
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json)
Hash identifier: YvMl24t9gRl2moYK0gSpy5N+mSjfUlBoleoYFPKO9nU=
Subject key identifier: 39:96:34:A7:60:7B:8D:8A:13:92:05:D0:0A:F0:17:49:80:04:9E:38
Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Certificate serial: 09BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
Manifest number: 09B3
Signing time: Wed 22 Jul 2026 20:22:05 +0000
Manifest this update: Wed 22 Jul 2026 20:22:04 +0000
Manifest next update: Wed 29 Jul 2026 20:22:04 +0000
Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: QuoS8wAVQPTCYG12SN5FgN+kNKfsc6lsU8lbpsI9Urc=)
2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: OzlAv6KjQltx6nWptS2CfrjVYRlijYIMI9XGPfT9vJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2491 (0x9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Validity
Not Before: Jul 22 20:22:04 2026 GMT
Not After : Jul 29 20:22:04 2026 GMT
Subject: CN=6a61266d-d5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:73:b9:12:f1:d0:90:c8:7a:c2:59:17:80:
86:67:96:1c:f0:3b:76:4b:50:f6:b8:e6:7a:6f:4b:
11:4b:21:be:3c:b8:be:ba:b0:e1:1a:eb:0a:64:fa:
05:94:2e:65:a8:4f:82:bf:5b:e6:f4:90:e5:8b:36:
6a:ea:32:f2:66:04:65:35:0e:c1:4c:22:1d:9b:43:
c1:c0:90:c6:ad:1a:e9:33:5d:8b:22:46:6b:5d:d2:
44:1f:c0:81:54:42:4e:e9:61:30:c8:63:7b:ed:5a:
8a:19:e5:39:47:d3:88:b2:de:a5:b7:0d:45:bc:c6:
5f:00:7f:7d:42:a6:f3:40:6e:e7:74:a4:f7:9e:a3:
33:b3:e9:f5:a4:19:72:cb:57:8b:15:a0:df:9b:49:
51:1c:70:b5:6b:33:c5:39:6c:88:13:c2:75:fb:6c:
87:a0:6c:5a:bc:a3:d4:c3:79:e5:e8:9e:d2:51:8f:
af:72:d1:1c:bb:23:60:68:57:71:f1:d9:02:b9:0a:
50:17:f6:d3:04:1e:47:ad:63:e8:85:ab:8a:2e:7f:
28:ff:07:2c:49:f7:7e:09:8a:66:29:26:cd:b0:5a:
cb:53:16:19:d1:aa:ce:84:b0:21:37:f6:6d:4c:da:
e9:a8:ac:5f:e6:57:c9:8e:83:0c:47:24:0f:ba:b1:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:34:A7:60:7B:8D:8A:13:92:05:D0:0A:F0:17:49:80:04:9E:38
X509v3 Authority Key Identifier:
keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:90:44:f9:36:b2:34:f1:4a:59:7d:a6:46:85:d6:b0:28:94:
a3:57:09:b1:51:23:d6:15:eb:70:4e:e0:ba:0f:c6:9b:01:db:
c2:e3:ef:74:00:79:6d:43:8a:a9:41:8c:2b:43:03:75:91:6f:
b4:53:72:ca:bc:13:99:20:6d:45:ec:bf:92:15:61:53:e1:f4:
ee:7b:ce:a4:62:a2:fd:f5:21:36:63:44:00:8a:73:45:07:c1:
d7:0c:f1:79:74:4a:7b:23:76:ff:f6:7f:6d:cb:d7:e6:92:a6:
f5:43:0e:3d:9a:b5:84:07:40:27:e6:6f:da:c5:6d:f0:5a:36:
78:ce:cb:a8:0f:e6:6b:09:91:77:ca:17:56:d5:95:64:9e:bb:
07:13:61:68:4d:09:38:a6:0e:f9:16:d0:52:dd:a4:a8:e5:f9:
81:0a:fa:bc:86:3e:58:23:0b:4d:e5:86:d6:e9:4b:f8:d2:bc:
b4:61:e6:fc:11:f2:ad:c2:ab:ff:fa:8e:5c:c5:a7:26:e6:28:
f5:1b:cd:b6:df:ed:3d:75:e4:49:e2:4e:09:34:1d:dd:a3:68:
54:5d:9e:2f:6c:f8:92:08:2c:54:70:e1:a5:fa:50:30:49:0e:
43:8e:a1:d1:db:bc:87:95:33:d6:4f:83:b5:f6:30:bd:db:aa:
97:c2:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:04 2026 by rpki-client