
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier: VD3j3rBWXn2cig6Dlf7A5M6pan22s//n1iq1n1+k3wM=
Subject key identifier: 2B:E0:AB:B5:EF:D8:D1:DB:A6:F6:D9:BF:78:96:F9:15:3A:5C:37:14
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number: 010C
Signing time: Fri 17 Apr 2026 06:05:10 +0000
Manifest this update: Fri 17 Apr 2026 06:05:10 +0000
Manifest next update: Fri 24 Apr 2026 06:05:10 +0000
Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: qstmyPSQdS7mFsShVEcNDf+0Cqe7441G1wlUyzykalQ=)
2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: yjuBkaQ9iRKgMQ7a+4P/BtzlYCvqc8B89mQbeBjPRXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Apr 17 06:05:10 2026 GMT
Not After : Apr 24 06:05:10 2026 GMT
Subject: CN=69e1cd96-60b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:9c:22:cb:f9:73:d8:5d:9c:25:3c:71:fc:
d6:83:7c:cc:1a:f8:95:a3:6b:39:e5:91:92:aa:8d:
d2:01:a6:8e:39:55:43:6f:aa:73:54:9a:d8:f4:f9:
17:7d:0b:8d:23:1b:dd:bf:33:a4:d5:16:83:9f:b3:
92:13:f8:e7:b5:d0:de:9c:85:0c:b6:65:e1:64:78:
81:16:ff:f3:9b:61:60:65:3b:9e:4a:5a:40:74:c7:
c7:9e:aa:48:93:a6:33:bf:86:da:1b:93:2d:7e:80:
f3:54:20:cc:3b:62:18:cc:67:11:32:0c:a1:b5:c0:
58:a1:f5:4c:d3:e2:ab:74:07:b8:53:88:73:aa:c0:
56:32:55:15:5f:69:36:d0:84:05:3a:b9:12:10:eb:
d9:3e:05:5c:ef:d3:4c:d4:fc:70:ab:fd:43:63:d2:
16:15:1e:b8:dd:0e:81:08:4a:5d:b4:c5:5f:57:66:
be:6b:ab:cf:a5:fa:51:51:e7:50:5c:71:9f:17:71:
90:9b:88:68:b5:73:36:f1:ad:7f:16:c1:53:95:0f:
e0:d3:13:9a:8f:e7:f8:a5:e7:96:98:b8:e7:2a:2c:
d5:0c:df:4f:12:84:0c:a1:fc:f2:db:34:d1:09:68:
92:05:9c:76:49:62:fd:29:5f:25:98:ac:a6:09:aa:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:AB:B5:EF:D8:D1:DB:A6:F6:D9:BF:78:96:F9:15:3A:5C:37:14
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:c9:cf:b2:b0:e5:23:40:73:32:17:52:02:9c:4a:13:e7:8d:
6b:11:44:28:de:e4:19:e2:cc:1e:17:6c:7a:d2:0b:07:48:4a:
b8:d1:bd:b3:69:5a:32:71:33:b9:d4:cd:ab:20:2b:78:0c:b2:
17:49:cc:7e:b2:e6:b8:5a:5f:02:62:62:5c:d6:77:99:a8:d7:
c2:01:cf:0d:60:c4:02:0f:02:73:5f:9c:70:89:d4:61:26:d2:
8b:2a:c0:f7:b5:24:34:ce:06:dd:05:db:8b:ba:7b:1a:81:7c:
dd:5e:dc:37:9f:ce:b6:a8:92:61:41:b1:90:c0:de:5d:56:52:
c0:58:d5:6b:0a:57:f1:2d:9b:b2:2e:5a:a5:b6:52:54:62:ce:
a1:2d:9a:b4:fd:b8:ee:64:5b:b4:21:aa:a7:6c:44:bb:ef:0d:
a1:0e:3e:9e:88:6d:32:fc:af:7a:aa:5d:41:d7:42:11:6a:de:
2e:9b:4b:2a:a3:33:bb:91:34:61:bb:b3:a0:b9:d2:bd:a2:64:
4e:ec:a8:f2:d4:66:57:02:52:b3:09:7d:77:18:3e:fd:1c:86:
54:12:31:2b:3e:22:79:a1:20:42:c4:a9:54:6f:99:3b:8b:86:
1a:64:3c:5e:da:3a:f4:55:21:72:b3:62:81:2a:1e:71:3f:4e:
6b:8a:b6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:33 2026 by rpki-client