
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
File: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json)
Hash identifier: Uj/aAc+EF5cfJBeBWraS2Y2w2mkKV0/BIR5C2ow9Sr0=
Subject key identifier: 3A:18:62:4D:3C:90:46:19:0F:BB:E8:0F:48:68:0F:DA:EC:D5:F2:91
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Certificate issuer: /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
Manifest number: 49
Signing time: Fri 17 Apr 2026 08:09:37 +0000
Manifest this update: Fri 17 Apr 2026 08:09:37 +0000
Manifest next update: Fri 24 Apr 2026 08:09:37 +0000
Files and hashes: 1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: 7D7EcG5wihHGHGDmROBaPhblTYwaCiHe/ty1s23pGeM=)
2: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=)
3: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: 77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Validity
Not Before: Apr 17 08:09:37 2026 GMT
Not After : Apr 24 08:09:37 2026 GMT
Subject: CN=69e1eac1-2ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:6d:f3:83:a8:d9:9e:97:5e:91:ec:5d:9e:
01:53:50:96:b3:33:fe:ca:7c:06:bb:21:1e:95:83:
d8:ad:66:c4:b5:3b:0a:6b:c7:f9:97:6a:33:87:45:
1b:44:b9:59:c0:d9:c7:c3:16:10:90:d2:b1:0c:ed:
81:5a:c5:5a:74:59:57:2d:8e:db:6b:b4:69:88:65:
bc:4c:94:5e:58:f3:21:a2:8c:f7:2e:8c:29:3e:b7:
da:d3:88:1e:88:be:e9:fa:52:8b:71:1e:22:31:10:
64:33:8e:34:27:be:b7:2a:8e:77:21:dc:d7:42:c3:
ba:d2:40:db:8a:0d:15:6c:2a:eb:b4:52:4e:01:f0:
93:76:28:10:32:d5:7d:9e:71:fa:63:11:b6:df:eb:
1b:ec:ca:12:01:05:9c:a3:9d:8b:d1:e7:7c:84:bb:
8e:93:eb:8a:fe:ed:8e:9b:79:59:a7:18:c7:c0:85:
ea:27:16:b8:fe:81:03:3e:54:ca:ab:9b:5c:d6:34:
03:dd:d1:18:c1:5c:d1:b1:a9:c4:e0:92:18:87:6a:
3b:9e:d1:1d:4b:5c:97:5e:d0:93:9e:6c:8b:3a:66:
ca:e8:91:a3:31:45:5e:c1:73:33:13:e9:c9:89:b5:
09:dd:6c:d8:f7:82:05:de:ad:04:8c:6b:7d:fd:e4:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:18:62:4D:3C:90:46:19:0F:BB:E8:0F:48:68:0F:DA:EC:D5:F2:91
X509v3 Authority Key Identifier:
keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:bb:2f:6d:74:71:7c:67:67:54:ae:68:28:83:ba:17:f5:c3:
7b:d6:62:8b:47:04:fb:fc:d1:32:94:5f:a6:a9:3f:0d:88:a8:
ce:2a:ab:a9:37:12:3b:71:1b:ee:3c:fc:89:07:90:34:c3:45:
b0:37:20:b3:6c:59:f4:fc:d3:62:68:7e:b9:6b:7b:e7:48:b5:
b6:a2:e6:35:2b:4d:c6:e0:0f:31:08:fd:20:ca:b8:99:c2:33:
30:87:60:c8:44:0e:70:bc:71:b6:64:e1:97:ab:3c:a6:ad:4b:
65:f2:cf:63:1d:69:a1:da:25:15:7e:da:9f:e9:8b:f0:99:64:
aa:99:aa:e9:bf:95:cc:00:88:b3:87:ed:7a:bc:0b:a7:9b:ef:
b0:f1:dd:37:15:be:e4:33:57:f9:65:6c:bb:56:ba:49:67:b8:
07:27:e9:67:74:87:02:45:b4:71:75:87:54:71:ee:aa:e0:47:
74:56:4f:90:44:75:71:61:f6:eb:78:af:62:bc:73:62:b2:c4:
ad:90:81:77:8d:ca:92:ca:2e:10:82:e9:0d:30:6a:f5:d7:2f:
5a:72:1a:b3:ad:5e:d5:0d:15:f1:33:4d:50:52:9e:fb:1d:9b:
f6:51:be:2d:99:9a:e5:6a:8e:61:28:91:59:6b:24:9b:c0:eb:
eb:fe:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:02 2026 by rpki-client