
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier: 8PN7WJ7is3mM0W7oYo/JthAjHeKnQZPZDQo6uXTV+YU=
Subject key identifier: 24:05:0B:42:80:51:CC:BB:2C:B0:A8:DC:45:63:97:60:C1:72:7D:75
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number: 0154
Signing time: Wed 13 May 2026 05:09:26 +0000
Manifest this update: Wed 13 May 2026 05:09:26 +0000
Manifest next update: Wed 20 May 2026 05:09:26 +0000
Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: qJLU7qeF5OjhAoGkxhqocvum1xLXn1NII0QCnRgYaGQ=)
2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: N0mjQ3paWd02SrbPugyLiWD2jfFiR2KxN4PTpCiYbDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Validity
Not Before: May 13 05:09:26 2026 GMT
Not After : May 20 05:09:26 2026 GMT
Subject: CN=6a040786-cdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:9d:dd:43:46:94:d6:8a:76:d5:cf:2b:8c:
06:7f:d7:68:2a:c8:67:42:ef:a3:8b:8c:1d:31:e4:
75:50:28:d9:35:96:9b:05:b3:c7:51:47:2e:29:2e:
63:64:fe:1b:25:f2:65:f7:59:34:48:6d:b7:15:39:
eb:32:2e:b2:3b:33:c0:b3:49:6a:bc:e5:6d:b9:02:
71:33:8d:d1:8f:bd:88:d7:d9:ae:64:75:07:af:d4:
a7:85:41:0e:73:c1:fe:20:67:3e:c6:ec:1d:0f:a2:
32:65:5f:56:97:b1:96:5a:5d:21:ef:89:04:d4:00:
a2:28:45:3a:48:be:bd:a9:3b:92:a9:0d:90:a1:ad:
b4:6a:a7:1d:10:05:c4:b8:5b:a7:12:33:91:dc:54:
ba:84:7c:9c:71:67:23:7c:11:f7:f0:88:5c:67:89:
2c:18:ed:83:0f:1d:07:b7:59:8e:27:af:df:39:0f:
58:9c:70:0f:b3:9b:bf:60:38:a4:94:48:01:39:e1:
a0:ff:61:0a:be:cf:c2:90:46:ea:e6:f6:44:8a:f6:
82:8f:46:5a:fc:be:8d:b7:ef:83:09:f3:9d:df:b6:
5c:22:c1:3e:6b:56:17:30:7f:e0:28:47:17:30:05:
8b:09:cf:02:fd:d6:04:2e:04:1f:95:b2:7d:28:c3:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:05:0B:42:80:51:CC:BB:2C:B0:A8:DC:45:63:97:60:C1:72:7D:75
X509v3 Authority Key Identifier:
keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:0f:54:29:b5:4d:83:a2:03:fc:98:8b:6a:09:b6:17:cf:b4:
5f:bf:aa:7d:08:a2:f4:ed:b0:c2:25:07:69:fc:57:29:84:c3:
ca:2d:6c:a0:c8:0b:3d:3b:6d:29:b5:3f:ac:e3:df:03:68:72:
d8:5a:50:97:06:68:f5:d9:0e:c9:a2:ef:96:90:0d:c2:ca:7e:
4c:aa:be:fa:45:35:b2:ee:f3:93:36:80:51:51:4f:73:c3:6e:
7c:18:bd:79:ab:f4:14:7c:a1:ed:89:e3:51:f4:39:c4:78:dc:
ea:7f:60:99:9d:4c:3f:62:e6:6e:8e:11:74:3b:91:83:82:e9:
12:24:ff:b0:17:65:7c:c8:0d:e1:11:27:54:9a:85:48:49:2e:
d1:2d:23:ea:65:51:49:d4:68:38:59:27:32:b1:67:ec:bc:f9:
71:af:b5:b0:c3:bc:3d:6c:55:e2:52:79:66:03:b3:a0:e9:4a:
fa:10:14:bd:d8:e1:74:66:ac:e0:aa:2b:f9:c0:c0:c1:f2:25:
66:5d:55:81:2c:32:0d:90:d7:67:c2:5f:84:92:d9:8f:07:47:
b8:3a:70:bc:d6:c3:45:06:87:af:e1:f1:5b:a6:f9:1f:aa:19:
6e:5e:d2:5a:0f:37:66:b0:78:e4:1c:ca:4a:7f:f2:ca:2a:b2:
0c:04:8c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:21 2026 by rpki-client