
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json)
Hash identifier: I1HZwP8i2UzyAaG72mOBjdm7TLDvRL0gnuJSY958FX8=
Subject key identifier: 7C:08:4D:DA:5A:96:6D:25:76:EF:92:38:51:68:8C:83:05:1B:3C:D6
Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Certificate serial: 25AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
Manifest number: 2597
Signing time: Tue 28 Jul 2026 15:50:01 +0000
Manifest this update: Tue 28 Jul 2026 15:50:01 +0000
Manifest next update: Tue 04 Aug 2026 15:50:01 +0000
Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: b17Tu1kXwODlYkxMstIaUqhhgrbbnu3+WMaF32+tcVg=)
2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: rbb9vzT6ZdvpjVZ3GXOm6few5Y28G7tYzO6mN3D77lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9643 (0x25ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Validity
Not Before: Jul 28 15:50:01 2026 GMT
Not After : Aug 4 15:50:01 2026 GMT
Subject: CN=6a68cfa9-4b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:a6:d7:08:e2:6c:f6:e1:81:8b:ab:78:ac:
60:2a:4e:56:dc:34:0c:cc:9e:54:da:3c:b3:58:25:
8d:e9:e7:47:51:6a:e9:51:c5:c8:7a:a6:29:62:86:
93:df:d9:9f:cd:cc:b4:44:3a:29:40:1b:54:e9:08:
5d:48:f3:02:57:02:63:e6:c7:be:cd:37:9e:4a:05:
51:a6:be:d9:d9:34:9a:7f:78:de:c8:ae:9b:ee:50:
bb:73:29:64:74:07:4a:6b:ba:1e:43:76:46:9f:6e:
52:0d:05:68:2c:b8:4e:f1:f6:ad:18:c0:f0:f2:7e:
90:91:e7:87:84:e8:5b:7b:47:bc:91:17:06:12:8c:
ec:0b:44:e2:5f:52:5d:ff:ef:ee:19:dd:38:e0:0a:
11:0d:72:af:f0:c1:39:05:de:60:30:af:ff:42:c0:
4f:65:1f:1f:89:a4:41:1a:29:28:30:ac:2d:78:31:
5d:fc:fc:f5:50:d9:72:ed:17:d9:22:12:fa:0c:98:
82:d1:a4:12:d6:1a:f0:f2:7e:1e:81:4e:8d:bb:92:
c5:2e:77:0e:e7:27:d6:44:71:b7:ee:86:74:f7:f8:
d2:b4:12:9b:58:8f:7a:e9:b2:59:1c:27:9b:c2:31:
fc:9a:cc:38:99:23:9e:bb:dd:ef:d7:3a:a5:e0:60:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:08:4D:DA:5A:96:6D:25:76:EF:92:38:51:68:8C:83:05:1B:3C:D6
X509v3 Authority Key Identifier:
keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:2d:c5:1e:08:43:52:f8:6f:c9:99:bb:f7:67:f6:28:be:e8:
a1:6e:0a:7b:e6:2f:35:5b:45:72:77:20:79:a6:0d:64:3e:b7:
e1:8d:e2:87:eb:67:49:7b:25:4c:24:21:97:e9:5b:39:06:76:
26:63:b3:d0:75:18:f3:fa:10:2d:bc:e8:05:02:c5:c9:64:55:
ce:b6:49:6a:05:f4:4f:92:30:59:3d:44:50:09:67:69:bd:83:
44:74:76:d8:c9:61:ac:52:23:b2:fd:1c:00:f8:59:7e:48:b4:
47:46:b6:b7:10:9b:17:70:bf:0c:81:8e:01:19:2e:b6:51:7b:
ff:fe:08:b7:f2:28:69:73:d2:95:9f:75:10:8b:5b:34:9b:5c:
72:03:df:c8:92:cc:70:f9:23:5c:e8:0a:33:a5:7e:fe:87:b9:
55:06:06:04:83:5a:3b:8c:a0:46:86:53:5e:56:99:14:15:3c:
16:94:4a:63:ba:af:8f:7c:29:06:b7:b6:14:02:61:d8:02:ca:
6a:0a:7b:d7:dd:c8:a4:c6:a1:d3:da:fe:52:5b:87:a9:5d:aa:
5d:a6:5d:34:6b:47:e1:0e:a1:50:91:2b:58:99:1d:44:ef:f9:
36:a8:7d:3d:e9:34:bc:9c:01:cd:4e:96:b7:a5:f1:00:b4:97:
bc:d5:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:41 2026 by rpki-client