
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json)
Hash identifier: 1nxroJD2JFQjJCPa8fjA25e5AD5hE7g5k/045CcQZvA=
Subject key identifier: D5:92:57:C9:DC:6D:D8:AA:CC:07:67:C8:C5:DD:C7:C4:ED:00:B4:69
Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
Manifest number: 021C
Signing time: Mon 11 May 2026 02:53:04 +0000
Manifest this update: Mon 11 May 2026 02:53:04 +0000
Manifest next update: Mon 18 May 2026 02:53:04 +0000
Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: vmUfDaeR+4i1BViRz2swl3RLZoxPngisAy8uLZJjv2M=)
2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: tV7zN4p6YBZjKHrlAaXgAexa7jVk375T1BwHlahtKKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Validity
Not Before: May 11 02:53:04 2026 GMT
Not After : May 18 02:53:04 2026 GMT
Subject: CN=6a014490-a610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:40:54:33:76:b3:fd:3e:8b:cd:c0:ff:5e:
0f:7f:3e:a4:0e:26:d3:4f:49:27:80:4c:c6:1c:ac:
07:69:1d:f4:a9:ba:b4:5d:88:2a:e7:9b:df:6c:79:
3d:d7:f8:cf:47:2d:3a:d8:3e:aa:c1:69:eb:1b:a0:
82:da:63:1d:05:08:e1:5c:1b:ff:14:9c:5c:15:31:
5a:b3:13:38:3a:24:a1:17:d6:c0:c2:5d:a5:5a:d8:
ee:45:57:97:ff:6d:34:b9:62:37:e8:17:93:c6:24:
ef:fd:df:f4:23:14:af:02:9e:f7:da:3c:5c:70:ca:
dd:a1:ed:ca:1b:44:d8:9c:ce:d8:c4:2c:e1:47:af:
35:03:39:66:76:54:51:a6:bc:ed:76:0f:c1:32:d1:
69:f4:9a:6a:f0:d4:78:13:32:71:35:8d:56:18:20:
1a:07:4c:10:7a:1b:eb:5a:0c:00:43:6b:dc:c1:86:
be:0c:01:18:b5:e8:b4:38:d2:e7:d7:d8:a9:b6:14:
ab:23:e0:96:39:57:8b:46:b2:2c:3a:5f:fa:21:3a:
c7:ee:d0:fe:bd:c5:92:77:0d:29:33:58:7a:cf:a2:
c5:d4:ad:53:a3:73:b8:88:c4:d4:b7:21:75:05:ea:
63:bc:4e:13:67:08:23:f9:16:01:c7:0b:b9:61:02:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:92:57:C9:DC:6D:D8:AA:CC:07:67:C8:C5:DD:C7:C4:ED:00:B4:69
X509v3 Authority Key Identifier:
keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6d:68:4f:56:43:30:93:67:9c:5b:33:5e:b4:ab:d2:cb:2e:
1c:20:de:93:9c:94:92:0e:9e:75:a9:48:29:95:84:e3:ea:d6:
1d:58:e8:e2:a0:93:35:7f:0b:79:b4:10:96:6c:e3:b0:80:85:
a1:f8:10:8d:4e:b6:a1:13:ce:e7:21:2f:dd:da:7b:e9:d3:42:
27:be:27:55:12:ff:8c:34:e0:3a:1e:55:a6:f9:fd:0b:39:03:
28:a8:c0:cc:50:e8:69:2a:e5:9c:3e:9b:28:4c:2b:b4:f7:fd:
f8:1a:c0:c0:2d:a2:03:77:0a:9d:95:45:03:25:21:35:9a:fa:
1f:46:c4:75:82:cc:5d:cb:f8:a9:31:79:6f:00:26:9d:5f:ed:
57:47:25:36:82:ed:6a:7b:23:22:8d:f9:59:29:76:d3:0a:6a:
39:f6:ec:3b:7b:44:18:86:28:00:af:f9:33:77:af:5d:3f:f7:
93:f5:2e:a9:9a:78:66:0c:73:59:bf:78:01:4f:73:57:07:86:
af:05:b2:eb:d1:5a:09:85:55:17:e5:65:8c:67:61:a3:f7:d2:
12:5f:68:f0:e6:49:73:e5:52:97:33:2d:b5:8f:ea:58:1a:41:
e6:81:3a:d1:42:41:b5:2e:5c:ff:14:74:7f:f4:fb:8f:52:6f:
16:7d:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:40:41 2026 by rpki-client