
$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json)
Hash identifier: XMKtq7Wg5GJ0jzPUtebPDxT/cL4SFfPHlnehx0go7as=
Subject key identifier: 2D:F7:52:47:97:5E:C5:2A:E2:70:04:B2:03:C0:4E:18:C6:E5:BB:E7
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
Manifest number: 01A9
Signing time: Wed 15 Apr 2026 03:47:07 +0000
Manifest this update: Wed 15 Apr 2026 03:47:06 +0000
Manifest next update: Wed 22 Apr 2026 03:47:06 +0000
Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: TkvRNSwMe/dY69THTGptV7DozQQxLqFeMVecR6/9rYA=)
2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: ExYQsL4DX6Hi4BKxNjsrHvE6gNcBGNmimGeGw2+s/0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 03:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Validity
Not Before: Apr 15 03:47:06 2026 GMT
Not After : Apr 22 03:47:06 2026 GMT
Subject: CN=69df0a3b-3c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:8e:6c:c2:d6:9a:27:8b:f8:66:50:82:be:
54:43:e3:a2:b7:be:97:be:01:3f:e2:35:c8:1f:af:
68:a4:ac:33:d4:e8:1b:c1:1c:5f:6b:d9:b7:1f:35:
0a:1d:90:7f:2e:79:db:46:77:cf:5d:d5:d1:0d:a1:
57:cf:9f:a3:db:f2:75:8f:a0:b2:75:63:a2:84:b5:
20:c3:67:fe:e3:9e:d3:c8:5b:31:f7:a2:ec:74:83:
b0:93:91:7b:fe:f7:63:b5:2b:72:d7:4b:31:2f:cd:
a2:e2:8f:91:ac:a0:c5:96:ae:b1:98:60:74:61:26:
e1:a9:1c:ef:88:b4:d2:f1:35:3f:ea:31:9f:da:b7:
d5:36:33:37:64:86:0f:6b:4e:88:00:9d:f5:fe:13:
81:02:d8:19:5f:a3:8e:a4:cb:c3:f5:8b:69:f1:16:
f6:9b:f5:a8:3f:e7:2c:4d:14:83:0c:a5:53:fe:36:
aa:7f:1d:63:89:db:95:f0:44:0c:6c:af:2d:2e:50:
45:df:fc:d8:c5:9a:d9:37:1e:0a:73:11:6b:4a:ed:
65:1c:9f:97:03:63:92:8f:7e:99:d4:9e:c7:8a:ce:
f1:a3:4a:64:ad:a6:94:2e:8d:30:5d:6b:61:79:14:
d2:38:98:6e:b2:57:cf:84:f3:2b:0c:8f:8d:75:27:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:52:47:97:5E:C5:2A:E2:70:04:B2:03:C0:4E:18:C6:E5:BB:E7
X509v3 Authority Key Identifier:
keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f5:55:91:cc:04:cd:ca:d6:8c:92:70:bf:7e:6b:54:d4:2d:
fd:86:39:84:7f:4b:03:90:bd:c5:55:58:9a:12:98:2c:ba:6c:
ec:92:83:43:c7:07:c6:94:0d:37:69:c6:8b:7a:aa:72:aa:e9:
96:ee:cb:b6:74:ad:fd:18:27:6f:21:52:19:18:ce:b1:65:3b:
20:5e:71:ad:6a:b2:ab:bb:08:2a:52:c5:3a:88:36:ba:a4:8c:
0c:8a:e3:8e:e2:f5:71:cc:29:34:24:0a:5f:5e:e7:2e:fa:2d:
36:e8:65:ec:f9:83:79:1e:80:d4:4a:73:8d:1a:fc:fa:f8:38:
ab:51:bd:d3:d9:4f:72:fe:25:62:aa:44:11:84:d0:24:82:f4:
96:bb:eb:d8:16:f4:a9:5b:ed:2d:bd:ac:39:1e:6c:66:37:2e:
82:f6:ad:b4:15:18:b5:02:1d:f1:67:e4:f5:34:d8:46:59:9a:
a8:5b:1c:fa:49:ed:34:61:d7:47:69:4f:6d:9c:0e:64:8e:94:
9f:b3:c6:c0:65:56:28:ee:ad:08:80:a1:b8:42:dd:38:68:7c:
d6:8c:6c:8c:89:92:9d:15:9a:de:c8:f1:b5:9f:03:e4:aa:22:
3c:b4:a8:22:e6:5d:38:49:33:75:c6:72:c3:d1:52:de:02:06:
15:69:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:57:22 2026 by rpki-client