
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json)
Hash identifier: dTU/uIP6MzJolPi14YAI8ZiEOEpD7M/deWwSZpGfROI=
Subject key identifier: 54:EF:4F:5A:20:58:AE:85:12:7B:62:D4:27:65:F0:D7:9F:45:BD:FD
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial: 3585
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
Manifest number: 355F
Signing time: Tue 12 May 2026 15:02:31 +0000
Manifest this update: Tue 12 May 2026 15:02:30 +0000
Manifest next update: Tue 19 May 2026 15:02:30 +0000
Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: 6+wjuEN+rHMsMszLLB7OsU6puzNZ35FWP0CK2EeTdl0=)
2: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: hOPjAACYFIMnZpYQK50BQrHSZKRavg8kb8cFoUPdabA=)
3: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: OqYW8F4250vX2cVPr/WKUGN/bLRsN60JeF92JnIapyY=)
4: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: m731XVB6b1xAGYHDb9IkvhodV8wFo5nHOoj74jQNmhY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13701 (0x3585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Validity
Not Before: May 12 15:02:30 2026 GMT
Not After : May 19 15:02:30 2026 GMT
Subject: CN=6a034107-c11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:21:97:da:44:c4:17:52:09:be:bf:72:7f:
3c:6a:17:1e:fc:a6:f8:a9:d8:a3:8b:37:ec:99:58:
c7:3d:2b:b0:e7:0f:80:9b:ff:a3:ec:b5:21:ef:cc:
21:45:21:11:0e:00:d0:cf:3b:98:2c:f3:16:2f:45:
9c:90:f7:ba:03:44:3e:6f:2c:c4:67:29:91:1b:2d:
84:8d:8e:8c:b5:dc:b7:40:47:e1:3c:0b:44:17:f2:
9f:be:b4:36:a8:2a:86:d0:ef:ec:a4:84:08:40:e1:
4d:65:5b:c7:17:12:ca:b5:44:22:cd:3c:eb:91:c7:
48:1f:e6:fe:ec:32:31:c5:50:69:a3:f8:b5:f1:b8:
93:a1:c1:a7:13:81:78:be:8d:e6:79:79:f7:4f:33:
21:4b:80:ad:9a:19:58:da:d3:37:dd:06:8a:97:88:
cc:cc:1e:53:02:9a:fe:9f:62:a6:bf:31:ad:ee:b9:
c0:a2:d8:f5:ec:e7:1e:fd:1b:b6:9f:e7:f1:a7:85:
18:a5:28:ce:44:40:bb:f4:4f:06:c8:2d:7e:1e:23:
25:09:bc:18:65:4d:3b:78:0c:31:b0:de:94:9e:27:
d3:c7:db:57:88:df:ff:37:12:89:d1:72:89:3a:72:
fa:56:64:30:da:32:b0:a3:f0:77:f2:74:5f:36:b9:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:4F:5A:20:58:AE:85:12:7B:62:D4:27:65:F0:D7:9F:45:BD:FD
X509v3 Authority Key Identifier:
keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:80:9a:7d:e3:a5:8b:b9:3c:f6:5c:03:3b:78:05:09:69:24:
52:5e:40:91:ff:67:ec:cc:0e:18:62:45:5a:43:af:30:8c:80:
23:b6:e1:68:60:57:fc:c1:fd:7d:d8:b0:2d:e9:83:98:5c:89:
7c:4c:1e:4a:91:d5:88:e7:2a:e3:a0:02:81:59:10:d9:c1:15:
46:fa:4d:07:70:ef:82:be:d8:82:16:75:eb:cc:41:86:63:95:
ab:cb:62:9f:19:b4:f3:6a:12:32:65:3a:a3:ae:3d:e2:bb:d4:
1d:9b:d8:ab:fe:ae:e1:f0:51:c9:0c:07:28:b1:0a:d7:57:f9:
7c:03:de:e0:a1:a6:ff:34:f8:76:89:44:3d:13:7c:55:cb:72:
bd:a2:31:87:85:c4:1f:dc:0e:8c:e1:e9:6a:6d:40:7d:a6:7c:
1a:8a:01:db:13:49:54:42:e1:ff:d1:3c:15:28:0a:7b:45:ba:
85:26:d1:a2:b5:90:cd:f1:19:0d:10:1d:0a:f4:07:f6:33:f4:
bc:5c:94:c6:c4:81:f7:0d:9a:1d:b4:68:62:ff:0c:bc:39:41:
2b:00:17:e8:b5:83:25:f6:36:33:82:ea:20:03:f0:b2:aa:25:
25:f4:bc:15:bc:f0:95:78:d5:1c:60:bc:0d:4e:dd:ff:95:40:
a7:89:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:24 2026 by rpki-client