4:07:ac:c5:f4:a0:7c:1d:62:3f:db:56:
46:78:60:a7:4a:40:9d:cd:4f:30:c6:4e:e1:74:1e:
c5:dc:76:cc:b4:0a:ad:83:eb:d9:1c:f8:41:b9:c2:
e2:0d:39:0f:0f:e5:67:df:4e:cf:90:bd:19:17:80:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:01:AB:21:3D:CB:A9:9F:49:65:5A:50:6E:48:5E:BF:65:FF:90:CC
X509v3 Authority Key Identifier:
keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:a8:72:e9:ff:71:c8:3c:55:82:72:01:d8:fd:55:c1:e3:e5:
4b:b4:02:14:57:72:a8:56:f0:2a:ff:15:74:7c:ba:11:b8:c3:
9b:f0:3a:60:7c:7d:e7:79:91:15:13:09:9e:91:76:a7:ca:ca:
8e:6e:03:2a:19:fd:50:77:14:30:88:3e:91:b4:32:43:9b:7c:
fd:b2:86:e7:9c:34:50:ef:45:29:f2:53:05:53:98:88:78:f9:
28:c7:25:c8:1b:e8:27:42:72:05:7f:f5:ad:71:79:4e:41:09:
e2:0e:da:b6:7e:90:70:f5:15:1d:54:84:15:39:07:52:6a:31:
40:6f:a1:e6:bf:8a:fa:06:ac:69:5f:a0:4c:ca:66:02:89:c2:
7b:95:dc:14:0a:ce:92:83:b4:aa:51:fd:a9:c7:a3:46:eb:6a:
e2:9a:bc:3e:a5:e4:02:ef:3b:1c:ce:50:b4:4d:95:95:49:43:
fc:60:49:13:e9:79:fb:f0:3c:95:5b:ee:4c:91:c2:c0:c2:23:
5d:b6:28:57:76:50:84:79:58:91:00:a0:90:be:ca:ae:c3:16:
0f:1e:24:51:36:88:ea:89:ea:0c:16:c0:b4:01:cb:cc:aa:f1:
79:33:ee:8d:dc:30:ae:e6:eb:95:96:48:37:b2:3f:1d:fb:2c:
51:ae:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:37 2026 by rpki-client