
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json)
Hash identifier: LSkqIMe1h3GCpPqkgmBFpSQ+aKl8VbZ9/H5a1qseCyY=
Subject key identifier: EA:30:F4:7B:D0:82:62:C0:40:E9:9B:54:57:82:8E:04:18:0B:BC:D0
Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2
Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2
Certificate serial: 1262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
Manifest number: 1256
Signing time: Wed 22 Jul 2026 17:13:21 +0000
Manifest this update: Wed 22 Jul 2026 17:13:20 +0000
Manifest next update: Wed 29 Jul 2026 17:13:20 +0000
Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: 6CvTyJIp/99FIBvHCrkGbxTZfjXXZ+87FbFSXz/3Cuw=)
2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: wLzSSsb1W3A2MYP49E/fklCTD0d/JRiMl3Lul9XwiIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl
rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4706 (0x1262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2
Validity
Not Before: Jul 22 17:13:20 2026 GMT
Not After : Jul 29 17:13:20 2026 GMT
Subject: CN=6a60fa31-ffea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:ef:a2:80:ab:60:9f:88:76:13:20:c4:35:
35:59:95:47:2d:2a:23:19:ac:29:90:0e:86:0d:61:
73:6b:4d:a0:a3:f5:19:ee:22:ca:71:76:44:6c:91:
1d:29:0e:e0:0d:c2:d1:5c:1d:72:f5:8f:35:21:5f:
21:94:c5:4b:ac:b5:72:b4:fd:3a:3f:9c:b9:0a:63:
fd:8d:c6:47:8e:dc:2e:a8:50:ea:51:ba:e0:3a:90:
dc:73:b6:f9:26:c5:33:25:23:be:b3:e4:e7:9b:44:
0a:1f:b7:00:9c:98:81:c2:fb:22:78:1d:ec:4e:d5:
f6:c6:a9:11:58:0b:1c:df:57:ff:6f:8e:1c:74:d4:
65:f9:1a:b1:cd:22:11:46:a0:f2:84:47:f8:05:07:
27:7c:6b:91:71:5e:51:9d:df:45:99:b1:b9:bd:91:
8b:91:31:0c:1a:49:93:cd:1c:01:ff:5d:2b:01:55:
28:a9:d6:e0:05:2d:ba:68:a9:a7:da:74:ae:47:f2:
41:64:62:8b:c8:71:a0:d7:06:04:ce:fd:74:79:28:
da:27:e0:0b:28:e8:36:a0:0c:02:74:7f:6d:e5:79:
63:d5:1e:a6:cb:50:63:f0:e6:af:eb:ae:ac:89:a4:
1c:cd:f8:08:0a:81:0c:01:f9:3e:64:3e:bb:1b:8b:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:F4:7B:D0:82:62:C0:40:E9:9B:54:57:82:8E:04:18:0B:BC:D0
X509v3 Authority Key Identifier:
keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:34:c6:9d:8c:10:9e:21:d0:e8:9d:3b:e3:0d:b9:8c:d0:5c:
1b:c1:dc:4e:1d:20:7f:a8:e4:6c:7c:ef:53:c0:54:42:51:00:
cf:0a:ef:62:4a:45:1d:eb:fd:1f:a5:40:13:4d:c5:35:0d:d9:
51:ec:f8:79:5d:74:37:c2:23:fe:cc:87:13:72:b3:fb:04:58:
70:3d:61:8b:68:84:85:af:29:8e:c8:4a:4d:c5:ad:42:29:6a:
de:fc:5d:3f:73:7b:aa:16:ec:52:02:1c:d9:75:5e:93:ca:da:
53:c6:70:3d:3e:99:33:28:15:6f:b4:4a:7a:62:65:d2:d4:a3:
bb:2f:c0:cc:2b:e6:f5:32:bf:1e:f0:8b:92:a4:04:39:d1:dc:
a5:2f:58:4e:da:98:ae:bc:2f:2e:e1:d6:97:67:c7:23:82:80:
1c:89:48:1b:6b:ce:f9:63:70:0f:21:32:e0:c3:5b:6f:60:b9:
61:99:b7:5b:a0:e2:89:bc:41:14:10:93:95:cd:37:5b:6b:ab:
1f:53:1b:86:55:b0:7d:71:90:77:96:b1:b0:89:40:f0:64:56:
51:20:6c:af:5a:b3:59:81:f9:42:1d:c6:28:67:4d:58:53:b9:
d6:7a:45:4c:d2:92:c7:54:74:b8:95:ae:7b:ec:1c:9d:84:d7:
c6:36:59:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy
NDlFMDBDQTIwHhcNMjYwNzIyMTcxMzIwWhcNMjYwNzI5MTcxMzIwWjAYMRYwFAYD
VQQDEw02YTYwZmEzMS1mZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApsjvooCrYJ+IdhMgxDU1WZVHLSojGawpkA6GDWFza02go/UZ7iLKcXZEbJEd
KQ7gDcLRXB1y9Y81IV8hlMVLrLVytP06P5y5CmP9jcZHjtwuqFDqUbrgOpDcc7b5
JsUzJSO+s+Tnm0QKH7cAnJiBwvsieB3sTtX2xqkRWAsc31f/b44cdNRl+RqxzSIR
RqDyhEf4BQcnfGuRcV5Rnd9FmbG5vZGLkTEMGkmTzRwB/10rAVUoqdbgBS26aKmn
2nSuR/JBZGKLyHGg1wYEzv10eSjaJ+ALKOg2oAwCdH9t5Xlj1R6my1Bj8Oav666s
iaQczfgICoEMAfk+ZD67G4tcGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOow9HvQ
gmLAQOmbVFeCjgQYC7zQMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE
QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q
cEY1ekwxZ0RRUFFrbmdES0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiDTGnYwQniHQ6J074w25jNBcG8HcTh0gf6jkbHzvU8BUQlEAzwrvYkpFHev9
H6VAE03FNQ3ZUez4eV10N8Ij/syHE3Kz+wRYcD1hi2iEha8pjshKTcWtQilq3vxd
P3N7qhbsUgIc2XVek8raU8ZwPT6ZMygVb7RKemJl0tSjuy/AzCvm9TK/HvCLkqQE
OdHcpS9YTtqYrrwvLuHWl2fHI4KAHIlIG2vO+WNwDyEy4MNbb2C5YZm3W6DiibxB
FBCTlc03W2urH1MbhlWwfXGQd5axsIlA8GRWUSBsr1qzWYH5Qh3GKGdNWFO51npF
TNKSx1R0uJWue+wcnYTXxjZZJQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:27 2026 by rpki-client