
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json)
Hash identifier: 1OGwZsYeK0K9CmnwF7xVjg3BAF43xNZAk7emN3TulB4=
Subject key identifier: 5B:B0:A9:7B:52:17:45:A3:8F:17:48:93:CB:BE:E0:F9:13:90:78:FE
Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
Manifest number: 01CC
Signing time: Thu 23 Jul 2026 05:08:13 +0000
Manifest this update: Thu 23 Jul 2026 05:08:13 +0000
Manifest next update: Thu 30 Jul 2026 05:08:13 +0000
Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: 4wiQHvE2ny02G0HXzimbDQuQX35rxWyL7aDhxMoxbVw=)
2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: 26WEtM895FnGR/kXovwY20hCbFpq6hJQTsJq8LOOA8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Validity
Not Before: Jul 23 05:08:13 2026 GMT
Not After : Jul 30 05:08:13 2026 GMT
Subject: CN=6a61a1bd-3eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:cc:f1:64:5b:c6:a3:a5:d4:ab:d2:38:8c:
c9:31:bb:0e:3b:28:91:99:1d:08:05:e8:7f:0d:6a:
0d:88:a1:fd:02:9a:3a:68:30:f5:23:d7:8a:71:e8:
f9:81:a2:fc:42:6e:f1:7b:6e:c1:b9:68:d8:71:7d:
99:c7:1a:be:70:aa:0f:fd:6b:d8:29:30:1a:97:e9:
8a:df:d6:5e:f1:b1:0a:54:ce:06:8e:94:87:fe:94:
a3:cb:ea:a3:6e:72:67:82:d6:f3:67:2d:6b:4f:6c:
22:55:96:3f:45:3c:d7:11:9e:4c:63:76:86:67:c4:
61:c4:3d:bc:e0:fa:ce:f5:1a:d2:83:fb:b3:11:94:
06:9c:d3:af:e0:6c:c2:42:a1:c8:72:9a:bc:69:42:
af:3e:7c:a0:5c:37:bf:be:c1:c9:f3:00:69:2d:97:
4a:9a:ea:ac:73:c5:72:82:6a:5c:c6:a7:e1:cc:a5:
d1:55:43:6b:48:11:4d:12:08:dd:0b:9d:31:c5:a2:
6a:ef:49:80:fb:15:69:63:e8:59:9d:84:b0:70:75:
19:32:e9:e5:88:5f:0f:23:92:1f:b0:57:0e:aa:d2:
82:0d:1b:db:00:01:58:28:6a:52:08:ba:51:37:b6:
07:a6:75:c2:03:e3:36:96:2a:c9:8c:28:6c:6c:c4:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B0:A9:7B:52:17:45:A3:8F:17:48:93:CB:BE:E0:F9:13:90:78:FE
X509v3 Authority Key Identifier:
keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:ac:5b:6f:33:d5:80:37:c5:52:68:3c:56:c4:88:94:79:
fb:13:f6:38:dd:dd:8f:ed:dd:f7:69:01:e2:07:d7:c0:24:fc:
e6:33:b5:87:73:2d:a9:09:65:81:30:aa:00:a7:ff:40:9f:88:
9a:e0:a9:29:ad:aa:95:af:75:d7:f1:e8:67:9e:de:15:03:7e:
42:9d:11:ba:3e:8e:27:23:6f:61:d6:b9:6d:47:36:0b:dd:f7:
a9:47:d3:3c:27:e4:7f:c6:a1:74:9d:d8:e7:84:4f:08:82:b2:
02:2b:ef:4c:d4:0a:01:bd:09:c0:52:cf:9b:89:d7:30:6b:f7:
f8:ec:fe:d7:6d:93:c9:0c:fb:11:a0:b0:2f:df:c9:05:4b:81:
78:02:70:5f:7c:f4:5f:87:bb:f0:de:57:99:45:8b:36:76:7c:
cf:e1:7a:8e:75:2d:3e:ff:2b:66:09:ac:3f:ce:87:fb:5f:66:
aa:dc:6a:a8:7a:19:be:ff:28:8b:8c:4d:13:c1:53:a8:0a:e1:
15:bf:49:d4:2e:f3:66:7c:1e:48:58:84:53:b4:2b:bd:68:72:
5c:73:6d:35:37:27:d9:28:91:22:81:6a:70:68:c5:c7:0a:10:
cb:57:22:bd:47:28:83:62:54:84:67:6e:61:96:df:c3:db:29:
7f:35:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:33 2026 by rpki-client