
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
File: YbAiM19NheFtR3oAatyOPy_alGA.mft (raw, json)
Hash identifier: jlGTr9R1KLHBVABAndtNyctsrhnakP/380yZRxI5NMM=
Subject key identifier: 0C:20:F7:1A:8C:9C:DE:69:8F:93:A2:02:06:8E:98:01:50:55:2F:01
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Certificate issuer: /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial: 058D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
Manifest number: 0588
Signing time: Sun 20 Sep 2026 23:05:49 +0000
Manifest this update: Sun 20 Sep 2026 23:05:48 +0000
Manifest next update: Sun 27 Sep 2026 23:05:48 +0000
Files and hashes: 1: YbAiM19NheFtR3oAatyOPy_alGA.crl (hash: 6MN4mhGtK8V7wHzJfmDfhiN4iIUHaXNIp2YxD0zNOJk=)
2: FF4EB6B2395811ECA422C462C4F9AE02.roa (hash: 1EXMwCZdlr4n5uu1XLxW00w3UXh6JZwNTcRYA1sNXNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1421 (0x58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7C77, serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Validity
Not Before: Sep 20 23:05:48 2026 GMT
Not After : Sep 27 23:05:48 2026 GMT
Subject: CN=6ab066cd-efa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:62:05:ad:ae:e4:11:1b:a7:4a:dc:19:4b:
81:4b:ed:ad:4e:49:76:4d:4d:15:2a:18:33:14:89:
6d:40:de:1f:32:e5:c1:83:2b:c8:ad:5c:7f:81:eb:
ee:a7:5f:c9:29:7e:88:aa:b9:6d:50:c0:5f:ff:19:
fd:b3:a9:17:a5:7b:d7:f5:3d:91:bc:aa:1d:0f:fc:
e7:0e:ff:92:07:8e:ba:32:a0:5d:55:b0:f8:56:ea:
d1:ed:8a:2c:da:8a:7d:70:a4:e1:86:82:7b:78:0e:
f5:73:2a:d7:5c:01:6c:3e:97:e3:de:03:9a:b7:0d:
db:ba:ae:9c:41:f2:db:b1:b1:8e:5e:51:86:0d:18:
f0:50:e4:71:90:37:ac:f0:1c:21:d5:07:1c:af:5a:
27:37:55:d8:45:23:b9:b8:d5:ad:ae:e5:d0:4b:87:
89:36:6a:48:ba:56:1a:00:39:19:cb:97:23:d4:f8:
a9:c2:78:ef:c7:39:9c:62:32:cc:ae:a2:fb:c3:ee:
fb:00:f9:b6:71:e7:40:7e:a3:b1:3d:32:f3:e4:3d:
7b:56:cb:93:e5:0f:c2:3d:0e:ac:64:3f:43:36:7f:
c6:32:4f:75:76:3f:7e:f3:15:a4:e0:a7:8f:4f:cb:
2a:27:4f:0e:34:44:d5:52:63:18:8a:35:1d:f7:2f:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:F7:1A:8C:9C:DE:69:8F:93:A2:02:06:8E:98:01:50:55:2F:01
X509v3 Authority Key Identifier:
keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:db:01:88:23:b5:d5:95:79:c3:86:f9:cd:2a:d6:7c:a5:ba:
91:34:99:85:5c:6e:84:aa:67:ee:34:c0:1e:f2:20:c1:3c:ef:
92:5c:cd:c1:e1:69:24:89:f5:f1:ae:d3:23:f5:e0:c7:fe:3c:
7b:66:bb:44:30:2f:92:ae:4e:8f:1a:c2:e8:6e:95:85:26:73:
dd:81:25:21:ec:95:56:3f:60:e0:60:4b:4b:a9:a4:31:bf:67:
69:83:d9:8f:b9:7f:27:b7:b6:19:c2:1d:8b:5f:59:00:81:4d:
10:cf:d2:8a:53:93:db:d7:bc:0c:54:ba:83:98:41:07:83:ed:
c1:5f:77:a3:7f:1a:e3:1e:a1:38:79:fb:e0:62:36:e8:d6:b9:
d1:54:1e:d4:5d:e1:a8:4a:bc:d1:7d:74:f4:cc:0e:fc:4e:fe:
84:58:d8:bb:b5:09:03:ba:25:5d:4d:6c:cd:91:a9:f2:78:77:
cc:c8:a7:9f:f4:bf:09:53:ef:bb:c2:bc:27:d0:b4:85:9b:82:
36:50:79:ed:36:ae:98:d3:df:5d:f0:ab:e2:e3:b8:cc:a4:77:
d3:6c:84:55:dc:dc:a8:5c:a2:34:50:09:ea:ce:c8:6d:05:b5:
be:fb:4d:85:f3:7e:15:3e:70:f7:a1:06:37:ca:58:e3:03:03:
d0:5d:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:29:31 2026 by rpki-client