
$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
File: RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json)
Hash identifier: UVeFqeb8o6qtBRyGdxJmElqa4l3rGlBqUJEBNxrITJg=
Subject key identifier: BE:CF:8B:82:C7:FE:56:78:33:44:8F:F2:93:E2:FE:C7:AD:39:9A:9E
Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
Certificate issuer: /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Certificate serial: 1875
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
Manifest number: 186B
Signing time: Sat 28 Feb 2026 16:33:55 +0000
Manifest this update: Sat 28 Feb 2026 16:33:55 +0000
Manifest next update: Sat 07 Mar 2026 16:33:55 +0000
Files and hashes: 1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: jdqUrXgbUTGVhhiu31Xk0zhRPCaGXZ3ryA3rQVYcP1Q=)
2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: FXxg8JbRyxhX/govLjKDj9hLX7J7czh75q9/plpdJE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6261 (0x1875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Validity
Not Before: Feb 28 16:33:55 2026 GMT
Not After : Mar 7 16:33:55 2026 GMT
Subject: CN=69a318f3-6473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:1d:9a:c2:c2:ff:b0:64:41:c4:56:a4:92:
9b:da:5b:01:28:b3:fd:4a:49:50:6a:dd:ca:80:ca:
ea:db:65:2c:18:83:a1:55:6f:31:64:83:64:6a:01:
bb:43:fe:3b:88:ab:40:9a:03:eb:8b:ba:d8:53:a8:
bd:85:2a:2a:19:84:04:1f:8e:2b:b8:9d:52:5b:b2:
70:2a:04:5e:c6:7e:96:d2:20:b6:65:fc:65:13:b0:
90:93:88:a7:28:9f:9e:ab:38:73:52:0d:48:a4:04:
97:6f:e0:3a:8b:d9:9f:60:07:f5:de:53:85:2c:96:
49:01:2c:1c:37:5b:7c:96:83:34:bc:29:db:af:6c:
01:12:74:ea:e8:da:4a:df:17:d4:dd:7a:bc:8e:c7:
d9:0a:7d:7a:49:3d:2f:8c:fe:d1:17:52:29:ce:69:
88:46:7f:7e:08:92:61:a4:15:f2:82:7c:bd:d7:9e:
78:83:e7:85:b5:82:74:26:10:11:1e:26:1b:89:fb:
b7:1c:53:43:f1:2a:0d:53:58:28:c6:7b:6c:01:2e:
f7:77:78:46:94:ed:01:9d:f3:ba:54:1d:db:70:36:
c5:e3:a7:5a:49:e3:7d:13:02:cc:5c:a4:bd:7c:52:
71:28:85:5b:cf:61:66:33:83:da:6c:01:d6:18:ba:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CF:8B:82:C7:FE:56:78:33:44:8F:F2:93:E2:FE:C7:AD:39:9A:9E
X509v3 Authority Key Identifier:
keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:75:3b:05:dc:5c:4d:10:5f:d1:0a:d2:3b:c2:47:35:26:
13:c3:3b:88:47:1e:8c:3c:f2:13:98:c1:40:ed:1c:a4:5b:b9:
65:93:53:a4:e3:58:40:aa:42:2e:87:44:0f:a3:62:73:3d:0d:
30:81:19:1e:70:4d:71:d8:e0:2e:ed:b0:d4:84:8d:91:d3:d0:
cf:94:8a:a9:c7:6f:3d:da:bb:7e:66:e5:ea:fb:73:f5:68:f9:
fe:6f:a9:22:c0:85:1b:40:fe:c4:c2:8e:0c:f4:24:f6:9d:a4:
d7:05:20:c5:5f:a5:d3:c5:7e:1d:b7:b5:8b:49:02:b9:8f:e3:
39:ff:29:f9:f7:4b:be:78:5d:47:db:27:39:90:55:ab:ac:9b:
46:9a:3a:9f:a8:37:ef:cc:8b:d2:bc:39:c5:e6:f0:0e:be:7e:
b1:37:c9:54:4a:f5:a9:4a:07:06:d9:2b:16:35:ec:e3:86:f8:
36:48:d1:38:94:c2:ff:82:3d:01:36:ef:41:e9:93:6e:dd:25:
71:51:db:70:2f:17:52:5f:9c:cb:d3:54:3d:d0:18:59:cc:20:
38:6e:70:46:90:f7:c0:73:41:f6:cd:c6:93:08:ba:12:ed:c4:
a2:5d:01:70:55:bd:b1:77:b6:9c:59:50:ab:87:8e:f0:7e:83:
54:a4:2f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:36 2026 by rpki-client