
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier: pdRWKFpP/TK1WNkd2w2kneLJ89o4+LG7bSGftGI8BMk=
Subject key identifier: 31:9F:53:EF:FD:40:53:29:99:E4:15:26:A8:69:EC:FD:D1:15:F1:F4
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial: 1B10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number: 1AFF
Signing time: Thu 16 Apr 2026 16:14:47 +0000
Manifest this update: Thu 16 Apr 2026 16:14:47 +0000
Manifest next update: Thu 23 Apr 2026 16:14:47 +0000
Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: Q2x+9NXcECG920cBa8Rf4f3bIYOjIZJNY7QMyTmniec=)
2: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: QhrVr6S11mmhvrj9Cg8LccmRRJkV19q9dD5tCLjHbgE=)
3: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: e3ItWQBPJ0EEKll49keD2FkY2OLuKdCmOc7MTTBFyvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6928 (0x1b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Validity
Not Before: Apr 16 16:14:47 2026 GMT
Not After : Apr 23 16:14:47 2026 GMT
Subject: CN=69e10af7-931a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:2d:15:25:02:dc:9b:f8:4e:b8:db:8a:87:
d7:43:7c:c9:9f:12:86:57:ba:c8:e9:eb:cb:fa:3b:
e4:e5:61:32:89:7b:d0:52:4c:61:ea:59:22:e8:95:
6d:d4:f5:16:4b:4e:2c:73:36:92:20:53:88:e0:22:
23:38:54:f6:61:df:5b:4c:91:0b:a5:7e:4e:8e:31:
e6:2f:04:8b:06:20:50:43:34:4a:d6:8e:b9:d8:55:
43:ba:96:b8:6c:fc:74:e0:77:12:b5:d2:32:0e:a3:
79:c0:0a:89:0b:d1:eb:53:1d:9f:23:75:0d:d3:8b:
3e:05:53:e0:77:a0:d0:94:79:6a:bd:dc:94:34:9b:
6e:fc:ed:49:08:dd:cf:df:5b:95:69:38:a9:44:3e:
e4:10:29:98:68:5c:0d:19:95:af:91:e7:30:49:d0:
32:2d:a4:18:86:d4:99:d7:1c:5e:b0:97:c8:6e:3c:
08:d9:52:1d:7f:a3:40:3c:2c:63:0a:03:39:9b:2e:
b5:cf:e4:43:73:43:23:f7:f5:b7:48:07:75:b0:c7:
29:05:f8:0b:1d:a9:62:f0:b6:82:26:a6:74:75:ae:
39:ab:63:76:e3:9f:08:1f:12:70:91:bc:88:85:53:
8f:b6:01:cd:2e:49:fb:e1:70:95:6d:75:8c:4c:7b:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9F:53:EF:FD:40:53:29:99:E4:15:26:A8:69:EC:FD:D1:15:F1:F4
X509v3 Authority Key Identifier:
keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c7:ab:7e:ba:11:02:52:a6:97:70:13:9f:0b:6f:5b:fb:18:
72:b7:62:d3:1c:5b:41:f5:92:f9:85:6a:81:bb:4d:da:55:c5:
a6:01:b7:58:b0:ce:b3:e6:5f:05:d1:09:37:55:71:7c:49:6a:
11:12:15:63:1d:d8:5b:e9:95:fb:0c:d6:d2:c7:ed:71:6a:ad:
f9:48:87:33:4b:dd:3a:96:d7:a6:2d:20:30:e8:68:c0:3d:4d:
1a:dc:05:b8:8a:29:67:68:ca:e2:99:b5:78:89:08:ca:f7:46:
f1:74:4d:f6:4a:1c:2b:41:de:60:40:f4:ee:98:9c:1e:fc:89:
31:88:c9:d0:66:7e:1e:54:dc:2d:98:49:67:80:29:5a:87:db:
20:96:15:54:1c:c0:58:33:29:c0:92:5e:a1:dc:4b:02:ec:d6:
42:f4:a4:7c:49:dc:f8:51:19:c4:54:ad:9b:25:2b:57:16:e0:
aa:68:52:6e:a1:dc:4a:ab:04:54:6a:e4:d9:94:f6:f6:24:d6:
c6:80:1a:43:e7:95:de:f2:8a:5a:68:d4:11:f6:9c:11:1d:83:
8a:fe:b2:af:9d:b3:63:27:b4:df:88:65:5e:23:dc:61:59:c4:
1b:9c:53:3d:f1:be:be:d7:36:c8:9d:d1:ee:a9:2a:e5:d6:99:
13:70:82:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:52 2026 by rpki-client