
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json)
Hash identifier: KfypVa1NkFNgR2umhaNlAvTUuQZrJ84XZmuXPNDT7RQ=
Subject key identifier: 40:81:7D:18:CE:C2:76:C5:2F:EB:0D:EB:74:27:0E:12:F1:18:FB:31
Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Certificate serial: 0E45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
Manifest number: 0E2A
Signing time: Wed 22 Jul 2026 18:00:00 +0000
Manifest this update: Wed 22 Jul 2026 17:59:59 +0000
Manifest next update: Wed 29 Jul 2026 17:59:59 +0000
Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: 1fVC2GLCVD4XDRAe6e5DERvT7QYXWzRlHcFidoQIWkk=)
2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: Ohuq5/ilpYlHFnVFw/Xqzd7tdftLWWcaPxQsLzbu1bE=)
3: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: nT2sh7uqTi1U5cwmoFpAbizu4Ra0Y+5JbyS+sH+1hZc=)
4: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: YHt1SbNsyMG4Q62rnhZuMa3T8SKHY5G8WGqZLcUa22M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3653 (0xe45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Validity
Not Before: Jul 22 17:59:59 2026 GMT
Not After : Jul 29 17:59:59 2026 GMT
Subject: CN=6a610520-933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:66:29:43:54:a6:57:d7:1b:14:fe:e2:b9:
c0:8f:ed:9e:39:aa:c2:b1:d5:81:ec:db:e1:b2:40:
e8:0a:bd:ad:b9:f9:44:f6:62:f8:3d:de:7f:a0:1f:
85:32:5a:15:04:44:3a:98:ae:42:a3:51:dd:5a:fd:
0b:e9:54:96:74:cb:ec:73:a8:84:54:6f:ec:d2:41:
4a:01:d2:8b:62:9f:fa:f8:64:6f:21:31:02:e8:2f:
8b:81:a8:1d:5f:35:f6:8b:76:5d:97:4b:d3:69:ad:
aa:8b:0a:51:ef:77:46:78:a0:11:5b:22:0a:76:8e:
5d:82:85:54:ec:eb:f6:3f:34:a0:45:59:2a:31:db:
23:9f:b4:aa:ef:ce:60:0c:85:b0:5e:59:f2:b8:8d:
21:68:3f:41:f5:a7:2c:d4:2d:3b:33:7a:90:f3:83:
8a:32:55:17:25:3b:3d:69:7e:6c:13:7d:53:b5:0f:
78:be:63:5d:a9:ea:12:29:af:25:01:c3:30:be:f4:
d4:dd:bb:ae:a7:1b:37:b6:71:32:fd:ef:d9:0a:2d:
62:c2:53:14:cb:2c:c9:0e:09:8e:50:40:40:d5:6e:
89:dd:a2:97:79:de:cd:d2:17:91:06:94:08:dc:cc:
52:37:81:d6:53:06:ad:54:15:ba:31:20:e0:2c:66:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:7D:18:CE:C2:76:C5:2F:EB:0D:EB:74:27:0E:12:F1:18:FB:31
X509v3 Authority Key Identifier:
keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fc:31:2a:75:15:3a:c2:37:e2:5b:a9:2f:1d:8c:d0:63:99:
96:dc:ea:ed:4c:0a:70:d9:d3:93:e6:66:35:4d:65:43:62:d7:
7f:b2:49:77:2a:3b:01:9b:1a:e5:c3:65:ca:03:e1:e9:e1:d8:
e0:60:40:03:4b:8c:82:28:8b:ae:eb:ae:72:bd:85:01:13:42:
0f:be:00:f4:33:9a:72:b7:59:0a:bb:9c:38:7c:cb:da:ea:06:
d3:3b:cd:d6:99:0d:9d:e3:dc:5b:f0:38:37:38:7d:43:4f:fa:
05:a7:15:31:00:30:a3:a1:f0:6e:b3:ba:37:a9:ed:bc:b5:6e:
8f:02:2c:fd:fa:fe:1f:52:d2:c9:b7:bc:c9:7f:a1:dc:77:58:
98:8f:ba:b6:92:d4:c3:e3:38:b5:7d:c4:60:99:90:4f:99:82:
42:e0:fb:e0:3c:bb:b5:86:cd:0f:b5:c3:b2:8b:9b:a4:76:f6:
b4:57:64:17:36:72:30:3b:d6:7f:36:45:e0:ed:17:af:9b:2c:
44:76:13:66:bc:0c:82:03:e0:e8:05:b9:90:4d:e0:bb:63:46:
9f:4d:36:37:02:79:de:60:97:00:01:f4:2c:6a:a4:43:49:b2:
42:97:25:87:98:e9:09:11:0f:ff:72:28:67:ce:49:37:af:5f:
b6:78:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:08 2026 by rpki-client