
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json)
Hash identifier: FexPMYVTIDUkgzpMckKOx7IgUMXNnIG41a0a9E1cwvI=
Subject key identifier: 76:F5:D8:77:FE:F7:0A:E8:41:C0:E0:52:5E:0D:1B:DB:71:A8:46:F8
Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
Manifest number: D6
Signing time: Sun 01 Mar 2026 07:58:24 +0000
Manifest this update: Sun 01 Mar 2026 07:58:23 +0000
Manifest next update: Sun 08 Mar 2026 07:58:23 +0000
Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: rhletTeG3o+qdKyBjF3Kph3LXmrz2WTyAQ4sCDoePQg=)
2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: ++9L+NGOaw5DrKySyO8La0vQc8M3tYnN6EhjONDGSUQ=)
3: E454FEF2689311F09107C42BC4F9AE02.roa (hash: GyGMKgS9X/eYqbsrmXREtsm2FLIobZJ8M53ERZyQ3yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl
rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
Validity
Not Before: Mar 1 07:58:23 2026 GMT
Not After : Mar 8 07:58:23 2026 GMT
Subject: CN=69a3f19f-bad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:9e:1c:9a:d3:e5:a9:a1:40:1c:c8:89:89:
5b:60:fc:50:3e:87:04:17:bd:02:b8:39:01:73:bc:
72:93:99:07:b4:9e:da:d7:17:22:ff:a8:7b:85:60:
2d:7c:29:8d:7f:10:ef:bb:c0:ac:c6:d1:50:43:58:
76:d6:c9:e7:59:8f:8e:14:b2:9c:3d:bc:c5:2c:5c:
c5:96:24:8b:26:18:5c:f1:d1:11:fd:82:8a:ac:8d:
16:f9:87:94:99:d8:fe:99:10:9c:4d:c1:78:45:83:
78:ef:3b:d8:00:b8:30:a4:81:e7:8e:ab:05:82:ae:
79:d9:bb:ab:fd:52:fe:1d:2a:c1:17:fd:21:50:f3:
88:9c:4f:f9:03:a7:1d:08:e4:71:29:d9:22:53:94:
1f:58:06:3d:2c:37:0a:0d:30:ab:07:11:40:5d:1e:
77:54:16:f5:1d:61:d3:04:e9:eb:2e:84:07:aa:f4:
96:80:41:81:69:64:00:14:db:bc:ba:8d:84:d6:19:
e7:d8:f0:c7:78:7a:9a:20:a2:aa:3b:f4:8b:b5:e8:
79:28:14:dc:43:45:6c:7d:87:0e:bb:7a:40:84:5f:
cd:3f:1a:b0:d7:ce:3d:6c:0c:ea:c2:34:46:00:9b:
ad:45:a1:7c:7b:61:2f:81:d8:d4:73:5e:f0:0b:72:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F5:D8:77:FE:F7:0A:E8:41:C0:E0:52:5E:0D:1B:DB:71:A8:46:F8
X509v3 Authority Key Identifier:
keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8d:79:3c:9a:7a:e5:cb:43:37:26:6f:c2:d7:bd:d0:22:5e:
38:78:da:1c:42:74:92:41:99:d8:f3:6f:db:50:cf:98:d6:61:
22:9c:9d:b6:43:c0:8e:bf:d4:02:f1:09:cf:31:9b:8a:6f:37:
60:a4:06:2d:9f:e0:27:bf:da:3d:2b:52:ae:3b:db:39:51:78:
7d:fa:ef:cb:fa:58:37:17:92:a0:4f:58:b5:1c:fa:c3:2b:f4:
58:ac:43:14:f5:3f:bb:d1:71:b4:cc:26:48:5d:44:d5:0e:90:
92:35:18:5c:b3:05:f3:09:29:4a:86:73:7a:8b:9e:49:30:25:
7b:4f:51:12:af:0a:aa:1d:57:7d:79:93:50:c3:83:90:89:e2:
bc:33:c0:51:32:64:1e:98:85:10:ac:cc:08:22:4a:c3:3d:05:
3b:8e:9d:05:ff:aa:ac:e5:b5:93:ed:e6:04:e3:15:3d:33:4e:
49:54:ea:30:fa:ae:e6:47:b1:f8:29:31:56:4f:47:78:32:07:
85:ae:a5:b2:e7:67:fa:ce:0a:85:3d:82:74:d4:c6:f2:ed:ce:
10:b7:64:19:9d:90:9a:fc:a9:34:df:28:d7:eb:85:f0:da:51:
b2:89:bc:ae:85:40:76:1a:27:da:86:3f:62:8c:ef:fa:d7:4d:
46:0f:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:12 2026 by rpki-client