
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
File: ycIPtAaIDHHcvabGs_umov85Kks.mft (raw, json)
Hash identifier: 46OJSWh663y2LCYWGRN2LegO9EmRUgzCWeBG3B5ZPSQ=
Subject key identifier: 6B:3F:1C:48:C3:DD:F3:CE:33:60:4F:85:6C:70:77:E1:31:11:85:EA
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Certificate issuer: /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
Manifest number: 60
Signing time: Thu 11 Jun 2026 10:26:19 +0000
Manifest this update: Thu 11 Jun 2026 10:26:18 +0000
Manifest next update: Thu 18 Jun 2026 10:26:18 +0000
Files and hashes: 1: ycIPtAaIDHHcvabGs_umov85Kks.crl (hash: XW3RevNvLjO+QbSL977W9k8LP53PFz0H65NTuy3GkWU=)
2: 41E03246DA3E11F0A9D9994C8ED3641D.roa (hash: 5ges78Gj6eYTmdrnimD5wNwWYT1ipWI3keb1qzsct3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Validity
Not Before: Jun 11 10:26:18 2026 GMT
Not After : Jun 18 10:26:18 2026 GMT
Subject: CN=6a2a8d4a-bfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:80:36:65:f2:ec:5c:d0:2a:cb:aa:70:e1:
2f:66:3c:50:37:fb:73:4d:ac:62:3c:2c:fb:c3:cd:
19:32:dc:13:a6:98:64:bd:c9:35:3d:cf:9b:57:33:
6e:5d:49:7d:44:ed:55:df:3c:87:ed:82:47:fb:4c:
69:69:05:f7:ad:25:ba:3c:8d:c3:32:eb:70:89:f4:
a3:41:1b:0e:93:61:65:20:1e:92:75:3d:5d:dc:ee:
33:61:b1:bb:ac:d7:d7:e9:14:45:da:af:fa:e9:d0:
6d:9b:b7:ea:9b:9f:41:3d:90:86:ae:4a:66:3c:8f:
9d:42:83:6b:5c:10:d2:3f:c3:48:23:26:f6:d5:74:
e3:6d:83:e1:3c:1d:8e:01:72:db:b6:7f:88:84:a5:
1b:fe:57:fe:d7:58:45:5e:cf:03:36:00:3c:ee:c8:
d5:cc:19:01:50:6b:d1:08:20:46:61:bb:42:0f:11:
04:73:91:e5:e8:2a:7e:f4:86:1b:b3:8c:d4:a7:70:
bf:63:b5:aa:bc:cc:cc:e7:fb:e2:f4:75:2c:4b:f5:
dd:b8:53:86:1f:5f:67:e1:a7:2c:a3:23:80:6a:46:
1d:54:97:c6:83:48:be:08:0e:d3:85:b8:61:92:ea:
8a:6a:ea:f6:b4:2d:45:56:a6:dc:0c:29:37:eb:58:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:1C:48:C3:DD:F3:CE:33:60:4F:85:6C:70:77:E1:31:11:85:EA
X509v3 Authority Key Identifier:
keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5e:e5:40:3d:52:2e:8d:9a:66:b6:e6:9a:d2:7a:04:8a:79:
90:20:69:fd:d3:99:de:3c:93:72:ca:3b:91:51:4e:58:0e:6e:
8c:f4:61:35:42:a2:e3:e6:87:9a:38:30:aa:cc:81:f7:a9:3d:
fe:8d:3f:f2:57:5a:16:51:f5:18:82:64:66:60:b2:23:03:7a:
ab:fd:3f:d3:59:6f:25:02:da:f3:f8:7f:ed:c6:eb:21:6c:39:
f1:8d:43:06:a6:70:19:82:47:95:e6:d7:de:1e:0f:81:b8:89:
18:1f:43:b7:26:93:90:3d:8b:66:3c:de:2f:f9:9f:4c:e8:80:
48:4a:f2:73:39:f3:01:fa:40:ae:15:21:3c:7d:0d:24:ca:3c:
79:bd:7e:29:be:34:33:84:71:24:c9:7c:11:cb:39:61:da:8a:
02:bf:bd:1b:e6:94:b4:49:0d:50:e9:95:4b:53:ca:10:60:82:
84:83:10:d2:48:32:dc:bb:8a:6f:d7:ad:dd:d1:49:5b:1a:e8:
83:95:64:06:42:21:b1:f9:0e:15:a2:bc:7f:cd:58:d9:ad:21:
cc:45:e4:2d:6d:61:dc:d6:77:dc:29:34:37:ca:4a:5f:cd:53:
cb:bf:fd:86:cf:4b:ec:4a:87:b0:d1:49:b9:81:cf:98:85:4c:
2f:94:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:23 2026 by rpki-client