
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json)
Hash identifier: 4lOVCSsyPV4/k86yl43NNlUc3iwRm98rO9nEjzeeiBM=
Subject key identifier: 9B:3E:5C:02:6B:E5:0D:3C:DB:C2:3D:96:0A:04:23:78:74:2E:B4:2E
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
Manifest number: E3
Signing time: Wed 25 Mar 2026 05:43:25 +0000
Manifest this update: Wed 25 Mar 2026 05:43:25 +0000
Manifest next update: Wed 01 Apr 2026 05:43:25 +0000
Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: xmifPn3/sqbB2oNP4vA9CoaiHiEr/e11UDVrK2fAeyw=)
2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: rcro9dP46E34GMHce4QAeTN8arZ/RvTtUrO6lFBK5gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Validity
Not Before: Mar 25 05:43:25 2026 GMT
Not After : Apr 1 05:43:25 2026 GMT
Subject: CN=69c375fd-ee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:25:69:ee:32:53:47:0e:7a:0b:0e:67:34:
26:21:59:89:d7:90:d0:e1:54:6b:82:08:06:43:4c:
20:3c:92:ec:c2:e3:66:99:91:38:21:02:9b:7a:f8:
a9:50:17:1d:0f:e2:22:59:39:a7:b1:81:30:4e:ee:
01:c3:6d:39:d8:53:14:a1:b5:14:80:11:e8:28:d0:
23:87:fd:c8:c6:a1:d7:40:da:8d:d5:2c:46:b5:70:
4e:3b:02:c1:bb:ea:c0:e0:8e:69:15:3b:73:ec:a0:
9e:17:2a:cd:ba:bd:55:54:7c:8e:7b:ef:17:b9:6d:
20:c0:80:86:41:12:17:c1:2a:fe:76:74:9a:7a:4c:
03:c3:31:c0:9b:48:40:8d:c4:04:b1:e6:c0:2f:45:
c0:03:38:66:8f:2d:6f:17:b1:2c:1d:68:4f:36:9f:
52:0c:de:fd:9d:32:c9:be:c2:fa:82:e3:be:05:32:
ab:b0:f7:c1:bf:53:8e:f5:3f:25:e9:fd:ee:a5:7c:
df:ec:73:19:aa:0b:f1:da:11:12:cd:55:31:60:f1:
f1:bb:9a:35:79:3a:21:39:a9:f8:75:81:28:1d:21:
f6:43:84:ad:0e:26:67:b5:27:0a:98:42:9a:89:1e:
27:43:f3:7d:c1:8a:75:cb:af:70:9e:71:b6:df:45:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3E:5C:02:6B:E5:0D:3C:DB:C2:3D:96:0A:04:23:78:74:2E:B4:2E
X509v3 Authority Key Identifier:
keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:72:7d:b9:7d:a4:63:28:c9:41:30:66:bf:8d:33:a1:18:3f:
58:50:2c:45:c6:bc:ff:8e:a8:35:a0:3a:6e:e8:28:49:a4:3d:
b7:b2:40:97:8d:8a:87:4e:60:04:94:a7:b6:99:92:e6:a0:ae:
fd:50:51:85:f3:46:f3:a5:d2:71:b1:7e:2d:39:06:56:6b:72:
7d:c7:a8:4a:3f:ab:c3:e0:97:a7:30:87:46:9d:7d:b8:92:b0:
ff:34:e7:eb:a1:fe:00:d9:03:55:87:ef:b6:66:95:f0:6e:fa:
ad:ed:12:3f:bd:12:22:d7:e4:f5:38:af:05:04:19:d5:b1:b1:
04:ea:29:22:89:de:d1:ca:6a:72:45:59:84:4e:4d:ce:9d:9f:
92:d5:ec:6a:43:20:01:c0:9b:37:18:8c:93:41:b6:7a:c3:3d:
b1:c8:e7:ac:c9:10:01:4a:27:f3:0d:8d:b1:0e:09:48:ae:f8:
0d:d9:75:62:c0:93:95:e3:ea:d5:b4:1e:bf:ef:6d:55:eb:7c:
2c:45:f9:54:96:a5:af:b5:58:09:e0:43:60:0f:c2:fa:b0:ce:
b3:3f:92:c4:fa:56:fd:30:f2:26:ee:15:3a:77:21:87:27:57:
ad:9d:40:2c:99:65:eb:3d:5b:95:51:df:52:3b:c9:d8:7f:c1:
11:53:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:07 2026 by rpki-client