
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier: t2FciKlra/+eHrr+Tr1FMt9CkjkSUwkGug+lA69gLKI=
Subject key identifier: 9B:88:88:51:42:8F:9D:9E:62:E2:FF:44:B0:F1:6A:14:53:91:9D:02
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 0545
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number: 053E
Signing time: Mon 27 Jul 2026 00:26:14 +0000
Manifest this update: Mon 27 Jul 2026 00:26:13 +0000
Manifest next update: Mon 03 Aug 2026 00:26:13 +0000
Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: a07fek3Dzpp3tItuK+bmZxcRPmWOWoD88KikB7TMaJI=)
2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: FCX1sDJ2lcFZeK81Yi1zKSTIFWnL4W2ESjtnUZrEFH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1349 (0x545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Validity
Not Before: Jul 27 00:26:13 2026 GMT
Not After : Aug 3 00:26:13 2026 GMT
Subject: CN=6a66a5a5-e2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:63:66:ed:53:8e:b2:5f:69:fd:9a:c1:57:
b3:c4:8a:b4:9f:5e:f2:d8:ae:21:19:81:c2:25:8e:
4f:af:49:80:64:05:6f:05:a7:a3:61:a0:71:f4:c8:
83:b1:a9:7b:fe:8e:c5:1b:fd:c3:97:a6:62:e7:85:
82:8c:2e:64:8b:17:1d:27:ff:32:0b:5b:c6:c6:98:
36:34:cf:c6:b8:d3:a3:17:6c:fd:2d:ab:31:d4:51:
3c:de:e4:78:dc:7b:fa:74:7f:0d:a0:10:c0:16:df:
9f:06:ab:69:a4:5d:4b:2d:a3:90:30:c5:e5:42:08:
33:22:fa:c5:68:8f:27:b4:c2:f9:bf:4f:96:d4:e0:
3c:a6:eb:11:a2:48:af:1b:68:a9:cd:ab:15:1b:54:
75:b8:f4:5e:77:24:51:75:61:52:a0:e0:3e:f5:1d:
4d:e2:a0:91:82:5f:ee:37:77:85:8f:1e:47:a9:bd:
05:36:8c:a8:75:7d:9e:80:b4:5e:5f:b1:aa:79:5b:
22:76:ac:bb:39:da:aa:43:dd:3d:94:e0:b5:de:40:
ac:cc:1d:32:0b:6e:26:77:9a:97:83:36:de:41:76:
86:e2:f0:4a:63:65:66:37:bf:e3:4d:f7:42:49:08:
06:86:32:cf:85:07:12:3a:3d:cb:77:bc:79:99:63:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:88:88:51:42:8F:9D:9E:62:E2:FF:44:B0:F1:6A:14:53:91:9D:02
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:1b:5b:cc:67:ab:65:3b:97:a1:ab:af:f7:f3:97:1e:1e:86:
23:d3:23:d7:48:62:f1:98:f7:ab:d7:9d:9e:cf:f5:2d:f3:08:
db:ac:d2:86:70:52:37:fc:ce:25:a7:c2:30:94:f3:b3:7c:6c:
3d:ec:1e:ce:e3:0a:67:e0:10:b4:96:35:4b:c8:cb:5a:57:54:
42:4e:06:90:88:15:3e:1d:b5:3d:fe:f3:1f:1e:66:9e:92:34:
db:ea:05:b7:bb:c8:8a:ca:b5:f5:70:0a:34:08:ae:d8:c9:12:
f9:ea:1a:7c:29:70:a2:5f:c5:4a:63:ef:73:b0:25:25:51:02:
dd:b4:2a:8e:1f:fc:0e:3a:e4:45:6d:a0:08:d4:f9:55:e9:06:
ee:f4:9e:01:b0:39:f7:70:eb:68:5b:df:ba:63:99:51:e8:0d:
43:33:7f:05:0b:d4:16:93:a4:e7:ca:63:2a:42:29:1d:22:d1:
09:78:f3:73:22:97:f9:32:37:bb:03:05:3e:de:ae:f0:7f:8d:
c4:3f:5a:44:29:57:f6:25:5f:68:f4:8e:26:43:9a:c9:ec:1d:
ff:b3:cc:26:58:74:1e:10:60:13:00:6d:49:ec:ca:25:b8:df:
db:c4:02:4d:24:68:4f:3b:22:c0:b9:4f:fe:72:c5:26:0c:71:
7e:50:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:21 2026 by rpki-client