
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json)
Hash identifier: tG1bbJyVaq7KFr6bvZ+9kpKTuCF4HGQxnYfxWcPhfpI=
Subject key identifier: 21:42:D2:EA:B6:75:A2:AE:D8:DC:B9:4E:28:B9:7B:BF:01:79:5E:9F
Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Certificate serial: 0C18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
Manifest number: 0BF9
Signing time: Thu 16 Apr 2026 18:49:18 +0000
Manifest this update: Thu 16 Apr 2026 18:49:17 +0000
Manifest next update: Thu 23 Apr 2026 18:49:17 +0000
Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: l8+Jh9UAipyVNFaH9CxOvCjfvgu28aX3fCS0x5yYAJE=)
2: 6AC5AB5CEAB811F088FEC0005D6F56BC.roa (hash: GCpn4gmc0QpPSz7cXybRJq63rDVbixPSMbZl0hH07Xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Validity
Not Before: Apr 16 18:49:17 2026 GMT
Not After : Apr 23 18:49:17 2026 GMT
Subject: CN=69e12f2d-8bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:79:d9:d6:15:f3:b8:b8:b4:af:e6:b1:f7:
55:f7:db:89:73:38:7a:25:f8:b6:87:e4:74:2b:85:
da:ab:d9:22:e0:a5:68:ba:bc:b1:87:d6:f0:16:1b:
26:7d:49:c4:34:f2:4a:c0:4d:0a:f3:e4:98:33:4d:
db:fa:c9:76:a4:be:c5:9f:6e:cf:67:96:58:d4:3f:
7f:85:f7:c3:93:28:ec:49:8c:fa:5e:5f:a0:e0:f6:
1d:4c:0b:ab:32:cc:e4:41:84:a1:cf:b8:f7:4d:3b:
5e:c1:8e:8c:64:9c:dd:59:80:2e:a7:5b:f9:29:e1:
53:c2:8d:c5:52:e6:db:1d:d8:1e:02:0b:a6:f4:3f:
07:61:52:1d:dc:66:0a:5c:15:3f:01:a5:c3:33:1d:
23:9e:b7:c0:d2:74:92:1a:4d:80:f8:57:7b:fc:0a:
86:d1:5a:5d:81:93:03:a0:56:c2:4f:64:39:d8:20:
bc:61:aa:9e:28:08:9b:f2:f8:f0:aa:e0:a1:eb:76:
65:97:58:03:6a:be:db:f7:60:f4:cc:e9:25:2e:ba:
b2:cc:ab:9a:9e:de:c9:03:fc:00:fc:d4:36:ad:ab:
92:2c:37:3b:55:0a:ab:d1:f2:c7:c8:14:42:36:48:
a1:36:58:5e:3c:4c:2b:11:7c:a6:cc:2e:91:c6:9c:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:42:D2:EA:B6:75:A2:AE:D8:DC:B9:4E:28:B9:7B:BF:01:79:5E:9F
X509v3 Authority Key Identifier:
keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fb:f0:fa:5d:af:3d:03:95:5c:9e:13:2e:12:1c:13:25:8d:
4c:4c:99:88:25:b8:f0:73:9f:21:29:af:a8:0c:34:00:c3:99:
8f:72:5e:03:48:72:bd:9f:d4:31:ec:7b:7d:cb:5e:fd:e2:0e:
6c:8c:b8:64:98:0d:8d:b1:af:fa:7a:ce:b1:f1:79:5b:2c:a0:
5d:b8:32:51:11:34:de:37:16:51:69:ac:63:e8:93:a3:63:ed:
e8:e7:37:22:66:ae:48:5c:7e:01:b1:1b:fb:a4:34:76:d1:60:
1a:e3:3a:d9:69:ae:ed:a3:49:23:f9:99:8a:97:85:06:20:fd:
4a:96:5d:93:a7:07:c1:78:87:a8:1b:c2:d3:df:9b:d6:86:32:
0d:63:68:23:9a:e6:b0:e0:ba:78:7f:7d:e7:6c:b6:a8:7c:e7:
ec:42:37:7f:72:46:12:a9:9e:b5:37:9e:27:6c:79:2b:35:fe:
ed:a4:9d:cd:ab:30:ae:c2:33:1d:bd:2b:88:c7:6e:a0:a7:d6:
d9:85:86:6b:a1:e2:e7:b8:50:bb:56:0d:af:0f:77:0d:b6:04:
6d:a0:a5:e4:90:c3:e2:21:c4:44:18:cf:09:0d:99:87:33:b4:
d9:7d:9d:2e:2a:9b:50:b4:9d:e8:88:9a:48:60:a5:f0:12:c7:
c4:fd:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:00 2026 by rpki-client