
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier: gJFr3wOIOdoNN0gG5aGOY/VsWDtQ+nuqkjf94a/PPns=
Subject key identifier: 45:A9:5D:CA:94:93:25:F0:F0:FB:B5:1A:29:CD:AF:F1:40:E3:0B:13
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number: 014D
Signing time: Thu 23 Jul 2026 06:59:36 +0000
Manifest this update: Thu 23 Jul 2026 06:59:36 +0000
Manifest next update: Thu 30 Jul 2026 06:59:36 +0000
Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: vIKtheYC8YKpgKl7GIrFF2BPnnr8LB+0NZCHi86ay0M=)
2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: GShmLLZyIO7t2gH3mgsqYTIagHhCJ4qJGdBs3grosz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:59:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Validity
Not Before: Jul 23 06:59:36 2026 GMT
Not After : Jul 30 06:59:36 2026 GMT
Subject: CN=6a61bbd8-e2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:ef:01:8e:71:07:b9:7d:3a:ed:21:5e:50:
86:09:99:75:9e:a1:45:65:35:65:1a:dd:72:c7:35:
8b:4f:c8:6e:63:13:0e:c9:b4:0e:cc:d0:4a:bf:9e:
01:f0:28:85:51:ce:02:04:29:3f:8a:4b:bc:74:07:
e0:98:98:92:94:d0:62:2a:d3:f0:31:55:6e:25:a0:
14:1c:83:54:19:2f:eb:7f:fd:17:63:69:e5:1e:04:
a9:de:ac:43:ac:6e:41:31:cd:f9:be:3c:fa:e0:bf:
9a:b8:62:68:f5:20:3f:86:da:bb:ed:82:47:31:ad:
2f:78:a6:4c:0a:f1:18:96:cc:5e:63:1f:b1:ad:49:
3b:e2:2c:d7:be:1e:ab:20:7f:48:c1:24:a6:68:7c:
8d:b6:a0:2f:69:58:ff:a5:9e:39:da:0b:60:1f:1e:
26:86:29:e5:61:f7:fc:5a:6f:c8:10:f0:21:dd:7d:
3c:e3:ae:e1:17:81:11:16:6e:64:e2:64:7e:45:5d:
fa:a1:03:1e:92:a6:91:c7:5b:eb:80:b9:f6:02:46:
3e:59:42:05:f0:b3:44:cc:a9:75:9c:f0:ff:a7:b1:
6e:3c:e4:b8:e7:4a:23:30:41:5b:ec:dd:21:47:88:
9e:15:23:14:98:6a:fe:6f:de:93:e1:a2:61:e2:30:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A9:5D:CA:94:93:25:F0:F0:FB:B5:1A:29:CD:AF:F1:40:E3:0B:13
X509v3 Authority Key Identifier:
keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:c7:76:44:78:1c:18:97:cc:32:ce:fc:8b:c1:d5:45:90:
f9:04:91:e7:bd:e7:7e:69:e8:36:da:58:ca:a3:89:80:12:24:
45:af:2d:23:12:77:5f:a0:48:37:02:95:04:97:d9:32:39:c5:
86:46:e0:49:91:2d:d7:53:ba:67:23:8e:a4:2c:76:42:93:5d:
d6:5b:16:44:00:4b:88:9b:61:b7:0c:e3:26:82:4c:22:15:8c:
37:96:bb:78:f1:5c:f8:2d:ef:37:f8:71:24:5f:38:dd:6f:c6:
79:e9:ae:4b:89:90:46:88:5b:5a:05:98:8a:d5:06:bc:40:b4:
0c:7f:e8:b5:ce:ec:de:36:94:71:df:ea:c4:0f:f0:7e:d6:d3:
5a:14:68:2c:b5:18:b6:5c:d4:02:b2:5d:dc:eb:9e:d1:76:25:
cd:31:ef:bf:98:35:e5:eb:08:27:4e:c6:49:49:ce:74:74:6d:
e7:69:46:64:c6:54:2a:c1:d1:38:ae:1f:0d:fe:33:5c:66:bc:
3b:7d:56:e7:e1:b5:98:68:19:bf:99:b1:26:25:cb:a8:e0:8f:
73:33:11:d5:fe:7b:7a:7c:2b:0d:15:9f:09:1d:2a:6c:d8:8c:
36:0e:da:60:0a:dd:03:b6:1a:13:17:e6:ec:40:d6:a8:da:2b:
f6:c8:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:30 2026 by rpki-client