
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json)
Hash identifier: mSRJITDAYGwXnNka8MWmGEalj2TfB7vpCSKJfmcA5n8=
Subject key identifier: 53:F3:64:9B:5A:9B:59:25:DD:EA:42:14:41:4B:38:0D:08:5A:FB:83
Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Certificate serial: 06C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
Manifest number: 06B9
Signing time: Tue 24 Mar 2026 22:04:21 +0000
Manifest this update: Tue 24 Mar 2026 22:04:20 +0000
Manifest next update: Tue 31 Mar 2026 22:04:20 +0000
Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: /Lylg5nhSLcsWVohAvy80yaKFN3NIZnFLQuw19xVi2k=)
2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: crMuBoqElTDMkWwf4m/QaNXTW9zQWs2tJYADmx9RNs8=)
3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: Nfcn1fK1HwoYaeFVOcyd5nU5erIz84W+2IeeBYePHDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1734 (0x6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Validity
Not Before: Mar 24 22:04:20 2026 GMT
Not After : Mar 31 22:04:20 2026 GMT
Subject: CN=69c30a64-6f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:6c:83:b3:31:8d:5c:4f:66:2f:57:ab:24:
58:5c:49:bb:6c:be:c2:9f:b4:11:2f:f6:e2:ac:32:
db:e7:67:2a:18:43:19:16:66:96:e5:28:9f:4f:dc:
45:33:4d:83:05:90:61:41:68:e4:7b:0c:aa:c2:75:
35:45:1f:52:57:a0:93:54:10:57:78:10:dc:dd:c2:
d2:ea:07:fc:db:30:70:4b:f3:d7:05:a5:04:4f:a5:
03:01:73:6c:cd:32:23:26:e3:fe:e1:22:5e:66:a5:
4c:19:f5:2b:8a:f8:c3:0f:c3:82:dd:46:9e:7a:37:
6d:c5:50:4d:48:39:5a:d1:5d:e5:3d:b1:7b:15:97:
05:e7:b8:ca:fd:a5:6b:a7:ab:b0:62:7a:1b:d5:62:
52:e9:de:53:a1:90:5e:23:0f:74:bc:11:72:b5:aa:
c1:53:37:93:f9:20:9c:3c:bd:ae:94:5d:26:a3:98:
b5:e0:0a:e7:60:ff:82:a5:46:5f:7a:47:8e:be:28:
f9:d1:3a:68:00:78:67:35:86:9c:8f:f7:ef:b7:96:
a9:99:f5:cd:69:2d:fa:db:e3:48:fe:4b:75:7a:98:
8d:07:bb:14:e0:a2:13:91:a5:22:a8:b1:3e:ac:31:
5c:b7:08:5c:0a:e2:e9:ff:7d:cc:4b:1c:23:89:70:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F3:64:9B:5A:9B:59:25:DD:EA:42:14:41:4B:38:0D:08:5A:FB:83
X509v3 Authority Key Identifier:
keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ce:d5:43:ea:bf:78:90:b4:c4:9e:c5:ae:67:35:76:16:5c:
7e:8f:1c:94:b9:9c:de:35:46:59:59:6b:c7:3a:87:76:d0:a2:
98:3a:d9:ea:7c:6d:a8:3a:a9:c0:fd:7d:50:55:8f:b0:18:1e:
72:b8:ef:ad:2c:55:e4:c5:77:dc:22:38:ed:f2:a0:0f:be:68:
d9:b0:ef:42:75:ed:58:fc:d2:86:31:d0:07:70:32:e8:11:67:
f5:28:f9:4c:bc:4d:85:59:41:95:27:1d:40:e5:6a:30:a6:34:
36:69:a6:98:b9:18:13:98:8d:08:f4:ae:c0:ac:29:1b:29:fe:
9e:68:b8:a5:7c:7b:a4:70:91:da:38:80:2f:31:5d:37:82:03:
9a:56:8a:a9:bf:a5:08:fd:85:5b:44:8d:87:69:32:61:b4:c2:
a0:af:cb:be:56:15:31:c4:e8:cf:b5:7d:d8:60:af:5e:b0:71:
ad:c6:b2:6e:c9:39:fb:a0:ea:68:3a:93:a5:7c:3c:87:f2:db:
70:03:b4:01:eb:11:6b:ff:2b:36:a7:40:f9:91:68:68:7f:30:
89:a7:02:f0:c8:0b:5a:54:55:d1:cb:4f:12:74:02:81:21:1b:
5c:ba:de:eb:52:c2:c0:d5:b8:2c:79:b6:b1:58:09:65:7b:9d:
cf:d8:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:35 2026 by rpki-client