
$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File: YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier: 2GGuvtB9519jMJDgRhrJkifrmsm8GDtsxrBTfJhO6hw=
Subject key identifier: 5F:0E:5F:A1:6C:B8:2B:AB:CC:9C:55:9E:1F:FD:CC:FF:75:8D:50:69
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer: /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number: 0188
Signing time: Fri 17 Apr 2026 04:11:45 +0000
Manifest this update: Fri 17 Apr 2026 04:11:45 +0000
Manifest next update: Fri 24 Apr 2026 04:11:45 +0000
Files and hashes: 1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: cZglMWrdvpX1K7Of1ps3PdXMwWJNsRsxKYMrrgKHqz4=)
2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: eGXhWTghID7LXCNSIEK8G8iUBL46dL5mXlz39bqNtkc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Validity
Not Before: Apr 17 04:11:45 2026 GMT
Not After : Apr 24 04:11:45 2026 GMT
Subject: CN=69e1b301-36a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:56:6e:b6:7a:4d:2b:01:ff:d9:8c:e3:21:
1f:3f:2a:fd:c2:59:b1:4e:f8:d5:8d:68:e4:51:5d:
08:59:f8:04:3a:ce:8c:30:6a:8c:20:b8:e9:17:9d:
69:ff:cb:73:8c:22:44:5a:2d:5d:4f:b7:e1:3d:4b:
4b:87:b4:da:a4:0b:ed:01:a7:b6:ed:2f:b9:0a:d1:
64:ec:7a:31:10:01:57:79:1c:80:a0:29:52:0f:7c:
fb:ed:24:a4:8b:d6:31:28:43:32:e2:95:30:90:b2:
98:17:44:7e:c7:3d:87:b7:58:f3:00:c7:0d:a8:91:
e5:cd:26:c3:98:a6:93:b7:75:d7:cf:13:af:10:5c:
24:3c:47:c1:4a:6f:36:fe:19:5f:86:33:fb:30:da:
df:0e:bc:0f:cb:d9:1b:0b:3e:bd:0f:c5:0e:15:cc:
96:1f:89:8b:c5:9e:40:01:29:00:1e:0c:b3:13:86:
bb:1e:a9:32:d8:b4:ad:0f:c5:4e:3f:f1:29:1d:2b:
eb:63:c4:26:42:0a:f6:76:a6:3b:06:fd:5d:04:4a:
6c:b7:90:16:98:1a:e2:72:94:53:6b:45:fd:9c:da:
41:e0:86:f1:7a:b8:ac:01:ab:11:96:3a:c3:56:67:
86:65:66:d5:9b:c0:67:9e:aa:6c:0d:23:a2:af:e7:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0E:5F:A1:6C:B8:2B:AB:CC:9C:55:9E:1F:FD:CC:FF:75:8D:50:69
X509v3 Authority Key Identifier:
keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:03:a2:9f:be:63:38:94:7a:6d:26:bb:cd:54:82:dc:64:14:
01:65:d8:0a:57:45:e2:cf:69:cc:f7:5f:f0:26:07:78:9d:b4:
ef:0e:8a:e5:34:b5:19:cf:69:f8:26:d2:53:f4:2d:d0:0e:09:
7d:8b:57:17:3a:f8:f0:15:fa:2d:ce:38:42:7c:48:53:aa:60:
dd:ab:52:5c:88:3b:3d:97:b8:59:19:a0:22:fe:17:1d:24:18:
93:7d:8f:1f:89:75:90:5d:a1:0d:1a:11:89:1e:32:ba:ec:54:
1a:6c:e3:11:12:70:88:0e:bb:4d:9b:c3:f1:cf:86:5a:e0:4e:
c3:cf:6d:73:eb:91:f1:8c:f8:8d:8d:7c:21:58:32:00:ef:cc:
d4:73:ca:64:1f:24:5a:ee:3b:29:c5:2f:d7:c4:92:85:bf:07:
0a:15:c2:5b:67:da:98:fb:d8:a8:7e:e7:36:78:29:fd:38:e5:
ea:10:10:d9:81:ad:8b:a6:02:e4:8b:99:a3:f3:a9:85:ae:d0:
59:7d:b4:db:c7:06:62:d9:12:6d:c5:48:4c:46:68:a9:33:76:
dc:9e:fd:69:62:87:c0:e1:2a:1a:ae:62:06:5d:58:f5:c2:f2:
02:ce:57:12:8e:56:92:0c:dd:40:66:37:dc:22:9f:c5:1a:ab:
4f:01:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:21 2026 by rpki-client