
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json)
Hash identifier: oGN0ZLFPOX0n8VUvQkVfStX/dMI6IM69rFJGfAdEgEA=
Subject key identifier: AF:90:AE:F9:6C:4E:96:15:A3:4A:49:D6:7F:01:2E:BB:54:48:D3:6B
Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
Manifest number: 01D1
Signing time: Wed 13 May 2026 03:42:27 +0000
Manifest this update: Wed 13 May 2026 03:42:26 +0000
Manifest next update: Wed 20 May 2026 03:42:26 +0000
Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: x5QHcEpn+DVWhH7qOviHKffOnlV6+CYXODW/vrGyn/0=)
2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: PkkKjxmP3oqdz8rOsnvlI4lixs/LLzNeT38IVCT5f2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl
rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Validity
Not Before: May 13 03:42:26 2026 GMT
Not After : May 20 03:42:26 2026 GMT
Subject: CN=6a03f323-cef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:9b:0f:5b:c0:bb:6d:37:86:ea:28:12:14:
28:6d:e0:52:53:ed:d2:ed:c9:d2:cd:da:3b:67:2e:
89:0c:54:ec:a9:c5:0a:c8:e1:bd:69:11:37:3b:70:
ca:2f:5c:b5:cd:ea:f4:b1:e0:11:21:8c:b9:10:8f:
15:03:3e:df:e9:72:b5:af:1e:4a:00:04:53:14:16:
3a:26:f6:7f:cf:f4:a5:8c:66:ae:63:6c:28:26:ab:
76:d0:1c:41:fa:a5:cb:0b:f7:75:d0:c4:80:0c:c4:
2a:17:1e:d9:2b:7a:46:00:87:3a:d3:97:bd:71:3b:
dd:d8:eb:77:e1:2a:5b:a4:7a:d6:81:90:ce:e5:f0:
48:6a:bb:c0:1c:79:7c:32:c4:dd:8c:9f:23:74:bd:
c4:3f:86:3d:5a:1f:ba:23:42:94:cf:00:6b:d2:ac:
16:e9:46:eb:25:0f:a0:1c:80:d5:24:17:fc:04:83:
fc:97:f6:26:33:42:50:98:02:22:ef:4d:b1:59:ec:
21:9c:30:21:1e:1e:ea:08:c7:43:df:1d:50:64:34:
da:60:4f:17:e5:d4:29:d1:0b:6c:a4:11:b0:c9:ad:
56:4a:95:28:05:e9:69:ed:ef:c2:20:6e:4e:31:b3:
25:6a:99:b2:ef:3f:2e:fc:0c:1c:fc:0e:2c:aa:ed:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:90:AE:F9:6C:4E:96:15:A3:4A:49:D6:7F:01:2E:BB:54:48:D3:6B
X509v3 Authority Key Identifier:
keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bb:a4:08:6e:49:23:c9:36:42:fa:a9:2f:bb:04:4f:d9:0e:
6a:34:61:c3:f5:bf:10:55:ba:a2:08:b2:bf:34:70:90:ee:96:
fa:1a:f0:3a:60:ec:1c:cb:c8:dc:0b:bd:12:e0:25:4e:01:e1:
33:19:7f:80:9f:43:df:da:35:db:0c:88:52:67:37:c2:0c:e0:
a1:3d:0e:3e:c4:6f:58:27:a2:90:e2:b8:ce:49:b3:e1:c7:bc:
0f:ac:39:bb:74:14:3e:30:9d:32:73:da:77:4c:d9:29:80:52:
0a:25:45:5f:17:69:92:20:60:b3:19:c1:0e:e5:cf:eb:e7:db:
99:07:6f:37:77:78:57:f6:8e:64:f5:0c:d2:c0:87:b5:59:58:
b5:a7:fc:74:b6:8d:e1:6b:39:4d:7e:e5:64:d2:40:61:50:59:
94:e3:86:ee:d1:99:54:c2:7a:54:ee:1a:fc:70:8b:d2:f5:9b:
26:38:e5:b1:58:4f:88:30:1f:d1:0b:65:98:a8:d5:37:ce:a7:
14:5b:6e:fe:66:33:36:8f:ed:c4:fc:73:c4:95:ac:64:3c:2a:
47:db:56:d7:b5:a4:b1:54:63:06:03:e8:f0:64:ea:8d:62:24:
0a:61:88:16:5e:cf:0e:4e:1b:c0:a8:47:aa:f2:aa:57:d6:19:
cc:1f:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:03 2026 by rpki-client