
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier: EgrcY02fvfN5aDAXB4WgVM3AX5CjAGm72EyK6kL9mVM=
Subject key identifier: D3:3E:E2:D8:EA:7E:FC:8C:7E:B7:84:CD:E9:53:E6:6D:AE:AE:2D:AA
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial: 0CFB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number: 0CEF
Signing time: Thu 16 Apr 2026 18:08:18 +0000
Manifest this update: Thu 16 Apr 2026 18:08:18 +0000
Manifest next update: Thu 23 Apr 2026 18:08:18 +0000
Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: vEEOJZOoklAYbCRhLxrquBW+aIH4fvWy+OymdVh87lI=)
2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: Rdzf+qY0rc3ljoOiOxZKwXFF+npaW6qfoR/HzxroHsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3323 (0xcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Validity
Not Before: Apr 16 18:08:18 2026 GMT
Not After : Apr 23 18:08:18 2026 GMT
Subject: CN=69e12592-120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:57:cf:c9:75:1e:84:cb:4e:3a:e6:57:6d:
6a:0d:60:df:0e:4a:5b:f7:70:9b:32:ca:f3:6f:56:
22:dc:aa:54:52:a5:0b:fc:53:40:e8:44:32:52:a4:
c4:b6:ba:47:86:2f:3b:69:c5:36:21:13:cb:1b:8d:
91:f8:ad:d5:59:0c:24:62:b1:19:12:1c:54:57:a0:
ed:48:d4:2a:db:20:aa:b0:46:69:87:04:eb:11:6d:
bb:0b:71:3e:b8:29:c6:f0:65:1b:06:ef:cf:4f:0a:
5e:28:08:58:1a:c5:16:f2:27:48:4b:ae:cd:ae:d1:
a6:d1:7e:84:e6:a3:9e:36:9a:b1:e7:24:6c:39:14:
8b:7f:15:8c:88:b3:e3:24:07:e2:0f:29:19:24:d9:
fd:bb:cd:37:22:9e:8f:67:24:4b:ff:a2:28:4b:01:
d7:19:f4:62:72:c5:40:cf:1d:65:9a:14:9e:0a:5c:
76:42:ed:60:8e:d5:99:e2:c7:d8:f2:ee:f8:99:a7:
a5:a8:a6:c4:0d:b4:aa:b3:78:59:40:a0:bf:cf:2e:
bd:a4:cd:9c:ec:c0:d9:f8:f7:56:ba:63:03:29:89:
f7:30:69:8f:6e:fc:b4:e3:26:b4:8f:6e:93:f1:07:
86:d7:f1:ce:fc:98:dc:6e:20:bb:16:6e:ca:e2:45:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:E2:D8:EA:7E:FC:8C:7E:B7:84:CD:E9:53:E6:6D:AE:AE:2D:AA
X509v3 Authority Key Identifier:
keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:44:b8:de:76:dd:ee:d2:f6:33:d1:50:84:63:96:95:d5:a2:
3d:35:e4:66:6e:8c:4f:eb:b7:19:e4:f6:11:b5:3f:d6:a2:d5:
33:60:6f:71:f1:a1:a4:18:63:0e:4c:74:9a:2d:e3:7d:80:74:
ec:2b:8d:75:21:cb:a0:79:04:4d:1d:d8:5e:30:65:f1:16:f3:
88:b7:dd:72:57:c2:07:fe:c1:ea:18:05:ed:f8:71:55:e7:ca:
c3:15:88:f3:74:d6:37:4e:24:2b:cb:07:ca:3b:29:d2:52:10:
57:69:b5:d6:57:a5:66:be:25:6c:80:6a:f7:05:c7:af:30:71:
d2:29:28:f6:67:fe:47:c1:4b:cd:b3:36:03:8f:f5:7a:79:6d:
06:2c:1c:05:64:35:9c:be:6b:20:7b:49:2f:89:c2:e0:09:7e:
20:52:9f:96:ff:5b:f5:ae:7b:70:46:2a:32:58:08:f4:00:27:
47:82:b8:a0:ce:4b:58:05:c1:26:d7:42:6e:a6:e3:8c:c5:86:
51:7b:41:ac:60:a9:9d:1f:52:22:ce:72:24:fa:6e:11:a3:85:
ad:a3:7e:7d:9d:7c:3b:6e:25:7f:4e:98:d8:0c:82:94:c0:9c:
40:5b:03:40:6c:5d:19:97:0a:bb:b2:ad:fc:95:91:be:b4:57:
19:5d:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:45 2026 by rpki-client