
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
File: ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json)
Hash identifier: mR0mRvVoMfnmTRC+ch/vYtFj+HDG4jRKKcV4zaPHnmc=
Subject key identifier: 92:13:29:FE:0B:A9:09:97:0C:24:EB:62:1A:7F:60:41:D4:F9:B5:4A
Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
Certificate issuer: /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Certificate serial: 06D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
Manifest number: 06CC
Signing time: Sat 14 Nov 2026 22:09:23 +0000
Manifest this update: Sat 14 Nov 2026 22:09:23 +0000
Manifest next update: Sat 21 Nov 2026 22:09:23 +0000
Files and hashes: 1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: sgHBNgTCqoFNoyd+m4pLjXC2EDpYhvh6/pnx7o0wBgg=)
2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: qvLQA7WpjcptMon0VXPLruBJDNLR89kXk5T+FJz9bmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 22:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Validity
Not Before: Nov 14 22:09:23 2026 GMT
Not After : Nov 21 22:09:23 2026 GMT
Subject: CN=6af8dc13-f258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:78:cd:e6:dc:09:8a:92:d6:40:70:f9:67:
b1:e6:84:e7:e1:56:47:b1:8d:90:be:55:99:f7:49:
d4:60:97:84:75:f0:8f:31:76:7c:51:72:60:b3:49:
a0:60:d8:00:e5:03:5d:75:40:68:74:7d:3a:dc:c9:
b7:98:76:6d:b4:6f:97:77:41:e8:c7:bf:90:7e:a3:
a9:51:e5:da:4c:55:22:56:89:32:1f:f1:1a:8f:45:
91:77:e7:d0:9c:4a:28:10:c5:95:aa:e4:de:e2:61:
89:41:b1:04:fb:30:11:40:5e:9a:ed:0e:2b:c7:46:
ac:c5:fb:34:fb:ee:c8:22:45:86:1d:b3:0f:4f:c4:
18:be:32:83:41:03:1b:29:00:d0:21:d7:b6:c1:bf:
9b:ff:ee:9b:3f:63:c0:f5:9f:08:39:a4:d6:73:98:
09:f4:8b:b9:51:3f:23:24:4d:12:b1:a3:84:80:f0:
11:8b:60:dd:9e:ef:f8:86:ef:00:1a:3c:43:32:51:
49:cb:a7:f6:a2:16:29:a8:d4:28:3c:c8:79:b3:79:
c1:c2:94:f4:45:19:a5:fc:c7:4b:27:ae:7d:d1:b3:
c6:8f:c0:f2:d3:c8:eb:61:3c:89:b5:0f:7d:56:16:
1e:65:ae:56:42:2f:0b:33:32:d2:48:d9:f9:be:11:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:13:29:FE:0B:A9:09:97:0C:24:EB:62:1A:7F:60:41:D4:F9:B5:4A
X509v3 Authority Key Identifier:
keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1b:48:2f:24:aa:08:5e:94:c6:e7:59:64:52:fd:52:e8:43:
a0:45:e3:dd:1f:b2:9b:2f:b3:c5:6c:0a:65:fa:5f:f1:ef:ef:
70:ec:d3:a6:05:cd:b1:2f:5b:41:7f:23:4f:fb:56:07:72:4f:
d1:b5:7b:52:39:ee:6d:6f:77:53:9b:d2:ea:2d:9f:3b:ee:44:
1c:fd:ee:3d:47:1a:b7:15:9e:51:d2:a3:c5:8a:e8:1e:03:f9:
d8:14:0a:c8:77:21:55:74:15:b1:92:5b:4f:83:19:ab:6b:8b:
95:55:8e:d7:6f:9e:6d:19:59:4a:b0:81:e8:3e:6a:c1:73:ce:
fa:56:cb:55:e2:81:9e:71:73:3a:83:de:5d:bf:8c:28:78:d4:
96:5b:55:96:dd:6e:28:37:2a:26:65:a5:4b:d1:75:5c:9e:2f:
df:0b:26:fc:9e:21:d9:cc:9a:71:f1:98:0d:f6:99:df:27:f5:
32:20:56:fa:51:92:cb:7d:14:9b:b4:58:8e:4f:2a:04:42:23:
e0:89:08:f9:a6:8a:c7:6a:9b:83:b8:7a:a9:9a:d1:53:36:80:
3a:8d:28:2b:12:f5:39:5e:49:25:6e:5b:0f:44:5a:b4:d1:3d:
c5:79:9b:0e:a9:0e:01:f2:d2:58:f4:d7:a3:81:67:b7:bf:31:
81:07:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:15 2026 by rpki-client