
$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json)
Hash identifier: SR6PuVShhkFODjAVH2CpV+4fZaGuDEUi28Bi4r97K3Y=
Subject key identifier: DB:36:54:AA:B2:FB:52:B2:5A:59:01:6A:86:39:5F:AB:CF:12:7E:95
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
Manifest number: 018E
Signing time: Sun 01 Mar 2026 05:25:32 +0000
Manifest this update: Sun 01 Mar 2026 05:25:32 +0000
Manifest next update: Sun 08 Mar 2026 05:25:32 +0000
Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: ratj6/10oh93WlZhFibYwnX3TZ56MpMPy/PkaAprb84=)
2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: jfiqYVTlh3b1NMBZHJzUtvWg0KMk02Asv6Lc0unQcHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Validity
Not Before: Mar 1 05:25:32 2026 GMT
Not After : Mar 8 05:25:32 2026 GMT
Subject: CN=69a3cdcc-13f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:19:d4:2f:b3:49:58:4d:d5:ae:1e:f2:d7:
24:d7:69:7a:a3:70:4f:de:5a:3d:ee:55:a2:e8:b6:
9b:4a:f0:21:25:8b:fc:8a:54:e5:23:8e:e8:c7:77:
1a:31:9c:f8:d3:fa:ea:cf:89:08:17:a6:e3:16:d6:
ae:4f:d6:00:02:78:ab:56:b4:4c:38:0f:22:0f:69:
cc:1a:d7:60:de:94:50:19:73:6d:5e:bd:ad:a5:40:
be:02:87:ba:6a:f3:4b:df:64:16:a8:14:1c:46:9e:
25:36:3c:d8:75:a6:5e:72:78:8e:e9:64:f0:92:67:
16:66:e7:37:03:87:20:0c:13:ce:61:83:a0:b4:03:
1a:15:ad:75:c4:30:24:96:05:ff:3c:ff:48:d7:16:
bb:7f:6e:49:0d:3c:ac:1e:dc:2e:3e:9a:45:77:63:
1d:0d:4d:14:dd:dd:4f:90:8d:50:68:af:51:5b:f3:
6a:2e:df:14:ce:7e:5b:60:59:c6:20:79:c2:13:e4:
89:3e:8f:72:19:fa:29:d7:60:fe:cf:21:61:8a:f3:
7f:45:a7:8b:b6:f3:e7:f9:49:f5:dd:3a:72:cf:e0:
06:b5:bf:8c:15:da:c6:94:1b:bc:84:e6:04:b6:e2:
56:98:7c:2e:fd:68:34:be:0b:42:c0:a0:21:a8:cf:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:54:AA:B2:FB:52:B2:5A:59:01:6A:86:39:5F:AB:CF:12:7E:95
X509v3 Authority Key Identifier:
keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6d:b2:73:1e:10:81:3c:15:b9:e7:de:6d:9a:67:02:1b:b0:
1d:e9:e0:dc:54:5a:be:dd:4b:e0:6d:d5:4a:3d:79:56:5b:d4:
e1:5f:d9:38:4d:bc:30:62:69:59:89:b1:bd:8c:3f:1c:c1:ff:
d7:95:19:0c:96:d0:11:68:93:17:44:9e:01:ad:76:1e:54:92:
1e:b5:4b:64:8d:05:6c:99:3b:01:31:80:93:e4:0d:58:6b:96:
4b:72:82:d2:27:d1:3d:42:b3:cd:0f:b7:06:8d:a3:3a:89:b8:
da:aa:e8:92:65:dd:ae:d0:5e:71:12:87:57:83:a7:16:94:7e:
e3:54:6a:3e:a0:6b:11:16:92:98:77:63:db:ee:ae:4f:cb:5b:
74:f0:de:51:3d:9f:ce:3d:0a:10:b8:7a:11:59:58:8d:b3:f2:
7d:23:2d:59:08:23:7d:ac:a5:ab:fc:9e:cf:1d:03:f3:53:7e:
0c:f4:81:d7:93:5b:10:56:b6:da:40:61:2e:a6:95:7d:e0:25:
4d:1e:63:27:7a:a1:31:92:21:69:41:80:e9:d2:bc:b9:d5:55:
d7:23:f8:28:8b:74:2c:69:6a:74:e1:20:95:9c:c8:b5:12:62:
de:4f:8b:79:47:80:d0:bb:f7:28:4e:7b:8f:86:bc:3d:72:96:
e5:7a:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:40 2026 by rpki-client