
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json)
Hash identifier: StWCJmJ8FUqy3w4jOfwZiTLbFUoKISMERsDE5vr2UDY=
Subject key identifier: 4E:47:AF:7A:5D:A8:33:FD:B8:67:20:10:5A:64:CC:E5:91:40:F1:B5
Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Certificate serial: 3568
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
Manifest number: 3561
Signing time: Wed 22 Jul 2026 15:05:50 +0000
Manifest this update: Wed 22 Jul 2026 15:05:50 +0000
Manifest next update: Wed 29 Jul 2026 15:05:50 +0000
Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: EksPSv+ksRiczilrMZFpm4hUT6jMHvtED53hCHASl7A=)
2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: oxiDTJi92uEmvEoDjgv/y1DqmarljGA90TImE98cgWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13672 (0x3568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Validity
Not Before: Jul 22 15:05:50 2026 GMT
Not After : Jul 29 15:05:50 2026 GMT
Subject: CN=6a60dc4e-eacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:18:cc:7c:d6:84:4a:07:59:7d:21:9b:ae:
ae:41:58:bb:68:d1:ee:3b:fb:20:38:42:72:f2:67:
57:0d:df:fc:4d:45:c4:59:9a:19:cc:f2:5d:d2:20:
cb:4f:e5:db:db:43:89:5a:0c:50:ea:35:27:9f:e3:
88:83:bf:95:62:88:13:34:00:f3:53:49:e9:b7:54:
95:3d:42:f4:ad:ce:1e:50:c7:e5:d9:dd:56:22:51:
e5:85:e9:bc:fd:a1:17:29:d0:46:c2:95:40:aa:0d:
9b:a2:94:a8:1a:e2:6c:4b:ee:c9:31:e3:f1:20:7a:
81:b7:e0:55:a7:36:d1:46:48:72:aa:2b:3c:cf:70:
69:c4:de:5c:33:36:21:ed:40:f4:83:11:e9:d9:19:
52:50:f4:f0:1a:56:de:d1:0d:2f:2b:08:57:b2:36:
84:6c:a5:2e:33:9c:90:41:0c:c1:03:11:0a:ec:af:
bd:22:a1:72:88:4c:ae:ff:b4:fe:64:01:ff:78:7d:
b8:8d:4d:a3:9a:3c:66:b3:96:c9:07:61:05:35:89:
d5:b2:2f:08:26:3d:86:32:5b:0b:74:60:70:42:2b:
bc:9a:b4:05:f4:69:2a:30:14:dc:86:40:5e:4e:74:
01:e4:d7:f4:39:64:e4:e2:51:b4:ee:54:8d:2f:21:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:47:AF:7A:5D:A8:33:FD:B8:67:20:10:5A:64:CC:E5:91:40:F1:B5
X509v3 Authority Key Identifier:
keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:eb:19:ed:2e:92:8d:bf:93:40:4d:f7:0a:e9:b2:3d:89:d9:
05:65:30:22:de:d3:19:38:2f:be:f1:e9:40:6e:8c:9d:29:63:
4e:19:61:41:e1:bf:b2:d2:34:cf:e1:94:96:49:99:5c:30:24:
3e:f2:ba:9d:39:4b:78:17:af:3b:6f:3c:b5:7b:83:f0:c3:e8:
14:73:2d:96:5f:56:ce:36:90:6e:1c:41:9e:08:2b:58:37:88:
50:99:8b:61:1a:83:47:01:16:e6:84:13:96:98:17:85:c6:3a:
98:94:a6:a8:13:7e:7d:9d:bc:96:95:c2:b9:ec:7e:1d:61:a7:
92:76:51:9c:bf:ca:ef:f6:0c:82:46:ce:a2:3d:b4:de:58:43:
1f:fc:48:0c:10:d9:bf:1a:57:a0:ce:47:d5:0b:8f:0d:db:f4:
5d:fc:84:c0:f0:40:24:e0:ef:7d:c3:43:19:b4:9a:a3:96:ea:
6a:3f:64:17:c5:6c:93:b6:76:a0:a0:d2:ee:29:a4:e8:25:41:
2f:c6:e0:ef:c3:ca:39:e3:d8:92:0c:12:ec:f9:82:a3:d1:91:
33:38:25:4a:45:6a:b7:30:ab:97:ea:07:85:02:08:a5:32:bd:
51:df:23:00:57:98:e0:65:5b:98:db:36:d1:fc:40:7b:26:72:
1d:3a:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:42 2026 by rpki-client