
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json)
Hash identifier: YztJ6/QT3emq5/7a3q1oLV76a6KdMi0stgO44HPs4cg=
Subject key identifier: 6E:B8:E6:6C:97:DE:44:5D:5E:AF:EA:76:BD:D0:B9:AA:78:ED:D2:A1
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
Manifest number: 0219
Signing time: Sat 13 Jun 2026 02:57:15 +0000
Manifest this update: Sat 13 Jun 2026 02:57:15 +0000
Manifest next update: Sat 20 Jun 2026 02:57:15 +0000
Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: QXemCgP0Vw4L74nrhtjQqV/uJ5S6FKAy5IxODmFcNbo=)
2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=)
3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=)
4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Jun 13 02:57:15 2026 GMT
Not After : Jun 20 02:57:15 2026 GMT
Subject: CN=6a2cc70b-10fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:2e:22:3a:e2:f6:0a:51:ac:68:7a:94:d9:
3c:eb:f2:3d:ee:05:05:02:a0:b2:6a:d4:5e:79:4a:
fa:2c:32:80:5e:54:66:51:2a:12:9e:6b:21:1f:0c:
44:3b:59:af:a9:dd:94:08:a2:4d:66:0c:ee:0a:01:
47:5d:f7:46:43:c1:3e:f8:ed:91:63:63:a3:a1:6b:
de:e2:41:6e:4b:88:4a:ea:5e:e0:98:f2:79:54:f8:
6e:19:fa:19:39:b1:af:94:e4:40:76:84:9c:c4:f3:
93:31:d0:72:84:b0:51:a7:45:e5:2b:2a:99:56:c9:
f5:02:cd:65:8f:6e:b9:69:9f:45:64:08:c4:6b:98:
4d:8c:1e:18:72:02:b5:11:d1:35:a0:aa:57:d1:3f:
7e:3d:02:1e:4f:86:fb:33:a8:28:4f:58:4b:12:1a:
3a:82:cd:8f:55:ba:06:4a:63:1b:7d:8f:e8:66:28:
97:55:fa:c5:0c:1b:2a:e1:96:fb:70:5c:42:38:ec:
c0:54:e4:93:71:4a:85:10:6f:60:86:fa:a9:d4:a1:
21:5a:10:32:00:b6:1e:bf:1e:60:01:41:33:fb:ee:
1d:a2:a2:27:f4:4a:fc:82:02:f4:a6:ab:12:2e:14:
39:30:a8:86:ad:b4:dd:69:6e:f9:77:b0:d0:e5:3c:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B8:E6:6C:97:DE:44:5D:5E:AF:EA:76:BD:D0:B9:AA:78:ED:D2:A1
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:de:42:1f:6f:46:54:7f:eb:3d:76:26:34:87:25:fe:d4:4e:
3d:eb:b9:09:e4:0f:e5:da:65:d9:50:76:99:82:dd:e6:30:bd:
c5:33:f2:32:69:0c:ac:4b:36:a1:b3:30:b1:05:0a:02:35:28:
58:bf:d1:a3:5c:cd:17:4a:e0:db:9e:6d:06:8a:74:14:12:d1:
87:c5:c1:d7:c6:14:2b:4f:bb:41:88:78:70:e0:72:81:76:c9:
3c:dc:c6:c7:8e:31:0f:7a:13:66:5b:53:cf:68:22:cf:c8:1e:
bd:6c:f7:f1:fa:d0:a3:58:01:fb:aa:dc:67:9a:ca:64:eb:50:
68:1f:db:d2:58:2d:1d:58:e9:60:5c:6c:19:58:33:82:69:64:
d2:02:ed:be:31:61:f7:96:8f:d9:bb:ad:9c:5d:37:76:12:b7:
aa:00:45:63:66:75:e2:67:22:df:88:ba:5e:c4:4b:05:e7:bc:
f6:fa:15:24:64:67:7a:b3:ee:c2:cb:10:c1:4b:e6:66:ba:d1:
d6:46:c4:bc:1a:23:5c:7b:ad:29:80:b6:d1:a7:bf:cf:ef:51:
03:d6:2b:c3:09:2a:47:5e:69:66:04:a1:e5:bc:84:e4:1f:d7:
ca:bb:4a:13:d5:20:1c:7f:de:68:58:a1:d1:d9:6e:9c:88:4a:
8a:e8:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:24 2026 by rpki-client