
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json)
Hash identifier: b0QlCFheguKWgLA8jIjijlZPe0+L6BBfGoDKlrr0DzM=
Subject key identifier: 4F:DE:CD:85:C7:A8:98:21:19:CF:E8:13:F4:74:51:8D:50:F1:7E:74
Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
Manifest number: 011B
Signing time: Thu 23 Jul 2026 07:34:51 +0000
Manifest this update: Thu 23 Jul 2026 07:34:50 +0000
Manifest next update: Thu 30 Jul 2026 07:34:50 +0000
Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: cGUeUcvUoIA3MjKKJhjPaPk3eQfPRusGuJLzbWl9RYo=)
2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: IGOt3oAqIKJyRTZpOUfxcvyTfSBEqL1x1Bx1bLVEPaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Validity
Not Before: Jul 23 07:34:50 2026 GMT
Not After : Jul 30 07:34:50 2026 GMT
Subject: CN=6a61c41b-a0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:12:44:bd:14:88:7e:d9:f1:45:86:fb:7f:
8f:18:d0:1c:1f:5b:b3:4e:02:b1:81:57:57:34:39:
0a:4a:82:37:64:15:13:5b:eb:19:f4:ae:ca:98:2e:
96:67:de:12:ad:11:98:23:7c:97:6e:85:7e:29:cf:
e8:07:19:ff:b8:34:9e:fb:30:07:ec:9c:9b:01:b1:
37:34:7a:6d:0d:db:c5:99:0d:a9:53:e4:e9:ab:53:
0e:91:b7:9a:39:df:70:b2:09:0e:42:44:17:5b:1c:
f2:3c:8b:c4:cb:fb:0d:39:b4:07:e2:ae:95:50:7b:
4f:c5:5a:d5:c4:61:da:5a:2a:1e:b5:2b:14:14:23:
0e:22:89:6a:74:d8:55:77:5b:ce:7a:89:f2:39:0d:
d6:db:86:49:76:71:07:3c:8d:82:8a:e7:29:48:e9:
ae:10:e4:46:b2:91:e8:a6:b4:43:57:ea:d2:75:1a:
e8:1d:74:1e:c1:c2:37:75:19:c1:69:39:0c:09:f8:
66:cd:e8:60:97:8c:c3:b8:be:63:90:4b:50:30:1a:
a9:f8:e3:f8:aa:32:38:fa:91:57:27:9e:fb:61:10:
49:af:66:ad:5e:9b:1f:cf:14:47:5c:0f:d6:68:82:
86:37:ff:75:e8:92:8d:b0:bb:48:5b:fe:ac:1a:0a:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:CD:85:C7:A8:98:21:19:CF:E8:13:F4:74:51:8D:50:F1:7E:74
X509v3 Authority Key Identifier:
keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:b1:0e:5e:2c:6d:f6:b2:55:34:80:ec:0d:ca:94:82:3f:21:
41:75:ee:a5:dd:44:f3:d9:68:27:a5:81:6f:43:fd:30:75:e9:
c2:de:46:88:d3:ca:cb:ce:3d:a3:4f:a0:c8:ec:8b:b2:18:09:
1d:31:0f:62:75:ea:b5:0e:25:51:7a:0f:d9:8a:6d:1f:54:06:
32:41:73:84:2d:db:37:b8:79:41:3c:43:a4:4d:3b:5f:5e:74:
63:c2:70:46:46:42:a1:d1:d4:98:d6:7e:a3:1f:55:d1:4e:bc:
bc:d4:12:ae:a5:ef:06:0e:f8:ab:90:5a:9d:bc:5c:a5:8c:fc:
b7:e8:f0:38:62:12:10:31:7d:b4:2f:bb:1b:fd:44:c7:e1:8a:
d6:a5:4c:cc:e9:0b:70:82:ae:f7:10:86:a8:64:49:38:1b:7b:
79:8f:4a:03:85:fe:fc:a1:c4:03:8d:0f:d8:16:9a:c8:25:cc:
3e:e0:6c:d7:8e:df:65:f8:3d:35:c2:91:82:ed:bb:33:82:4a:
a1:6f:29:bc:9a:ed:5c:1e:36:69:bb:42:2f:60:2b:3d:12:9b:
e3:7f:1c:3e:f0:6f:89:3d:6b:d5:c2:51:88:3f:88:44:c5:84:
70:c0:80:95:40:7f:a8:9f:18:b3:4b:e1:0c:af:ca:b0:1d:16:
9d:4b:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:09 2026 by rpki-client