
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
File: Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft (raw, json)
Hash identifier: JqGebcXuBl0lZeummSJr49NuSh9tH39Etw97ocjFBtQ=
Subject key identifier: 8A:2F:E0:C9:10:3E:12:76:A2:02:98:94:00:C5:22:BE:DB:19:C1:F9
Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
Certificate issuer: /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
Manifest number: 017F
Signing time: Mon 27 Jul 2026 06:28:09 +0000
Manifest this update: Mon 27 Jul 2026 06:28:08 +0000
Manifest next update: Mon 03 Aug 2026 06:28:08 +0000
Files and hashes: 1: Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl (hash: /1m5PNagsvcI1O721PBXmcnr4q3j1nOLYYLGqcfTR8Y=)
2: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (hash: y32dMEUN6YUCKolUe/uVA0r0aXZ6vWR2Ez2nh841QQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl
rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
Validity
Not Before: Jul 27 06:28:08 2026 GMT
Not After : Aug 3 06:28:08 2026 GMT
Subject: CN=6a66fa79-beed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:fd:09:3f:f0:dc:5c:9d:59:18:12:c7:ba:
8c:39:a9:d6:7c:94:e8:cb:92:54:b3:ad:d2:8b:4d:
7e:95:cc:0e:8a:83:e3:9c:25:6d:10:ae:57:a4:23:
2c:f5:d6:f9:0d:35:06:4c:d3:10:72:58:3c:22:e8:
67:d5:b0:ff:32:dd:5f:69:ba:39:b3:6d:9b:6e:2f:
5c:67:87:4d:0d:59:59:55:c0:72:65:fc:cc:92:fc:
c4:39:69:5e:9c:93:21:4e:b5:de:2a:e1:6a:18:17:
35:66:9f:fb:e2:7f:92:09:a9:60:a2:1d:04:a2:92:
a6:3c:19:95:27:4e:d4:6f:d4:80:54:dd:e7:47:0a:
6c:01:a4:72:0d:6f:f7:2d:2a:ae:0c:71:bf:ba:c8:
9f:44:d0:48:c1:bb:6e:c9:da:de:50:cf:57:95:53:
4d:d1:cc:11:87:af:67:64:b4:07:30:db:98:6d:e9:
e2:4f:0d:c0:b7:b8:5c:71:40:9e:67:86:b6:c5:74:
9e:4d:ac:60:91:e8:02:38:00:76:88:af:9a:41:5f:
7d:62:ea:96:a4:af:1f:3a:b1:41:15:02:86:a4:10:
fa:5a:86:dd:e6:cd:65:c3:b6:d1:ea:96:14:cd:b0:
db:3a:6f:c4:68:a3:03:44:ff:71:5a:dd:d9:31:89:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:E0:C9:10:3E:12:76:A2:02:98:94:00:C5:22:BE:DB:19:C1:F9
X509v3 Authority Key Identifier:
keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:04:22:28:90:65:ca:9e:a6:c8:bb:1c:50:e8:85:b1:d1:
7f:be:6a:ba:b3:db:eb:de:f5:1a:4e:94:8e:77:9c:ad:7a:a7:
9b:cf:77:55:a2:5f:5d:6a:be:fb:b0:82:27:53:d7:8d:16:dd:
51:62:aa:11:54:77:26:16:db:d8:58:dc:7b:90:c1:3e:61:b1:
b2:77:0d:ac:bf:30:e6:38:c4:8a:88:74:f2:58:d0:55:d6:6b:
7f:1c:92:05:59:71:49:c0:b1:7b:ae:6e:67:3d:12:9b:2a:0d:
96:09:d2:84:c7:8a:fb:7a:af:e8:3d:8d:f5:2e:c3:9a:84:be:
80:b9:c7:71:2a:8d:8e:5b:a7:d7:a1:c6:f2:36:21:82:08:39:
22:d2:25:66:2f:0c:af:64:ca:32:a1:b8:c3:12:fb:07:c3:ef:
7a:df:1f:55:00:8a:f5:b8:b1:07:44:e8:85:d3:9d:a0:b0:d7:
86:48:e9:8e:4b:6e:b7:03:8c:73:bf:7f:55:4b:60:77:0c:26:
31:d3:ca:4e:a8:b0:01:f4:34:21:86:bd:22:cf:c0:72:ce:af:
cb:5d:a9:07:04:a6:ff:7a:52:da:ba:04:f4:5d:e7:b1:fa:f0:
da:b0:78:43:29:44:44:7a:f5:c5:d3:1a:ee:c0:b7:b7:8b:a4:
90:26:21:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI2MjkxMTAvBgNVBAUTKDYzMEVGQzhCQzgyNDdGOTlBMDEyODA3NDFFNEExQTBE
QjdGMTQ3QjAwHhcNMjYwNzI3MDYyODA4WhcNMjYwODAzMDYyODA4WjAYMRYwFAYD
VQQDEw02YTY2ZmE3OS1iZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAykj9CT/w3FydWRgSx7qMOanWfJToy5JUs63Si01+lcwOioPjnCVtEK5XpCMs
9db5DTUGTNMQclg8Iuhn1bD/Mt1fabo5s22bbi9cZ4dNDVlZVcByZfzMkvzEOWle
nJMhTrXeKuFqGBc1Zp/74n+SCalgoh0EopKmPBmVJ07Ub9SAVN3nRwpsAaRyDW/3
LSquDHG/usifRNBIwbtuydreUM9XlVNN0cwRh69nZLQHMNuYbeniTw3At7hccUCe
Z4a2xXSeTaxgkegCOAB2iK+aQV99YuqWpK8fOrFBFQKGpBD6Wobd5s1lw7bR6pYU
zbDbOm/EaKMDRP9xWt3ZMYkh9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIov4MkQ
PhJ2ogKYlADFIr7bGcH5MB8GA1UdIwQYMBaAFGMO/IvIJH+ZoBKAdB5KGg238Uew
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FMkNGOTQwQTQ1
QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1bWdFb0IwSGtvYURiZnhS
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1l3NzhpOGdrZjVtZ0VvQjBIa29hRGJmeFI3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjYyOS9FMkNGOTQwQTQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1
bWdFb0IwSGtvYURiZnhSN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdgwEIiiQZcqepsi7HFDohbHRf75qurPb6971Gk6UjnecrXqnm893VaJfXWq+
+7CCJ1PXjRbdUWKqEVR3Jhbb2Fjce5DBPmGxsncNrL8w5jjEioh08ljQVdZrfxyS
BVlxScCxe65uZz0SmyoNlgnShMeK+3qv6D2N9S7DmoS+gLnHcSqNjlun16HG8jYh
ggg5ItIlZi8Mr2TKMqG4wxL7B8Pvet8fVQCK9bixB0TohdOdoLDXhkjpjktutwOM
c79/VUtgdwwmMdPKTqiwAfQ0IYa9Is/Acs6vy12pBwSm/3pS2roE9F3nsfrw2rB4
QylERHr1xdMa7sC3t4ukkCYh6A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:10 2026 by rpki-client