
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
File: 1ybobzALJko1PClnPgdxb1RUteI.mft (raw, json)
Hash identifier: TF3bj1En6kdASztUPTmlKzACmlmw1MY+RoGrzPp/qqk=
Subject key identifier: 9F:41:9A:31:BC:62:0A:75:C5:D5:8E:50:D1:4B:84:6D:6C:93:85:6E
Authority key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Certificate issuer: /CN=A91B4053/serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
Manifest number: B9
Signing time: Thu 11 Jun 2026 09:21:45 +0000
Manifest this update: Thu 11 Jun 2026 09:21:45 +0000
Manifest next update: Thu 18 Jun 2026 09:21:45 +0000
Files and hashes: 1: 1ybobzALJko1PClnPgdxb1RUteI.crl (hash: FnwxrFPSGSiUGXRQ6Jot8ECjBuAVq059FLs2p5Anc78=)
2: D28B7DD450E411F081600061C4F9AE02.roa (hash: oi0JC/Dg/qtN4Sq4ydksp3+2DNk0fSKtyYZSAHUSHgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Validity
Not Before: Jun 11 09:21:45 2026 GMT
Not After : Jun 18 09:21:45 2026 GMT
Subject: CN=6a2a7e29-71ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:67:11:75:21:bb:ce:28:e1:60:e2:0d:2a:
8d:8b:aa:f4:9e:c8:ee:bb:74:6c:8e:f7:8c:89:5b:
7e:3d:50:69:1b:3f:a6:fe:f4:bf:4f:11:18:0d:e7:
4e:7f:7f:dd:51:a7:06:9a:0e:d7:bc:83:9b:c5:af:
65:be:71:da:b6:81:75:6a:72:0a:12:34:de:66:af:
fc:2f:35:85:82:f7:26:ed:86:a2:73:83:82:fa:34:
1b:0e:72:a9:91:1f:4d:38:a6:d4:78:a5:84:ba:8c:
af:4a:f1:e4:47:fd:3a:14:72:df:1b:5b:5b:72:c2:
21:29:e3:68:83:16:48:b1:23:93:df:2e:03:6d:d6:
b4:d5:3d:62:9d:d3:1d:84:f9:d8:26:a1:c9:7b:76:
25:28:ea:9f:a0:65:e7:47:ec:e3:27:14:2a:74:f1:
b8:85:2b:e7:69:ec:19:a6:0a:6a:68:97:ee:77:f7:
cc:97:50:e8:7c:30:5b:5b:75:d9:76:7d:03:01:ba:
7c:9f:75:7e:4c:54:99:16:17:c6:84:4e:b6:68:2f:
0e:2a:b3:0f:04:55:2e:58:e3:01:1b:d8:33:8f:33:
04:95:66:01:b0:48:b4:df:f6:eb:85:91:c9:fc:8b:
05:13:61:3c:26:0a:36:c0:58:4c:d3:b4:87:e4:81:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:41:9A:31:BC:62:0A:75:C5:D5:8E:50:D1:4B:84:6D:6C:93:85:6E
X509v3 Authority Key Identifier:
keyid:D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:49:a9:e1:eb:a4:1a:f3:38:9a:85:9a:74:ff:d7:b7:8c:d1:
33:a1:ad:85:76:72:d1:99:62:81:1b:dc:de:aa:58:58:cf:4c:
f0:13:34:37:45:40:2b:03:bc:7d:2c:00:21:da:64:7b:ea:34:
2d:ef:08:83:c7:09:c4:6a:cb:f4:c8:58:d4:6c:28:7f:3c:30:
c8:e3:50:33:66:75:75:87:20:ff:55:2b:10:a6:dc:e6:18:c8:
50:97:2a:7d:58:80:11:dc:09:50:a8:c3:1d:84:c7:e2:b6:e2:
ef:5a:a1:d9:cd:83:f4:6e:b2:b2:3e:1d:bc:68:21:60:1d:0b:
23:82:c3:b4:90:35:7a:06:dd:4b:c2:80:df:95:2e:4e:15:1e:
71:29:cf:6a:7f:1c:bd:0d:24:e9:37:a3:57:d3:6b:20:b4:c5:
b2:49:f0:26:05:a2:c4:89:bd:32:bc:b1:0c:70:55:32:17:bf:
37:9e:b7:ff:ef:24:c2:0b:26:b3:a5:59:17:45:d3:56:1d:24:
44:83:fe:1a:a9:cc:e6:ff:61:b5:9f:1f:5b:d7:ff:5d:5c:5a:
f1:1a:e6:6f:a2:1f:76:e5:98:d0:d7:fb:3a:07:a1:ac:18:c1:
eb:5e:59:05:4e:73:a5:16:ec:b2:78:fd:b9:14:59:37:e5:99:
05:48:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:25 2026 by rpki-client