
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json)
Hash identifier: 9uaF2wt8kgjoYJWWcMf8gZ4WmONfxvUcQlZuCCh5l4g=
Subject key identifier: A2:35:4E:DC:B5:40:51:C5:A0:90:05:91:34:5E:37:82:CB:AA:00:8D
Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Certificate serial: 0F18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
Manifest number: 0EFE
Signing time: Fri 12 Jun 2026 17:37:02 +0000
Manifest this update: Fri 12 Jun 2026 17:37:02 +0000
Manifest next update: Fri 19 Jun 2026 17:37:02 +0000
Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: /WnfNo8MItRe9G8tsHkKzR/7UPb+pUNyDGH/GVx2LLg=)
2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: JURe/kWLxWBBPujRNutDT5hH/C63Ar6PS7XUiquehOE=)
3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: 9PzmGNvK7SqmPlPyXHrhBcEPkqCMbrFtsm/C/q55ytk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3864 (0xf18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Validity
Not Before: Jun 12 17:37:02 2026 GMT
Not After : Jun 19 17:37:02 2026 GMT
Subject: CN=6a2c43be-f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:94:48:1f:c1:08:4b:52:1b:6a:d7:46:0a:
b5:0c:2c:53:2f:25:d2:a2:cd:7c:79:77:12:c5:7c:
c5:c7:c0:7e:38:70:64:01:88:ad:f1:03:b4:10:88:
d5:87:a5:d4:de:fb:38:b1:54:16:81:d7:0c:b6:c2:
b4:ee:4d:ce:0e:ee:a2:b9:fa:85:f8:45:fd:cc:b7:
bc:87:c9:65:01:1f:ea:42:9a:eb:bb:1d:b5:08:62:
eb:81:3c:36:03:97:af:c7:54:90:8b:d4:d0:82:f9:
11:38:66:01:35:d9:f0:f6:67:e4:de:10:3f:1a:98:
b5:a4:e4:61:3e:59:d7:eb:11:5c:a9:3f:d2:cd:7f:
fb:03:c4:5c:5b:18:6e:5f:07:15:21:99:8c:f6:c1:
7c:ef:eb:e2:0a:24:c9:27:e7:1a:3e:e8:d6:17:38:
c1:65:97:16:09:af:bb:c9:e2:3e:50:7a:f4:4c:db:
97:14:e8:80:c6:19:4e:fb:ca:55:a3:fe:c3:99:d1:
a9:04:a1:f5:c9:ab:a9:a5:8d:87:0a:9e:5d:67:46:
c5:a1:f1:d0:ba:e3:57:f5:8c:5c:6e:2a:ea:9f:51:
33:f3:28:2f:d4:48:b8:b2:75:75:70:b3:91:47:b0:
ba:c8:25:99:8c:5d:0a:49:94:51:5e:25:b2:09:d3:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:35:4E:DC:B5:40:51:C5:A0:90:05:91:34:5E:37:82:CB:AA:00:8D
X509v3 Authority Key Identifier:
keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c3:b7:a0:40:31:c8:40:72:86:0a:32:58:0b:20:04:93:19:
da:09:9e:bc:9b:08:38:45:e8:ed:5f:90:bb:ef:60:15:ed:34:
68:9e:d6:04:30:d3:24:4a:d2:aa:cf:01:6b:b3:0e:5c:ce:92:
cb:e6:00:70:0d:2c:f2:b3:e3:3d:7f:b3:ee:74:57:89:3f:38:
43:58:ab:8a:90:ff:fa:33:73:e6:ac:60:2d:ed:db:fe:d4:a7:
4e:54:a0:2e:f0:9f:43:73:de:2a:29:25:d3:05:05:0b:f3:d3:
c2:51:5e:91:35:d9:68:3b:07:98:ca:10:5d:e2:4f:08:fb:12:
8e:9c:87:ab:5a:87:a1:bc:7e:e8:f1:cb:79:d7:ad:43:96:ce:
e1:3a:37:24:06:6f:34:c2:e0:0e:53:e1:6e:94:22:48:f8:b5:
51:32:96:5a:f4:2f:ec:78:33:5b:9b:f1:f9:d7:63:3f:ba:94:
5c:46:cb:c5:c6:4f:6b:70:99:ff:bf:f9:68:c7:5f:4e:dd:5f:
46:6f:f2:24:04:88:be:19:ff:f3:c3:3e:38:c1:00:39:29:78:
0b:7a:a7:2f:68:98:43:05:aa:e5:b7:64:28:05:4a:a4:bc:da:
91:09:bd:89:85:fe:00:9b:cb:67:b1:65:22:b8:9e:58:d5:ec:
35:4a:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:26 2026 by rpki-client