
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json)
Hash identifier: iQ6+iRSHzyoqkngZ4VdDeJpSh7vhtD9OjLCDpovtarw=
Subject key identifier: C7:07:55:22:98:08:56:8B:06:C9:D6:AF:26:B8:D5:E0:1A:C4:E7:EA
Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
Manifest number: 0259
Signing time: Wed 13 May 2026 02:23:24 +0000
Manifest this update: Wed 13 May 2026 02:23:23 +0000
Manifest next update: Wed 20 May 2026 02:23:23 +0000
Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: iRFn5d5QKr9JtxEAplUN532euhKW4BG+YJgcNBW9AdI=)
2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: 3w67fjihibZok1qWjIP39FszAZUqgmCtMKGJLAm88jM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Validity
Not Before: May 13 02:23:23 2026 GMT
Not After : May 20 02:23:23 2026 GMT
Subject: CN=6a03e09c-053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:0d:03:30:b0:43:a5:96:8b:8a:16:cb:a1:
b8:53:b6:22:04:5f:f5:86:41:82:1d:93:7c:f8:4f:
e0:37:4d:35:03:41:64:dc:b5:a4:b8:6e:ae:3c:9b:
4b:64:f8:3a:16:1d:5c:d1:46:4e:13:44:b0:20:8a:
35:df:33:d6:f8:0e:d9:53:e8:35:7c:e6:7e:b6:b1:
f1:7d:c0:48:c6:a0:a7:bd:33:a7:95:a8:f9:d0:2f:
0d:35:de:ad:df:a1:27:57:76:e1:a5:33:a4:c3:d9:
cb:5e:24:66:ba:1d:7b:e0:3d:02:e9:a3:10:be:a7:
16:32:86:a0:04:db:f5:eb:8b:6e:c6:7a:1f:60:25:
b2:dd:b0:f9:c0:67:57:1c:6c:22:66:7f:a0:87:4c:
81:f6:f3:13:8a:1b:d9:9d:f4:13:f3:17:10:c4:60:
72:90:18:c6:13:d1:a3:31:b0:af:02:df:b8:18:69:
4c:5f:d5:02:b8:16:c5:f1:52:7f:29:2c:19:bf:e3:
52:ed:8c:1f:10:b7:7b:d8:40:4a:d9:7b:db:bb:66:
da:1d:7e:e6:e8:6f:fc:9a:ad:73:ac:63:07:8c:bb:
6c:7e:48:13:2f:a7:21:82:6c:9b:97:06:fd:af:bd:
6b:77:16:19:be:30:c3:53:97:d1:53:1c:16:41:76:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:07:55:22:98:08:56:8B:06:C9:D6:AF:26:B8:D5:E0:1A:C4:E7:EA
X509v3 Authority Key Identifier:
keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1f:9b:a9:1c:70:11:fa:66:6f:c5:d4:1e:0d:36:05:64:d3:
94:f0:84:a9:4c:f0:2d:f2:e4:c6:da:c5:ba:24:79:dc:0c:a2:
db:23:5b:7b:d6:ab:e8:a8:10:0d:af:bf:8c:a1:5c:18:47:94:
ac:68:d3:3a:f9:17:33:24:cd:a3:98:10:87:5e:9c:fd:b3:ff:
7e:e2:90:f1:b1:3f:e5:0a:92:a3:2c:ab:1d:54:51:da:cb:a3:
3d:d1:5f:21:17:32:26:f7:ff:d0:6f:70:d9:1a:6e:35:53:c5:
04:c2:cd:4d:ae:41:09:f8:1c:b6:6a:78:6b:55:29:3b:72:fb:
8d:0d:0c:fa:88:ef:52:ac:f9:df:43:c2:07:96:57:70:1e:eb:
de:e5:42:32:27:d2:3d:a5:95:c9:d5:d9:5f:47:29:f2:8c:52:
eb:a7:2d:44:06:38:7e:74:cd:f4:fd:58:9c:88:ab:6c:b7:34:
da:32:7c:28:40:5c:71:d3:7c:05:86:c0:c8:89:78:47:e8:4b:
a5:a6:d3:22:d1:02:9c:dc:93:b2:a7:f4:bb:1b:0d:73:48:ff:
32:ab:6e:b5:6e:15:0d:75:f1:ee:1d:72:8b:f9:80:fb:c7:6a:
22:43:44:93:1c:ef:7b:71:04:9e:2a:8d:54:6a:36:a0:a2:57:
9d:92:3a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:45 2026 by rpki-client