
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json)
Hash identifier: juTE884fBHHwJSVR9mUlq4FAyubv+wi1WmJbYIp2y4A=
Subject key identifier: B8:51:E0:AD:C6:DC:5A:2C:8E:48:B2:4B:9B:4A:43:0B:A9:A2:CF:83
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial: 1237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
Manifest number: 1207
Signing time: Tue 12 May 2026 17:10:27 +0000
Manifest this update: Tue 12 May 2026 17:10:27 +0000
Manifest next update: Tue 19 May 2026 17:10:27 +0000
Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: UpUCq68ARJW/S7OSkhnVuvryqYsUCFPqhESNfiHvB1U=)
2: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: pwjjrONYryQZDPYL16AJ0YNOVq8g4YjDqBcgaxhvzro=)
3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: dUhydAjgKVF+dvbmFcmWGDtSlwxZL+Vj3jLH5MNf/As=)
4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: EHoRjwAgONgjkkJEwCnkFsQdVYjWFMTXWBDCSKhZ4nU=)
5: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: VRl3r6QA/RiXbXiIjyAheH1mdihJQ/86RScyJbRxe14=)
6: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: XX8/d75yXVIyhm6RsU1UGXYkE9gnpBtpyR447Qb5no4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4663 (0x1237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Validity
Not Before: May 12 17:10:27 2026 GMT
Not After : May 19 17:10:27 2026 GMT
Subject: CN=6a035f03-3a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:73:7c:a0:07:ad:d3:86:e3:61:1c:41:50:
52:ed:2f:06:38:c3:4f:36:96:01:51:88:f6:93:8e:
d9:4d:99:68:f1:19:91:c0:51:54:52:0a:bb:7b:5e:
19:7d:c8:db:b8:cb:74:2c:71:48:57:19:7c:f9:3e:
f0:91:0a:dd:03:03:a0:9f:8c:12:8e:8c:4a:85:45:
a8:c9:7e:05:b7:1d:86:db:90:cb:2b:9e:af:51:7d:
7f:c5:05:7f:05:8b:39:9d:7b:c9:a9:5c:f6:a8:46:
ff:47:8e:2a:c6:29:78:f1:9a:50:0a:73:38:fc:d7:
5d:7e:f3:03:1a:02:9c:2c:64:33:cc:21:df:9f:65:
83:25:77:4e:27:3a:b1:51:c4:e4:ae:f7:57:2d:9f:
2f:09:5e:6d:72:c0:e9:a8:ce:c3:0f:bd:5d:13:3a:
27:28:e1:b0:96:89:8a:74:62:e5:08:1a:43:2d:51:
15:06:ea:62:33:68:18:81:62:cd:eb:b5:8f:07:10:
c7:7e:19:cd:61:57:7b:7b:78:ae:1c:2a:f6:e6:e4:
96:f3:9d:ce:d9:80:cb:80:26:bf:ed:55:2c:c1:f2:
0a:7e:7f:e2:61:3f:7d:8d:55:66:0c:9d:b3:ee:a6:
4e:d3:a9:cb:c9:31:73:c2:59:03:a8:71:51:de:cd:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:E0:AD:C6:DC:5A:2C:8E:48:B2:4B:9B:4A:43:0B:A9:A2:CF:83
X509v3 Authority Key Identifier:
keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fd:71:b4:1e:e2:40:83:1b:66:d1:db:71:74:eb:9c:bd:22:
4a:be:bc:4f:eb:b2:24:a7:5c:ff:7e:55:8e:15:7f:e8:10:4d:
37:c9:bc:7f:fc:87:35:9d:da:ba:93:fe:e6:88:f7:97:ed:37:
44:b8:03:17:c3:51:f2:de:d4:fa:bb:2b:7c:5d:c2:1c:f5:18:
1d:c4:9b:b2:46:ed:de:09:46:a7:f8:2e:c3:6c:d7:a5:19:c7:
40:ad:9a:ab:4f:ce:ce:6a:8b:1a:9a:6e:2c:cc:5a:75:2e:b4:
80:f1:82:fa:17:35:9b:b8:b0:7c:8d:3b:0b:10:a3:5e:1f:98:
99:77:08:43:88:20:5d:c8:b5:e7:22:e9:a3:8c:42:ed:59:4b:
f5:75:fc:22:c2:fb:bd:b4:7c:c9:55:3a:5f:c0:0e:e7:37:be:
cb:64:bb:29:99:80:ed:17:14:6d:71:88:0f:72:ac:7f:be:48:
50:c3:bf:22:ef:c2:57:3e:86:1f:02:29:40:7f:ed:ec:cc:5b:
7b:c9:d8:11:b9:c9:d8:86:76:1f:73:7f:ab:31:42:b0:65:66:
bb:97:9e:57:28:31:4d:e5:4d:b8:68:cc:bb:b7:b9:75:1e:8d:
96:57:6a:4d:f4:85:97:3f:53:dc:9a:94:3c:bc:20:08:c9:df:
d4:ac:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:54:25 2026 by rpki-client