
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
File: 1ybobzALJko1PClnPgdxb1RUteI.mft (raw, json)
Hash identifier: IOcCaXv6czeZTvHg98GJRkPzojXwBQv8r54RAhmYILs=
Subject key identifier: 74:32:59:7B:AE:E7:42:B5:81:95:D8:58:DE:0F:1E:9F:52:A5:35:B6
Authority key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Certificate issuer: /CN=A91B4053/serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
Manifest number: D0
Signing time: Mon 27 Jul 2026 08:53:44 +0000
Manifest this update: Mon 27 Jul 2026 08:53:44 +0000
Manifest next update: Mon 03 Aug 2026 08:53:44 +0000
Files and hashes: 1: 1ybobzALJko1PClnPgdxb1RUteI.crl (hash: NGySqMEZjxq0ctnES0xTXyiuTtJo9L3n9BIqks2Dw4A=)
2: D28B7DD450E411F081600061C4F9AE02.roa (hash: oi0JC/Dg/qtN4Sq4ydksp3+2DNk0fSKtyYZSAHUSHgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Validity
Not Before: Jul 27 08:53:44 2026 GMT
Not After : Aug 3 08:53:44 2026 GMT
Subject: CN=6a671c98-05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:71:aa:38:1c:91:38:ec:e7:7d:df:6f:19:
c2:4f:4f:12:a1:d6:c7:ad:60:b2:a5:0f:da:ef:32:
6d:93:30:96:68:c9:75:67:e6:2d:22:4d:4e:06:01:
41:95:e6:15:e7:7c:f7:89:19:09:92:5f:b1:a5:bc:
c3:b9:a3:09:89:5a:79:5e:5c:cd:4b:4e:12:6b:ad:
c4:d5:c6:b9:25:a3:24:16:82:ee:4d:b9:5b:3d:c5:
a7:f4:58:b1:e0:59:61:eb:ba:ec:7d:be:33:99:c4:
4a:97:f4:93:c1:7a:31:7f:6d:cc:2c:23:2f:cf:a4:
ca:e7:18:23:0f:0d:8f:26:a0:e4:ec:19:54:3e:e1:
99:06:8f:06:61:ff:8c:be:25:cd:57:83:27:7f:45:
7c:0c:8a:52:b5:03:c4:59:3b:24:5a:eb:12:38:ca:
24:e8:0a:75:19:ae:85:34:4d:0c:38:4a:c8:24:f0:
b2:c0:f3:d9:27:e8:63:ae:96:08:b2:63:b6:a8:5e:
28:cd:2a:62:25:dd:0e:df:58:52:6f:12:aa:d9:3b:
7f:23:fd:bc:56:6d:d7:17:a2:5a:ca:36:68:93:dd:
3b:69:9c:d1:5e:4b:df:4a:96:96:ad:22:d1:be:5a:
d2:df:4f:15:59:52:b1:40:1f:e2:2f:44:98:b0:21:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:59:7B:AE:E7:42:B5:81:95:D8:58:DE:0F:1E:9F:52:A5:35:B6
X509v3 Authority Key Identifier:
keyid:D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:db:1e:cc:2b:1e:65:0e:47:5b:f6:bf:34:d2:76:77:87:32:
67:83:0b:97:10:ce:a5:87:f2:61:3b:b1:f2:35:13:ad:7d:00:
60:04:f8:b0:a8:0c:fa:60:5b:a4:de:03:1e:a7:54:10:ab:24:
93:db:0a:90:d2:6e:f2:1d:8c:66:c1:b3:8b:ab:86:f7:c8:55:
06:b7:6e:40:c1:09:7d:05:7b:02:90:9a:68:d0:b6:ee:00:e9:
07:6b:36:36:d1:31:2c:91:bc:75:78:5b:72:9b:b6:4c:b0:9c:
b7:77:9b:34:20:30:80:54:04:05:aa:9b:d9:01:7c:83:4c:e9:
dc:2d:48:af:2a:df:80:f3:98:80:36:34:85:d5:eb:2f:53:03:
c2:1e:45:a4:b4:9f:92:22:54:97:49:49:f0:6d:fa:c5:51:c8:
50:e4:fe:59:42:de:35:a5:b6:54:67:a3:b7:21:f6:9f:fa:60:
a3:de:93:86:16:eb:d6:17:88:8e:32:bb:76:67:6e:91:a2:41:
8f:0e:5d:67:8c:83:ee:13:a1:22:63:25:56:46:e9:e3:34:37:
6a:d8:16:6f:40:90:49:99:c4:f4:82:9b:f8:53:c0:4e:e5:4c:
60:60:31:e1:ae:b3:5e:a8:12:92:66:6b:9d:3c:17:83:c9:fc:
92:62:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:49 2026 by rpki-client