
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json)
Hash identifier: CvHNGvF0VVyzGgv9lTxgNMEgzBDAcXcKKEs/rYIwZHM=
Subject key identifier: 88:C6:D4:73:1C:12:F9:88:7C:23:C5:E5:EB:46:2E:65:EB:D8:FF:C7
Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Certificate serial: 07D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
Manifest number: 07C8
Signing time: Tue 24 Mar 2026 21:07:02 +0000
Manifest this update: Tue 24 Mar 2026 21:07:01 +0000
Manifest next update: Tue 31 Mar 2026 21:07:01 +0000
Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: FSSS4LiBZQ3zudMokqs3KHR5qsv/Q9FebgoxXvwSIxE=)
2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: MIjawd33la/jBdvWj1qHhi7fRFhJrDfr9QRihhf5huE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl
rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Validity
Not Before: Mar 24 21:07:01 2026 GMT
Not After : Mar 31 21:07:01 2026 GMT
Subject: CN=69c2fcf6-a205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:19:c0:02:77:f3:01:f9:8a:fd:91:cd:0f:
96:f3:8b:13:55:c0:f3:87:9f:c7:4f:5f:a6:a9:09:
d2:78:86:1e:6e:1d:b6:0d:65:60:e0:ce:22:00:c3:
87:d1:c9:fe:eb:43:15:82:2b:c6:43:4c:46:b6:ee:
a5:f3:f9:2d:07:c7:ff:f3:7d:db:19:ad:f0:8b:3e:
8f:9b:2f:68:09:6f:82:e2:50:c9:39:d2:c4:b6:6f:
52:b3:4d:62:ff:44:5f:7e:b1:57:ff:7e:ab:68:38:
78:0e:c0:29:71:37:72:87:25:7b:9a:57:c3:0c:d6:
68:b0:7d:a8:71:05:63:b8:69:b9:89:25:e7:56:85:
6e:2b:d4:97:84:1c:6a:03:d2:ef:f9:8e:0e:cc:1e:
08:5d:94:10:90:13:c3:3e:1d:85:5d:a7:00:68:25:
90:9c:62:65:54:83:98:1d:2c:df:10:32:de:d1:a2:
af:00:ee:51:12:de:f8:6e:e9:90:5e:96:b6:bc:f1:
3b:9e:58:39:6c:06:84:67:cc:53:ee:ac:5a:d4:f0:
a2:87:84:34:3c:9c:e5:8a:34:66:40:4e:18:8c:23:
39:ef:7d:8c:fc:95:dc:50:cc:f6:02:58:95:5b:9f:
39:90:38:b6:03:6b:b4:86:12:62:dc:98:ee:54:9b:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C6:D4:73:1C:12:F9:88:7C:23:C5:E5:EB:46:2E:65:EB:D8:FF:C7
X509v3 Authority Key Identifier:
keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:4a:29:1e:79:6c:e8:7d:8a:8e:84:7b:b3:61:49:39:96:22:
e7:fd:df:d3:00:fc:b5:a5:6a:93:28:91:ea:b4:4d:e7:68:fa:
cb:95:0c:91:fa:d5:53:67:e8:c2:67:f6:c4:35:4b:ef:af:f1:
ec:05:8e:ed:66:68:dc:d3:13:f4:3c:89:1a:d8:d8:33:1f:4f:
95:ec:73:90:58:b7:64:33:7b:70:bf:dc:5c:ca:f0:ae:ab:f1:
e2:f1:41:3f:2b:49:e4:95:15:a4:46:c4:47:e9:52:38:72:92:
95:a0:4d:cb:8e:f1:a9:c2:f2:30:ce:b7:43:53:ca:94:b7:a1:
2a:a2:58:0a:c4:87:19:0c:77:21:7d:76:5d:9a:1f:e9:3d:99:
30:ac:a2:2f:fa:19:1c:53:13:49:a5:92:f9:87:8b:d2:3b:a9:
e9:40:74:d8:05:1d:cd:47:92:58:f7:30:d6:71:57:b9:39:ea:
e9:e6:bb:ee:21:45:fe:39:51:9c:bb:8e:2e:0c:f2:23:9c:81:
e1:c5:15:74:03:c4:c4:53:76:45:af:ba:3b:98:d0:e5:20:af:
9b:b1:1f:a1:d8:f7:59:86:6d:7e:60:07:c3:ea:71:09:26:11:
49:41:61:da:c0:16:f3:53:26:bd:61:df:56:56:b7:13:e0:66:
47:66:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:44:56 2026 by rpki-client