
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json)
Hash identifier: yHgaY5CbqNPHW8CCCcdvmAFOPHE9JPJzg4nxUNMM9T4=
Subject key identifier: 76:47:B7:B0:C9:33:2D:AE:39:8D:75:0C:36:05:94:43:E3:CC:A3:71
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
Manifest number: A8
Signing time: Thu 23 Jul 2026 09:09:03 +0000
Manifest this update: Thu 23 Jul 2026 09:09:03 +0000
Manifest next update: Thu 30 Jul 2026 09:09:03 +0000
Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: MtBv3J27T9g/xk8wgFLcldkwvT0THLHc9wA9hXnVOxw=)
2: 56ACADFE47C011F1B54DF0A9AE833773.roa (hash: vxjWyQ9R73CYTlS7zLuzmK55YQslMUO/l+FMKzf2+xM=)
3: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: Cadr/xUb1+0gVtL0k3xW6zkBh+JLJ5ZTxdWq64WB59k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Validity
Not Before: Jul 23 09:09:03 2026 GMT
Not After : Jul 30 09:09:03 2026 GMT
Subject: CN=6a61da2f-1bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:09:18:d4:68:5c:60:50:89:5d:13:38:a1:
ad:69:64:b9:d6:17:6b:a6:bf:b8:dc:41:c9:95:3a:
ec:0f:dc:e2:67:a7:bb:5e:91:19:b8:ce:8d:bc:b0:
6c:2f:29:df:18:0b:98:0f:23:c5:86:d3:b6:fb:38:
95:93:cf:5f:d7:db:e2:ef:bb:fe:5d:88:01:8d:28:
dc:7f:22:3d:6c:c7:1c:b8:05:e2:4a:1b:05:fd:a4:
2f:cc:56:8f:c7:94:40:23:40:b4:3d:cf:e1:87:86:
91:f2:38:17:99:99:3e:20:be:34:eb:64:88:c5:b3:
94:f4:8c:bc:e1:67:05:54:ac:3b:22:2d:95:66:95:
54:59:59:fc:7a:f8:ee:d2:00:5b:2a:27:95:e1:ca:
58:2e:e0:5c:91:47:e3:69:e7:31:3f:da:cc:84:48:
41:80:08:49:63:1c:2e:de:c5:84:63:84:06:92:94:
95:d3:3f:2a:f1:4d:d7:0a:da:f8:97:81:46:b3:cf:
c8:cd:e2:90:05:61:57:5d:ba:c9:c7:8e:51:de:94:
a8:d9:3a:aa:39:ee:f4:32:e5:88:1b:47:81:80:7a:
91:a2:12:9f:d6:9a:e0:72:8f:2e:7b:06:e9:a3:40:
a7:a8:c5:05:3a:0c:0b:08:1e:38:c7:0f:9d:d1:24:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:47:B7:B0:C9:33:2D:AE:39:8D:75:0C:36:05:94:43:E3:CC:A3:71
X509v3 Authority Key Identifier:
keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:2b:3e:5d:e7:0e:a4:07:97:6c:35:81:30:cf:90:56:9a:
3f:1c:4d:3a:69:7c:d7:b8:63:82:79:8c:62:e5:a4:a2:1a:ba:
6e:58:45:e3:fd:69:e4:2e:d3:b5:79:22:f0:41:56:3b:03:1b:
59:c1:eb:70:54:4c:35:0f:2d:66:be:40:a9:c2:23:28:57:3b:
79:8d:9a:a6:37:6a:25:7c:c1:a5:a2:a9:09:0c:d6:04:f0:26:
4d:ad:31:24:d9:68:e7:73:aa:66:48:99:b2:cd:48:58:fc:80:
2a:ae:79:56:cf:7e:9e:26:84:4e:dd:e5:5a:7d:8d:8b:9c:c5:
6c:0b:c1:3b:08:c7:86:52:cf:a4:ed:9a:d6:ea:c0:af:6f:ab:
6b:42:c6:75:9c:8f:92:7e:0b:e5:17:b1:7c:1f:51:cc:ba:a9:
c5:0e:4d:3c:83:53:c5:24:c3:32:c9:9b:fe:83:48:36:6f:58:
bf:7a:b4:2c:7e:55:e1:d8:ff:dc:06:31:bc:7a:4f:72:1c:4b:
fb:3a:41:2d:99:13:a6:a3:03:e8:1a:dc:72:a2:cc:fe:8e:16:
3e:55:c8:f4:85:98:cc:29:9e:48:e6:96:7b:f2:11:d7:c9:c1:
7d:f2:f7:73:59:17:d6:ba:72:09:8b:1b:79:84:ee:d3:a3:f6:
18:a7:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:38 2026 by rpki-client