
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier: cph8l5z1RGBel645Ul1SsrJQeLs3JuLYmA1kPAHc6uQ=
Subject key identifier: DA:E6:87:A9:20:B4:0A:60:17:C7:B1:AF:DE:BF:4C:C9:54:7C:2E:B2
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial: 0E9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number: 0E93
Signing time: Tue 24 Mar 2026 17:35:53 +0000
Manifest this update: Tue 24 Mar 2026 17:35:53 +0000
Manifest next update: Tue 31 Mar 2026 17:35:53 +0000
Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: 60A6icyY4qNihZxa1Fmo3fxDYg3qq9SDIjFOjzNaRic=)
2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: p2jKeuuPMWcoayA0pIuriaFGmnccV6V7R/MlEdyNE3M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3741 (0xe9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Validity
Not Before: Mar 24 17:35:53 2026 GMT
Not After : Mar 31 17:35:53 2026 GMT
Subject: CN=69c2cb79-c10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:56:0a:45:ec:8a:73:7b:4a:67:85:d8:ae:
65:77:6c:68:f7:76:58:0c:fe:64:6c:6a:30:4f:3d:
25:29:24:cc:36:23:0b:ec:fe:d2:87:4a:d8:ee:f0:
17:1e:2e:4e:9d:9a:b8:82:d1:2d:ce:c4:ec:c4:17:
f0:1a:5c:ca:7f:b9:93:66:c1:d9:f2:00:89:63:ea:
de:ba:ed:53:38:f8:19:be:04:8c:87:dc:ea:51:97:
09:a0:7b:03:63:64:00:0c:5c:f1:ab:29:2a:e7:dc:
1f:d1:67:51:1c:2e:ca:d5:3c:df:7b:18:75:21:49:
4d:9b:fc:5a:cc:a6:bf:45:49:f1:fd:7f:2e:c5:39:
11:c4:d1:9c:02:45:ed:66:b9:31:82:ad:95:97:2b:
d2:d0:d8:c0:f4:f8:b9:75:6d:79:bc:35:91:8e:99:
35:40:30:6e:e7:f2:3c:43:1e:4c:b0:40:f4:de:c2:
a1:cc:16:39:93:97:53:69:b2:77:fd:a8:8a:dd:ac:
6c:ed:9c:b3:85:2b:5a:24:0c:04:0d:36:4c:1a:08:
2e:67:bc:c2:71:94:5c:bd:9d:12:0a:fb:73:56:13:
7e:cb:84:c4:49:98:6f:1d:8a:e5:00:06:7a:e5:57:
89:91:88:08:81:e5:2b:87:7e:3c:b7:2d:67:16:a4:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E6:87:A9:20:B4:0A:60:17:C7:B1:AF:DE:BF:4C:C9:54:7C:2E:B2
X509v3 Authority Key Identifier:
keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:83:8f:a1:c3:77:d3:af:49:e6:58:77:f0:b0:ad:71:6d:82:
1e:12:f5:ae:30:8e:31:60:8d:97:ad:51:25:85:95:55:97:b1:
01:9c:d6:e8:f2:a4:61:89:c9:bc:ed:ad:d2:6e:14:5c:46:ff:
55:80:fe:70:41:d6:2e:f3:1d:d7:77:42:9a:bd:62:7c:a0:e7:
e2:16:58:7a:24:9c:5e:0e:a4:2e:be:ad:ae:b4:6a:76:ca:2a:
05:07:10:3c:2b:96:92:4f:be:fa:53:22:80:cd:42:41:6e:8c:
a0:62:5b:c2:7d:9d:d1:7a:87:48:cc:dd:2a:a5:73:24:0e:f0:
bf:0a:a1:fb:eb:42:d1:6c:44:69:f3:4a:56:42:95:28:d7:02:
40:ea:32:9b:6b:75:cc:6d:5f:21:1a:61:77:8c:78:78:79:85:
4f:80:fd:3a:97:a4:04:9b:ce:f2:d5:00:c6:da:a6:cb:55:6e:
eb:f6:23:eb:b5:14:a8:f6:fa:bd:cd:fc:1c:02:9e:b2:99:b9:
7f:bf:47:2b:5d:11:32:71:5a:11:a0:09:c7:3c:e7:4d:b1:d1:
3a:f6:03:9d:48:a9:d5:ed:ce:d0:f9:0f:20:82:df:70:6f:36:
fe:91:38:6a:b4:cf:49:2f:72:51:82:b4:ab:53:59:41:a8:35:
ab:a1:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:22 2026 by rpki-client