
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier: BNzYzWykSbeiRP3nI0V3O36xxTwersGdk0xN8NQtaWA=
Subject key identifier: 91:1D:E5:ED:FB:AD:29:CB:4C:46:43:51:74:C8:E4:79:B7:D1:4D:38
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 0512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number: 050B
Signing time: Thu 16 Apr 2026 23:32:36 +0000
Manifest this update: Thu 16 Apr 2026 23:32:35 +0000
Manifest next update: Thu 23 Apr 2026 23:32:35 +0000
Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: 53xYX93kmGwv52VDhzas1tEVx9WcaFYuGSfQ47pmPII=)
2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: FCX1sDJ2lcFZeK81Yi1zKSTIFWnL4W2ESjtnUZrEFH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Validity
Not Before: Apr 16 23:32:35 2026 GMT
Not After : Apr 23 23:32:35 2026 GMT
Subject: CN=69e17194-34e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:40:fa:fd:32:04:8e:b2:21:76:78:d1:eb:
04:86:e5:c4:1e:94:dc:23:48:5a:62:ec:a0:a3:b9:
a7:3e:c8:ea:c8:a9:7b:4b:f4:3a:63:b6:51:5f:66:
d1:20:3f:b8:1d:78:1e:c3:c5:d9:e8:6d:77:8b:53:
57:cf:b5:6b:a2:fc:02:73:b5:eb:27:ac:50:da:fb:
8b:3e:e4:62:1a:f8:61:1a:c8:08:9c:1e:8b:95:41:
d2:f6:7f:14:23:26:56:be:8b:d9:87:f2:20:87:a5:
da:c9:20:f5:43:b1:74:5f:81:57:fd:2b:9e:39:9e:
b3:36:d4:07:b0:30:e9:e6:49:3c:14:f2:56:06:d5:
8b:34:4d:c6:c2:4f:97:e2:ce:0b:6b:80:f9:64:16:
2f:87:d8:9d:3a:52:dc:16:69:f0:f6:ef:7e:02:f9:
15:07:1b:6f:de:7c:31:80:8c:fd:3a:81:70:2f:df:
88:d3:3f:f9:0e:87:db:0f:8b:a4:d7:20:a6:77:a9:
0a:8c:23:74:a3:b2:12:f9:de:96:82:55:1f:26:00:
8b:5d:13:32:f9:8c:f3:c4:1a:a4:b5:10:f1:71:67:
f7:ba:f1:cf:c1:99:67:95:aa:c9:37:b1:e9:c1:ca:
75:76:d6:38:01:56:d6:52:06:28:81:46:2b:7e:af:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:E5:ED:FB:AD:29:CB:4C:46:43:51:74:C8:E4:79:B7:D1:4D:38
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:61:86:97:75:a5:80:5c:92:7a:af:47:c5:25:f7:81:77:b1:
31:03:51:d0:6d:e9:97:92:76:32:52:c8:f5:72:84:ab:8d:31:
8c:e3:0a:a7:2d:22:33:38:b5:de:3a:5a:b4:1d:e4:bb:15:cd:
4e:b5:33:2a:3f:ec:be:76:7c:f7:3d:02:7e:2a:4c:ef:ee:c5:
14:7a:01:44:05:9c:ee:cd:10:08:0c:e4:83:6c:28:4d:41:21:
fb:1c:8c:c8:08:1b:02:16:63:37:5a:fa:10:59:48:ee:a0:4b:
bb:b3:0a:c2:85:a3:e5:b2:cc:15:2a:f0:45:be:77:a7:f8:b2:
e6:ed:8e:e8:e2:dd:4f:83:95:b9:6e:9b:46:b7:1f:95:fe:4d:
47:6a:3a:75:43:c3:db:4c:c6:b7:e3:45:a9:65:dd:6f:1f:d6:
1d:6e:a0:3c:94:de:12:c5:c0:7b:1a:1b:48:96:13:11:06:0d:
54:66:de:a1:94:35:32:ef:9d:5c:2a:33:f6:c8:4d:47:83:65:
18:03:59:75:99:04:00:bc:88:bc:81:13:52:de:d8:b2:42:cd:
ab:dc:e9:68:fe:b3:1d:d3:e6:e4:8a:25:f0:91:f1:b4:68:e2:
03:4f:35:f0:ae:c7:23:79:92:f2:ea:e9:93:37:3c:b9:12:0d:
62:01:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:44 2026 by rpki-client