
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
File: yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft (raw, json)
Hash identifier: ARDjalLd4RX0W+VNw2P5iQr9GO/uo4XPQnV/1aPDGQU=
Subject key identifier: 66:81:E4:40:2B:2F:6D:93:F1:61:60:C5:3F:62:C2:90:FC:4A:B4:65
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial: 06CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
Manifest number: 069E
Signing time: Wed 22 Jul 2026 23:19:50 +0000
Manifest this update: Wed 22 Jul 2026 23:19:50 +0000
Manifest next update: Wed 29 Jul 2026 23:19:50 +0000
Files and hashes: 1: yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl (hash: KO7H6yXP7vzR8SRgx44BVq61+JWlpzGkfYZvwgQE/Zc=)
2: 6954A6281D1811F1BB26F0200F3D8C67.roa (hash: MflmYnapzVVeRGAplynCMf3VUC0+n3ittdmrcITSfa4=)
3: 5FA1BF8802DD11EE86865A23C4F9AE02.roa (hash: GFfQfs1rBXk5RvNn/1eLrsagDcvE+KrBjwNFBGF3aQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Validity
Not Before: Jul 22 23:19:50 2026 GMT
Not After : Jul 29 23:19:50 2026 GMT
Subject: CN=6a615016-c4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:c7:16:c9:94:51:1f:85:01:30:88:7f:cc:
e1:3a:dd:1e:0f:ea:80:19:66:50:b5:db:25:6d:39:
b6:6b:2d:a4:cf:d9:ed:93:92:96:f3:cb:8c:34:4f:
3b:3c:82:5a:22:c8:29:fb:9a:9c:07:ff:a6:ca:57:
7b:10:cb:a4:32:d2:ab:18:cf:f6:0a:21:2a:ea:70:
26:11:ad:37:cf:21:74:3c:24:b0:2d:9f:c6:72:84:
40:8b:2a:57:89:78:78:82:ce:ba:40:e1:5c:53:e5:
e6:18:2a:d6:c1:75:8f:06:6b:74:34:9f:c5:ba:15:
7f:bf:de:c4:e4:9c:41:8b:85:bd:1e:12:5d:f5:2b:
7e:c2:bd:cf:c3:36:9e:ac:c9:79:5f:59:34:85:79:
5b:be:09:5f:de:c3:35:0a:93:6a:78:4e:ef:66:ac:
60:c8:b5:e2:e0:a1:d5:2f:7e:d6:e2:31:5a:4b:c0:
6f:59:e0:76:10:e6:fd:d5:90:55:dd:fa:ca:1c:c4:
5f:13:3b:56:dc:f8:d5:1c:e2:d7:97:70:e9:dc:0b:
35:98:4d:5c:c5:62:71:94:16:16:20:e1:c0:9d:1b:
b0:f8:b5:02:85:51:6c:d0:78:65:ac:dc:9f:9b:bc:
17:7c:3b:30:a6:d8:4c:39:7f:be:6d:d5:e0:30:40:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:E4:40:2B:2F:6D:93:F1:61:60:C5:3F:62:C2:90:FC:4A:B4:65
X509v3 Authority Key Identifier:
keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:0f:43:18:3b:31:f4:1c:92:09:41:76:7b:52:62:79:8e:
4d:7b:31:a1:42:10:ca:af:92:56:fc:e1:d2:15:08:1b:4b:22:
bc:4b:f8:34:f0:d6:75:17:fd:5a:26:0a:ad:30:96:9e:2c:60:
82:f1:b3:fa:0b:ea:3f:78:47:03:35:a8:1b:26:d0:27:11:e0:
ed:85:96:83:4c:5c:9b:9b:b9:c9:b3:16:c8:0c:51:c8:47:fb:
0c:3f:eb:b8:d9:56:12:a4:8f:a2:4f:52:18:97:dc:1d:fa:1b:
0c:61:62:36:68:25:4e:2f:04:19:56:f6:14:92:24:76:9d:d3:
67:1d:1e:74:63:bb:4c:55:39:b5:f0:c4:c1:44:d7:97:04:a6:
e0:6c:c7:f8:05:4d:13:ea:d8:d5:2b:74:26:37:f4:1f:07:db:
97:df:31:bf:0c:0d:10:2c:67:10:94:0e:97:ea:e8:89:70:86:
2d:0c:1b:61:ca:fc:bc:2e:91:a8:ba:89:4d:9d:9a:07:a1:1a:
57:72:22:dc:17:0e:1a:64:19:38:10:55:52:9c:3d:cd:ad:cf:
e5:ed:4d:12:3e:a4:de:0b:a9:46:85:f4:0c:03:9f:25:3b:46:
4b:f9:6e:32:84:f7:d9:8f:99:cb:55:42:92:57:b1:4c:05:da:
a4:20:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:49 2026 by rpki-client