
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
File: YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json)
Hash identifier: KY6i5P8dlSEI1hySctCWk4/SvVZl2UlV1YMX+3J7q4A=
Subject key identifier: 03:E4:CE:3A:55:88:3E:60:16:A7:3C:56:46:01:60:E5:22:17:C3:B0
Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
Certificate issuer: /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
Manifest number: 0174
Signing time: Thu 23 Jul 2026 06:13:57 +0000
Manifest this update: Thu 23 Jul 2026 06:13:56 +0000
Manifest next update: Thu 30 Jul 2026 06:13:56 +0000
Files and hashes: 1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: 9bW9EUjbVZg8O1BQx+d16/8s+pz89MbZe0fyMd8bsYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD1F9, serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Validity
Not Before: Jul 23 06:13:56 2026 GMT
Not After : Jul 30 06:13:56 2026 GMT
Subject: CN=6a61b125-b71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:8b:d5:a5:7b:37:80:cc:30:2a:1d:de:12:
3c:32:0e:dd:c1:4b:00:ee:c9:04:15:98:15:e8:e3:
da:e7:fe:06:4c:b4:cf:22:28:21:2e:f3:78:a6:ca:
d1:48:56:f8:d3:d2:83:01:18:a2:b2:6e:60:8f:90:
50:c4:3e:76:02:ba:50:d4:38:df:1e:6d:43:17:9d:
c5:26:74:b4:37:e7:74:82:78:02:3b:cd:1a:6d:b8:
e8:59:2c:51:4c:46:81:11:c8:8a:7a:19:1e:b0:07:
93:12:41:51:ea:b4:f9:ff:ca:38:fb:c8:d8:45:fe:
5c:ff:a3:8b:e5:2d:f0:01:ea:fb:b3:32:95:0b:8d:
76:73:d2:af:f8:17:c3:01:26:18:dd:a1:35:5e:ec:
a8:72:35:94:32:b0:f6:15:a1:13:85:a1:15:43:e1:
56:27:85:19:ed:09:12:c7:15:7a:61:d5:e6:e2:07:
47:b4:f9:56:04:69:24:51:b3:15:8a:f0:d6:f6:3a:
5d:17:84:2d:54:0a:1b:a8:fb:d2:25:10:a5:dc:a5:
14:86:37:6c:5b:9d:ce:bd:61:ea:e7:d7:30:c4:71:
71:da:e9:bb:1c:49:38:d5:b8:23:a8:9a:c5:a9:6a:
02:91:e2:0a:59:1c:bf:47:26:5f:e9:4e:ac:7e:83:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E4:CE:3A:55:88:3E:60:16:A7:3C:56:46:01:60:E5:22:17:C3:B0
X509v3 Authority Key Identifier:
keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:76:37:00:24:4d:69:f5:77:74:75:8d:60:e6:cb:53:83:29:
6b:e3:85:41:21:18:de:84:7b:ca:a9:82:ff:92:e4:ff:52:fa:
f9:12:96:07:07:79:e2:d9:1d:b7:79:5b:6e:a1:ac:40:66:b1:
ff:55:7f:f5:d1:7c:a9:f0:8a:1e:ff:f2:d2:53:42:e3:b6:7b:
bf:15:60:c1:a4:48:9e:1c:72:a2:28:a6:9b:4f:c1:ed:24:de:
a1:06:46:94:f3:04:16:ac:b1:13:2d:d4:20:b5:d7:74:18:f3:
85:8d:77:ea:8f:01:ec:3c:11:27:bc:ff:d3:cb:ee:03:18:39:
28:07:c1:2a:91:cf:97:81:01:d1:c4:44:e3:2f:b7:df:29:1b:
fc:01:7d:24:c9:6d:1a:2f:2b:67:bd:40:9b:f7:27:28:8e:4d:
4c:3f:74:e9:c4:01:a0:92:9a:69:d9:ad:94:34:f6:36:80:12:
58:9d:85:6d:21:c2:21:a5:4f:1b:dc:19:5d:50:6a:d4:75:2a:
4b:23:84:ce:12:e0:fc:4f:5d:ef:f9:0b:9f:47:42:1b:1e:f2:
6c:86:ab:25:47:5d:05:ec:90:2a:86:df:8f:db:b3:aa:7d:cb:
cb:e8:74:a3:75:85:5d:c1:ba:55:35:bd:27:26:75:39:9b:40:
13:75:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:29 2026 by rpki-client