
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json)
Hash identifier: Gba9RY3FpsWDfulYGUi15+l/N6CSmGdsITNKzSR/O2A=
Subject key identifier: 47:2A:44:2D:B6:C2:2D:88:BB:76:34:91:76:27:8F:FB:95:C8:7B:3B
Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Certificate serial: 0997
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
Manifest number: 098F
Signing time: Tue 12 May 2026 20:04:05 +0000
Manifest this update: Tue 12 May 2026 20:04:05 +0000
Manifest next update: Tue 19 May 2026 20:04:05 +0000
Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: mVxtUXlh3B1N4vh7Re61J+lro3N2gFJwX8zp6OPr3Hg=)
2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: OzlAv6KjQltx6nWptS2CfrjVYRlijYIMI9XGPfT9vJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455 (0x997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Validity
Not Before: May 12 20:04:05 2026 GMT
Not After : May 19 20:04:05 2026 GMT
Subject: CN=6a0387b5-0d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:01:07:94:22:78:d7:c8:3d:d7:61:cc:1f:
13:79:87:a1:9a:cf:3a:fd:cc:14:4a:9a:a6:37:7d:
41:e0:4f:76:bc:3a:9d:60:ff:be:89:eb:98:8e:2c:
2c:af:db:62:2e:b6:cd:44:3a:0e:d3:cb:6b:eb:73:
fd:43:2b:32:dd:d6:ea:07:86:a0:7f:aa:ba:87:a9:
35:3b:2b:46:0e:5f:20:f4:24:93:b2:b4:61:b9:41:
e6:af:9f:d9:bc:f4:33:4d:52:45:8b:33:ee:dd:50:
9f:37:d4:a5:f0:fb:5e:83:f6:74:f2:29:07:47:28:
c0:19:78:19:0e:65:06:6b:40:d5:84:d1:c3:0e:3d:
ca:e6:36:e8:22:39:dd:84:59:cc:67:d2:4f:99:49:
bf:ff:90:92:1d:20:67:b3:c7:c9:26:7e:65:cb:42:
57:71:27:d4:66:b8:10:f0:62:92:9a:08:ef:ce:57:
d5:33:1c:a6:0c:bb:9b:54:df:e2:4b:fc:6e:0c:e1:
69:04:86:96:a2:be:55:ae:f9:3b:f9:33:0a:87:be:
5b:c8:c1:b5:82:1c:b2:46:60:13:76:0f:1a:4b:77:
b9:4a:a2:83:92:62:2b:0d:64:4b:5b:f4:b4:fe:f4:
13:40:8b:5e:74:59:b6:0e:96:4f:62:e2:3f:3d:d3:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2A:44:2D:B6:C2:2D:88:BB:76:34:91:76:27:8F:FB:95:C8:7B:3B
X509v3 Authority Key Identifier:
keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:83:54:a6:ff:3c:27:08:d2:88:74:16:52:de:fa:69:9c:5a:
e6:c5:91:28:21:9d:3e:c0:53:d4:ef:89:0f:5b:b0:c0:6e:c4:
d6:0c:78:4d:c0:ec:c5:f0:82:94:a6:9f:58:13:08:51:a0:3e:
bd:9f:bd:34:65:ad:34:65:7f:ac:06:01:54:01:3b:fc:40:58:
33:4b:b6:37:f0:17:2f:08:91:a2:be:84:fa:fa:d7:ed:b0:40:
96:ed:8d:2d:a7:28:97:99:9c:df:66:75:0b:a7:52:fb:f5:4b:
01:c5:d1:c1:09:90:21:ed:50:98:ac:7e:bc:7d:95:f1:9b:5b:
3d:f1:b2:eb:29:d7:d2:bd:51:85:f4:42:9c:3d:21:ce:2f:e0:
04:fc:2f:18:5a:d8:fc:c7:aa:90:64:51:53:94:05:c8:cf:9a:
3d:b1:9c:e9:2a:bf:97:5b:8b:5f:41:97:ad:e7:3f:8f:cf:ea:
81:2d:de:5a:80:d5:08:a9:7b:f5:4c:ae:12:8c:e8:b1:1b:5f:
1f:51:6e:c6:65:58:30:a9:38:2b:2e:73:1d:44:3f:84:95:85:
28:78:8a:97:a7:5c:b3:82:9b:07:63:90:32:1d:3a:0a:0b:e0:
21:42:4c:ee:82:5f:d8:bb:be:c5:ed:4f:49:a1:fe:0e:e9:c7:
2d:57:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:08 2026 by rpki-client