
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
File: YOVPYFHttB6nqVCJbNm71nASDWM.mft (raw, json)
Hash identifier: hM0EEkhi9UZGeTTxLfY4oRj9y6goA2r6cUQIv2+LOpo=
Subject key identifier: 76:41:08:09:71:50:23:69:3C:41:FF:76:AC:6B:8B:4E:4C:17:7C:B6
Authority key identifier: 60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63
Certificate issuer: /CN=A91FF89A/serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
Manifest number: 01AA
Signing time: Thu 23 Jul 2026 05:29:35 +0000
Manifest this update: Thu 23 Jul 2026 05:29:34 +0000
Manifest next update: Thu 30 Jul 2026 05:29:34 +0000
Files and hashes: 1: YOVPYFHttB6nqVCJbNm71nASDWM.crl (hash: x+OGjyHHwgzTjNm5rCXiDQit9MQcPam2VPZ1BTTpXas=)
2: 99AA3580F88611EE8E9B3E71C4F9AE02.roa (hash: bPEX0dVvMeMHuF9ZTGsIQels0ly/XiaUVU8i8aAIXrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl
rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF89A, serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
Validity
Not Before: Jul 23 05:29:34 2026 GMT
Not After : Jul 30 05:29:34 2026 GMT
Subject: CN=6a61a6bf-5609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:d0:81:1f:8d:7c:52:a0:fa:f6:bb:30:9d:
5e:2f:c7:6d:df:ec:cb:8a:e8:f9:95:a1:8c:5e:f9:
5b:f3:05:7b:b6:ff:9a:e0:8c:0b:d3:93:0f:5f:33:
95:0d:bc:ed:01:a7:d2:6d:89:3b:6f:de:36:7b:aa:
78:94:60:b5:f7:94:b5:d1:09:bf:f0:ed:bd:1e:45:
b7:95:4a:84:fc:0d:3c:f8:be:8a:90:fa:6b:1a:46:
c9:f2:58:1a:34:c5:af:41:07:e7:32:43:20:5d:44:
7f:db:6f:92:79:93:81:87:d3:39:96:50:c3:2c:f3:
a1:eb:3f:0e:08:8d:53:2b:c6:fa:01:58:f3:5d:bc:
cc:ac:f3:1b:65:94:1c:ad:8f:f9:a8:90:d9:04:69:
73:16:a2:f6:3e:0a:e8:9c:48:ea:cc:a9:99:31:c1:
a9:42:ba:3d:80:61:9f:de:48:30:0d:9a:c0:f5:b5:
a5:12:5c:73:15:80:41:12:09:f6:13:d1:99:d8:af:
b8:46:9d:fb:e5:bd:a5:9b:c4:6c:03:81:b3:f4:02:
4e:cb:4c:8e:2a:eb:cb:8f:2c:22:62:04:99:62:5e:
c6:06:9c:77:8a:21:7f:57:19:cb:6b:4b:9f:96:e3:
68:66:02:ad:84:31:c3:49:f5:7d:a4:b8:3a:b8:70:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:08:09:71:50:23:69:3C:41:FF:76:AC:6B:8B:4E:4C:17:7C:B6
X509v3 Authority Key Identifier:
keyid:60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:d0:c2:f0:eb:b8:f7:4e:07:f5:71:f0:41:5a:79:f7:cf:c4:
44:99:7b:59:79:d1:85:ea:7f:e2:9e:17:bd:21:0f:ba:de:3a:
dc:73:6a:18:9c:a2:32:ab:4b:47:f0:34:49:55:bf:f3:5a:de:
3d:b9:af:ff:98:87:16:2d:64:dd:f7:0f:8a:46:ea:bc:7d:ea:
9c:4d:3b:5b:73:10:8c:94:1e:fd:10:bb:a6:7f:30:92:75:90:
8c:e3:20:de:c2:a2:09:e8:2e:54:90:ad:a9:e9:22:aa:cc:b9:
7a:1b:8e:00:b2:3a:3c:23:7d:f5:97:93:c5:65:10:30:a1:2c:
c1:11:b2:2b:44:24:e7:b2:ba:26:c3:70:46:2d:31:81:20:2f:
63:01:45:da:ec:0a:ef:77:9d:df:5c:af:b8:37:28:fc:3f:eb:
52:e3:71:4e:79:16:fa:5b:75:c4:b5:43:10:87:21:e8:e6:f2:
5d:4e:47:ff:1b:15:aa:cd:d8:55:2c:29:69:7f:3b:7a:f3:91:
f3:51:1b:86:e4:9f:7d:e6:62:bf:b4:a0:a9:f2:7d:07:91:b2:
ec:c6:a5:cf:c1:c1:6a:f7:6e:aa:24:7f:a1:df:40:a1:15:40:
eb:35:b9:d9:b1:00:54:30:e7:bf:c0:bd:02:8a:f9:9d:74:7f:
80:2e:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:50 2026 by rpki-client