
$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json)
Hash identifier: x8hjGy/0eByeaDYbmmk6G6eDKW6iXTFEGuTw4qoTW94=
Subject key identifier: 3C:AF:D5:30:DE:4E:F1:F0:5B:A1:E1:DF:EC:C0:5E:18:7F:79:A6:1C
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
Manifest number: 01CA
Signing time: Sun 21 Jun 2026 03:50:02 +0000
Manifest this update: Sun 21 Jun 2026 03:50:01 +0000
Manifest next update: Sun 28 Jun 2026 03:50:01 +0000
Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: V/XInCi5mE1dZSQKmo/VTyRLkzYWcdKGAGfrs4voW7U=)
2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: ExYQsL4DX6Hi4BKxNjsrHvE6gNcBGNmimGeGw2+s/0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 03:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Validity
Not Before: Jun 21 03:50:01 2026 GMT
Not After : Jun 28 03:50:01 2026 GMT
Subject: CN=6a375f69-4ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:d6:0b:9c:7d:20:2e:c2:ad:18:94:58:ad:
87:be:c4:75:49:61:41:ea:c0:e7:a9:08:8d:fd:13:
81:d5:68:74:65:51:6b:51:4c:5b:6f:d7:72:2c:29:
45:ef:cb:c6:9f:59:50:f6:22:ad:b2:a0:0f:05:ab:
4b:2f:a7:42:e3:aa:3d:9b:78:fc:89:e6:df:e5:bf:
9d:21:e1:26:a3:90:f2:91:8d:06:76:8e:df:af:d6:
ab:a0:09:00:c7:4e:01:37:79:60:7d:42:7c:2f:27:
bd:23:17:76:84:da:5a:0a:eb:1d:0d:1b:c5:85:1d:
a2:04:5f:9f:a8:bc:2c:e5:7e:89:d4:37:11:4f:64:
e6:9a:2a:e1:4a:7e:39:e5:c0:69:f6:2a:7f:41:ab:
ae:bd:56:e4:c6:bb:f9:5f:24:b9:46:90:31:70:90:
77:c7:90:87:34:be:86:01:e0:63:48:4f:d4:e6:c0:
25:16:15:dc:73:12:8a:24:00:4d:15:14:eb:44:e0:
3b:70:0a:47:f6:f7:a0:34:6b:fe:b4:6c:0b:fe:53:
1d:04:fc:1d:71:b7:95:6c:6d:cb:c1:e1:51:d5:75:
eb:d7:b0:89:eb:6f:a9:e6:69:fd:e3:b7:9b:0b:ff:
05:b3:7f:4a:71:8f:ca:05:e7:bd:e8:8a:3b:05:fd:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AF:D5:30:DE:4E:F1:F0:5B:A1:E1:DF:EC:C0:5E:18:7F:79:A6:1C
X509v3 Authority Key Identifier:
keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:b9:18:87:42:90:6f:2d:b3:f4:38:21:24:f4:d6:be:19:97:
da:b3:87:36:b4:a7:31:ac:09:bb:de:2f:38:66:94:f9:37:c1:
af:c3:c5:85:09:c3:8f:5d:eb:2a:0c:9c:6a:e4:bf:11:c0:19:
72:ff:c8:87:f3:f6:72:96:8b:8f:34:a1:0f:8c:b3:00:20:34:
5f:e2:ae:91:ec:63:8e:f1:25:96:c5:fa:87:e8:d3:cb:9e:f8:
f6:79:3c:e1:22:68:2a:1f:ba:7a:cb:34:a3:ab:13:6b:b3:79:
aa:28:2c:37:ee:f9:75:f9:bb:e2:42:48:db:0e:1f:d2:80:00:
ee:80:33:16:09:97:64:9e:69:c6:cb:34:ff:7e:c1:20:c5:05:
a9:38:b1:b6:e5:75:f1:ed:2a:66:4e:e3:3d:e0:48:f8:b3:19:
79:55:7d:fe:e7:70:ca:84:62:1e:9b:9f:d0:a6:34:1d:0c:ca:
35:4a:7f:37:ca:46:d2:5d:5f:8f:25:7f:7b:d8:a8:ec:5c:fd:
c5:94:8b:56:2c:4c:5a:c2:36:a3:1d:de:77:1a:f1:03:33:29:
5b:63:69:17:78:bd:9b:23:33:51:ee:ab:af:56:5f:40:22:2c:
5b:c1:63:f8:b4:d8:cd:fd:a1:9a:a8:d3:99:40:af:cc:b1:ec:
59:62:ef:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 11:12:38 2026 by rpki-client