
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json)
Hash identifier: OF98unE2cNFsYEbQeasFnpaV+tJpJ3K0F9CNWL7DTb4=
Subject key identifier: D2:BA:90:E0:FE:64:7B:4C:26:8F:A2:A8:7D:0E:8B:7F:74:20:17:EC
Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Certificate serial: 023F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
Manifest number: 0238
Signing time: Fri 17 Apr 2026 02:20:49 +0000
Manifest this update: Fri 17 Apr 2026 02:20:49 +0000
Manifest next update: Fri 24 Apr 2026 02:20:49 +0000
Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: GNuYjCSI+khLFOGCK3KTeaHT7/Pyo3ppHwwJPry0DGA=)
2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: jtEsNW5dsJnyiRP9T6w5VXMqncVI3hSz4F5K41d01ew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Validity
Not Before: Apr 17 02:20:49 2026 GMT
Not After : Apr 24 02:20:49 2026 GMT
Subject: CN=69e19901-97f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:42:5e:0e:db:f5:60:27:44:22:65:e4:f3:
b8:ab:53:73:bd:5e:23:3f:72:dd:e2:c2:2c:c9:f9:
78:fb:4b:7c:d6:94:eb:33:a5:15:07:68:34:04:aa:
58:9a:fc:38:11:89:9d:20:9e:65:69:8e:45:d3:56:
a3:e7:bf:9a:c5:0e:e4:4a:15:6f:ce:9f:f3:19:2e:
43:34:18:4c:c9:30:3b:2a:5d:ff:9b:ef:7f:f3:8d:
1c:d6:23:0a:cb:06:9b:68:5e:b8:bb:28:05:a7:70:
41:8f:cc:71:94:c7:01:25:03:6e:f3:6c:54:6f:30:
7e:e0:4f:cb:46:07:9c:7f:77:34:2b:ad:f1:a8:3d:
e5:a8:c5:b2:61:ba:47:0d:ba:60:9e:8c:ef:d1:15:
e6:7b:7f:2c:bd:72:c6:81:d2:d9:a6:ad:51:54:9e:
92:3f:3b:8b:e7:30:11:2c:db:79:18:cb:f7:73:73:
41:0d:8b:4d:0d:68:12:b5:6b:1b:18:66:76:90:13:
b4:c9:8d:77:3f:37:49:e7:70:3d:3a:a7:84:da:e6:
3c:25:a4:07:d1:40:e0:5f:e7:8a:87:10:dd:95:0b:
c6:65:61:d7:60:26:7c:83:c4:d6:fe:46:28:d0:b8:
cc:ab:f1:b9:fc:eb:94:b8:7b:fe:7b:46:d2:fb:15:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:90:E0:FE:64:7B:4C:26:8F:A2:A8:7D:0E:8B:7F:74:20:17:EC
X509v3 Authority Key Identifier:
keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:79:6f:cb:c9:7e:da:3b:b5:a5:33:1b:f1:2f:27:ff:af:46:
ea:3c:aa:c8:4f:a7:c3:a9:47:11:c8:1c:0e:d5:33:c7:d4:3c:
ea:d9:a4:1b:73:a6:16:ed:bc:39:b2:a4:75:06:38:b4:ca:8e:
c8:ab:a4:ed:45:a0:4c:5c:2e:89:b9:f5:e1:a7:13:0a:33:ce:
b2:92:e6:d0:b0:e4:79:6b:fd:5c:12:38:68:b2:f6:4f:a2:61:
7b:ae:e3:29:30:1c:f6:e6:6a:d6:96:ae:00:7a:e4:e6:e4:de:
52:26:5b:2f:eb:da:9b:92:18:0e:25:ea:a1:29:51:bd:e0:9a:
41:8e:7a:da:2a:4e:6d:85:15:ed:7f:ff:52:d7:91:ed:ae:f8:
99:7b:59:a4:f9:a9:cb:62:40:e6:18:4a:59:f1:0e:f3:64:f2:
b2:9f:0b:0d:3d:f8:2a:e6:bf:f5:ff:93:a5:7a:c2:e4:69:51:
5d:a8:93:6d:38:ab:9a:17:18:fe:db:67:e4:58:ad:55:87:4f:
33:0c:2a:b2:cf:0e:63:ac:d0:76:1a:97:d2:d4:6b:83:f1:54:
0b:9a:b0:e6:17:39:da:52:53:07:f5:7e:9f:51:1a:3b:0c:0f:
d3:e4:fa:a7:43:5f:64:6c:f4:9e:7f:14:ad:7d:d8:cb:98:8c:
a2:01:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:48:33 2026 by rpki-client