
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier: go10yAmwP2MT1JqaHiySa8e/2QpLmRIPLq6CaPxpY5U=
Subject key identifier: B7:85:68:6D:F4:F9:CF:9E:7C:F7:46:83:CD:87:F6:86:9E:02:0B:95
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial: 1B31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number: 1B1E
Signing time: Fri 12 Jun 2026 16:15:15 +0000
Manifest this update: Fri 12 Jun 2026 16:15:15 +0000
Manifest next update: Fri 19 Jun 2026 16:15:15 +0000
Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: LhXYfJa/ynfp0amigG/lRHUK7NRpxUpYKRHWQfr10c4=)
2: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bVX95h5YGIEFl/nNsvVn6rJFnDmppDxCWRFjlU5VtvU=)
3: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: qWp/XIY6bx5m6zPuPTYxt/QlRjZYjzeSmVqLyGiCJPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6961 (0x1b31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Validity
Not Before: Jun 12 16:15:15 2026 GMT
Not After : Jun 19 16:15:15 2026 GMT
Subject: CN=6a2c3093-2261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:c0:53:5b:79:ee:1a:af:e8:1e:b5:a4:75:
19:76:30:fc:0e:9d:c1:92:dc:d0:d4:3c:47:99:4d:
9c:9a:01:1d:29:ad:2c:44:d4:9b:87:a6:a7:1a:37:
be:c1:c5:11:8f:9f:70:62:8f:14:42:33:92:44:68:
cb:09:e2:85:25:f9:5d:b8:f4:c8:72:15:20:5b:1c:
80:60:45:eb:f9:5f:87:57:42:70:fd:9e:51:ff:0f:
11:65:47:c2:77:fc:61:5d:c8:41:b4:52:e7:8c:fd:
cb:58:72:a7:6b:aa:13:dd:5b:65:7e:e3:2f:63:4a:
aa:7e:47:cc:90:2e:2c:f9:d9:24:e3:78:36:e9:55:
5c:d7:67:08:4d:e7:9c:7e:7d:21:24:2e:8f:68:56:
c7:37:a5:48:de:b4:95:a6:17:c5:4d:08:b6:cb:9a:
a5:1b:e0:cc:3e:4d:ed:ef:03:b7:91:d4:b3:b9:b2:
25:35:3e:28:d5:d6:7d:3f:d2:8b:89:31:00:eb:c3:
25:aa:cf:48:46:90:74:46:b2:27:12:86:7c:98:5a:
41:50:8c:d8:e0:4b:1a:d5:16:05:ec:22:88:42:27:
0b:84:ac:ce:27:fe:61:53:5d:03:1e:73:22:d7:a4:
d8:06:d5:24:9c:67:63:b6:7e:05:c3:e5:56:b7:e9:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:68:6D:F4:F9:CF:9E:7C:F7:46:83:CD:87:F6:86:9E:02:0B:95
X509v3 Authority Key Identifier:
keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:1f:58:e3:e7:5e:6c:99:2b:60:03:e7:01:21:a2:84:36:a2:
b6:2c:46:48:d5:f6:f2:57:1f:a6:3b:1b:3c:09:07:99:d8:30:
e6:b1:fe:5e:b5:f2:b8:36:dd:ea:52:37:10:b1:5c:98:81:d0:
f1:1a:c3:ff:1c:bd:c9:17:bb:b3:c0:72:dc:6c:63:87:72:d5:
14:5d:e9:d6:e5:89:ee:ad:79:71:51:ec:ae:10:57:e7:e6:b5:
46:2d:b7:5a:43:5c:50:46:03:b4:86:eb:39:36:b9:2a:46:d7:
41:5b:40:a2:5e:cf:2d:e6:8b:98:8f:2e:2b:d5:7a:7d:41:13:
3b:fd:e1:3e:07:e6:54:3a:13:b6:e1:58:ee:58:96:bb:61:12:
88:3a:58:71:6d:64:78:14:60:a9:ab:9f:1a:25:09:55:72:df:
e1:48:e1:2b:39:be:d0:af:49:73:b6:ae:d9:3a:30:a1:e1:9a:
db:d3:88:ee:44:2c:7b:6a:2c:2e:cc:a6:7a:8e:33:4d:e6:fd:
5d:11:13:67:54:cf:2a:21:01:14:bd:78:a8:26:50:98:4d:2f:
d8:d4:54:b3:db:ab:39:0c:ee:8e:7e:2b:d0:c0:d7:80:5f:a1:
09:9e:a6:97:70:a7:9c:c3:bc:37:02:01:bd:4e:17:ce:40:ac:
bf:08:3b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:10:53 2026 by rpki-client