
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json)
Hash identifier: dHfFIRNK91FL4baNxKyY6cCfJ9oT0qZKcfrWfc3i+pU=
Subject key identifier: B5:06:CF:1E:9B:F7:8B:CF:02:22:DA:2E:4E:98:22:4E:B3:54:ED:29
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
Manifest number: 84
Signing time: Mon 11 May 2026 07:51:48 +0000
Manifest this update: Mon 11 May 2026 07:51:47 +0000
Manifest next update: Mon 18 May 2026 07:51:47 +0000
Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: NJe/1FgK0GWTIvF/o3ZyY7ejFPfXkO2VGhnM5q8+vyk=)
2: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: Cadr/xUb1+0gVtL0k3xW6zkBh+JLJ5ZTxdWq64WB59k=)
3: 56ACADFE47C011F1B54DF0A9AE833773.roa (hash: vxjWyQ9R73CYTlS7zLuzmK55YQslMUO/l+FMKzf2+xM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Validity
Not Before: May 11 07:51:47 2026 GMT
Not After : May 18 07:51:47 2026 GMT
Subject: CN=6a018a93-969c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:3b:fb:b0:27:ab:1a:bd:36:07:11:b4:3d:
8e:fc:3d:63:8d:c3:72:f4:fa:b5:1e:ea:54:9a:f8:
91:90:2f:65:ef:9b:8b:7f:aa:af:91:a2:3c:77:b3:
97:02:6f:2b:5a:97:53:97:2f:0a:ef:69:df:b8:0a:
cd:4e:0d:92:63:9d:55:28:dd:67:ed:b7:d4:28:8b:
14:af:44:01:19:34:8f:9f:b9:4f:6b:ad:ce:50:c4:
86:e7:9c:0c:2e:88:8e:3f:5f:ee:2a:e2:dd:81:28:
ae:48:fb:bf:03:4f:00:d2:8e:09:9c:39:b6:2a:b9:
71:f3:2c:3c:56:58:d8:2e:f4:15:77:c8:0c:b3:61:
29:53:24:05:f8:03:5d:92:0d:ef:7b:24:51:50:5e:
b2:1a:db:4c:81:c2:57:05:7e:6c:61:5d:1f:d8:5a:
a0:2d:39:11:8d:ac:09:3b:ae:6a:60:42:65:f2:c6:
dc:49:65:cc:a5:14:57:58:11:b1:38:8a:c6:ec:47:
42:5c:8f:dc:0e:11:74:60:3a:6d:46:cd:df:82:80:
5e:e1:84:18:78:af:9f:c7:4b:b7:1c:df:f6:eb:58:
cd:e0:87:73:2d:cd:3a:34:62:d5:16:2f:1e:bd:a6:
31:12:9f:23:f2:58:a5:ca:51:bb:9e:56:8f:28:5c:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:06:CF:1E:9B:F7:8B:CF:02:22:DA:2E:4E:98:22:4E:B3:54:ED:29
X509v3 Authority Key Identifier:
keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:f6:ec:14:16:31:34:7b:e1:f1:1f:c9:2f:78:84:fd:bf:
b0:65:d1:f3:0a:9e:8c:cc:b0:33:56:08:d7:66:43:71:1d:f2:
8f:9d:28:4e:77:08:bc:b1:39:7c:af:15:62:04:42:b3:78:dc:
f5:21:c1:d7:7b:27:29:a8:a4:8f:2b:b2:9d:8c:3b:a9:e0:f7:
a8:90:7c:b7:8a:85:4d:bb:63:af:ff:c6:ca:92:f4:f8:ad:4d:
ef:c5:00:96:a5:be:26:fd:b8:01:f9:dd:f7:08:8c:04:dd:16:
1e:25:b8:5c:f9:95:26:77:08:ad:12:8b:9e:b8:79:d9:0d:a7:
ba:43:fe:8b:13:96:d6:d3:ee:a4:40:ae:05:6c:2b:1f:3c:dc:
eb:db:99:d1:81:8f:a7:1a:91:0b:4a:3c:38:12:cb:e8:83:14:
66:15:b9:b8:a0:8d:f1:5a:ba:4a:d5:f0:f4:e0:cd:8f:f9:48:
57:6e:eb:78:14:df:f6:bd:a7:72:af:62:96:4a:d1:07:cc:00:
30:b5:2c:c4:52:90:de:d4:7a:93:f1:4a:1b:ba:d4:0b:0b:27:
f6:45:26:85:1f:0a:e6:1b:3b:9c:e3:3d:38:d5:cd:38:7f:9a:
03:0a:66:6b:48:ab:3e:db:4d:b1:9b:b2:27:2b:71:cf:41:e2:
08:71:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:18:29 2026 by rpki-client