
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json)
Hash identifier: KYFCntKxWrNbLMzNrAsf1hWWQaX5EfqLa73BIwEqK+Y=
Subject key identifier: DD:EB:F0:B2:CB:93:A1:12:FF:B0:56:AD:18:B6:F6:77:A3:24:7E:09
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 04ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
Manifest number: 04C5
Signing time: Tue 24 Mar 2026 23:37:31 +0000
Manifest this update: Tue 24 Mar 2026 23:37:31 +0000
Manifest next update: Tue 31 Mar 2026 23:37:31 +0000
Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: awGdeIs5Ozvmok2Bn6eMTePm8vd6fZeb1RQQC5Y1a3w=)
2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: 39C+hq9yHLOlvpEI0BBXna/9+vYl0n36FnAzYDNDqZ0=)
3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: cfcf5ZIlJUYMjr0+qHEumL0rToA0BJQdmmF24Iwecxg=)
4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: e8gT8HqV1esire/8xcI7iv1N+KlJ6UFqhxx1NHbDo3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Mar 24 23:37:31 2026 GMT
Not After : Mar 31 23:37:31 2026 GMT
Subject: CN=69c3203b-b7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:0f:f9:56:8f:05:a7:d5:86:75:7b:0a:29:
18:44:8e:4f:10:a3:f3:ca:97:d4:44:16:77:5d:e7:
5d:e8:9d:f9:2d:62:6a:2a:47:22:16:b3:11:0a:48:
e8:21:40:bf:62:4f:c5:71:af:84:d8:ee:7f:ee:74:
51:43:d9:29:55:49:48:4e:f9:d3:e0:e8:78:6d:42:
bb:d4:2f:3e:0a:80:d4:fd:67:b8:58:0e:36:2b:86:
17:a4:d3:f1:9b:92:b4:6f:57:e1:25:ed:52:d3:41:
0a:63:3a:2b:ef:56:5b:01:83:1b:6e:a3:9f:20:60:
d3:bf:88:3a:39:5e:04:d3:09:3c:1d:ca:73:78:1e:
3b:4a:4c:4f:30:2f:ef:94:22:d7:67:37:d8:da:6c:
78:ab:d4:90:2d:66:6e:91:2e:51:41:34:bd:71:8a:
4e:03:cc:82:0f:4c:08:92:75:fe:3f:54:39:d4:5f:
ee:03:f8:4d:40:69:4b:c3:79:d3:bf:09:1e:40:98:
86:34:8e:c0:0b:6d:ca:f1:f0:70:cd:6a:bd:bc:ae:
58:f5:c7:89:b1:29:06:27:d6:65:2a:d3:f9:64:53:
72:81:fe:84:7d:56:8c:82:ad:9b:3e:2f:db:01:d6:
5d:d3:8b:4b:ba:4e:54:d2:a0:81:d1:9b:97:df:66:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EB:F0:B2:CB:93:A1:12:FF:B0:56:AD:18:B6:F6:77:A3:24:7E:09
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:fa:a5:50:12:d2:eb:5b:58:26:77:19:0c:be:8f:2d:fa:6b:
e1:4b:ae:36:d7:64:28:d4:2e:7e:b7:fd:b2:7b:c2:67:a2:37:
96:f7:e6:03:11:97:ba:2a:78:32:ae:43:04:8d:a6:08:8a:59:
14:a0:04:0c:38:0f:58:95:38:b2:06:7b:30:a1:42:b5:84:4e:
77:52:8a:ac:b5:e6:7f:5a:2d:a5:29:da:0f:d8:bf:c7:64:67:
03:a9:ef:de:42:c1:42:ed:c8:b4:46:83:2e:90:db:29:88:88:
85:07:ee:6a:c0:57:69:ed:25:88:4d:61:9b:1d:1e:57:bf:2e:
92:0b:38:69:c5:4b:f0:bb:47:dd:05:84:75:f9:ab:d4:0b:a6:
c4:cd:57:b9:99:c1:fb:a4:2f:df:ff:a5:b2:65:38:ba:da:ff:
0c:2c:35:f6:03:b0:48:10:83:4d:77:f0:f6:5c:b9:df:2a:c4:
7f:d5:61:c6:67:56:57:df:63:f8:ef:5b:ee:06:4b:78:fd:19:
59:ae:d0:91:a7:9a:90:5c:92:d0:7f:5e:8f:28:fb:ca:25:19:
f5:6a:bd:a4:7c:78:38:ec:bb:91:0b:c3:4d:43:f2:d6:5d:ea:
c2:d4:ea:aa:79:01:1d:38:0a:1d:a3:fa:9b:4f:b3:2a:84:5b:
41:39:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:00 2026 by rpki-client