
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier: R15lYO2MYlmGxauf+lZynCJSqwxzPlojE9AklGawslM=
Subject key identifier: D2:AA:04:C5:6F:74:2D:F5:BC:22:E7:86:A2:8D:32:DF:18:D9:F5:8E
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number: 0128
Signing time: Sat 13 Jun 2026 06:08:51 +0000
Manifest this update: Sat 13 Jun 2026 06:08:51 +0000
Manifest next update: Sat 20 Jun 2026 06:08:51 +0000
Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: 0pRrxuatmFyCQSBF0xccxPz7QJmxLFYTp/mLTYWHuNQ=)
2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: yjuBkaQ9iRKgMQ7a+4P/BtzlYCvqc8B89mQbeBjPRXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Jun 13 06:08:51 2026 GMT
Not After : Jun 20 06:08:51 2026 GMT
Subject: CN=6a2cf3f3-ceae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ee:5e:49:da:a5:89:ef:b2:9e:8a:b5:21:a2:
91:a4:06:64:5d:f0:d9:8a:44:61:d4:ec:a4:4f:b1:
7b:f4:40:24:ca:70:86:7a:86:4a:5c:e9:e0:b1:53:
2e:01:ee:e8:ed:c2:50:ad:ed:62:81:0e:14:ef:8d:
56:03:32:2f:05:0e:3e:78:d3:f9:7c:c3:3c:5b:ba:
9b:44:fc:3f:73:0f:d8:db:75:20:bd:18:d5:ba:fb:
23:d1:20:06:4f:c9:92:74:ee:a5:bb:21:0a:14:af:
95:ab:4d:a4:54:a2:ac:cc:2c:7f:5d:1d:09:ba:49:
1e:4a:4e:8d:14:57:6e:f5:25:45:f5:7f:84:81:3a:
b6:63:4c:8b:50:a7:60:77:7c:67:83:71:78:db:a2:
e6:96:1c:fa:fc:90:e4:f2:cf:c5:70:2d:84:91:26:
6f:2c:0e:67:a3:65:2d:eb:bc:de:d4:73:2c:1b:7f:
66:d9:4a:3d:96:82:3e:72:b3:61:67:62:ad:a5:2a:
27:eb:e2:f2:23:e0:85:78:01:2f:e8:60:11:76:2c:
db:cb:08:ae:d7:a0:45:7b:3e:2e:96:ec:83:b7:8a:
07:16:9f:9b:03:55:c4:53:45:64:4b:37:26:9a:12:
8e:0c:3b:79:90:b1:28:c0:2d:64:d4:95:69:6d:7b:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:04:C5:6F:74:2D:F5:BC:22:E7:86:A2:8D:32:DF:18:D9:F5:8E
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:14:4a:3b:b7:2e:ab:1a:7d:cc:b0:d1:7f:9b:96:25:20:db:
83:0c:2e:ac:a2:8a:7a:8b:e2:13:9d:1e:48:45:e1:e8:fa:51:
e1:ef:0a:d9:17:51:69:c0:13:82:75:ca:c0:d7:9d:bb:2a:5b:
17:0d:c8:2f:13:9d:76:01:3d:16:4a:bc:06:bd:5d:63:64:53:
f4:f5:b5:4e:ed:fb:7e:a0:c3:e3:6f:0c:ac:bf:b8:55:f9:a1:
86:6c:19:d8:f8:c8:e3:af:f4:54:f2:be:8a:46:91:18:74:6c:
a7:90:f3:f1:e7:98:2c:12:d0:b5:34:91:ea:41:d1:55:68:6c:
68:5d:f0:33:3c:76:3a:27:d2:23:98:80:6b:c8:0d:13:ad:92:
bc:56:f7:d0:7a:15:f8:73:2d:d5:28:79:1a:cd:df:b0:16:63:
a8:fa:fe:21:f3:a6:04:a5:68:52:84:50:91:1b:c6:6e:6b:f8:
fa:be:df:07:18:fb:0c:e3:d3:ad:f7:ef:5c:a0:de:c5:5b:5d:
7f:56:f7:e9:dc:29:0d:56:8f:26:f6:c3:1f:00:15:6f:f5:89:
63:0e:36:c4:be:91:d2:9b:dc:8d:d5:5d:e8:41:ed:b8:7c:a3:
40:5f:68:76:c1:5d:ab:49:2f:8a:37:3d:56:ba:87:57:f2:4b:
c5:1d:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:04 2026 by rpki-client