
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json)
Hash identifier: qe6HW+XeKR0HIpxIpw67JU7aW9kr9osrN2vIyD+Cz9Y=
Subject key identifier: C3:D4:2E:81:3F:16:2A:34:E0:14:17:66:F1:1D:1E:B6:A7:ED:57:F6
Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
Manifest number: 01D2
Signing time: Fri 17 Apr 2026 03:23:32 +0000
Manifest this update: Fri 17 Apr 2026 03:23:32 +0000
Manifest next update: Fri 24 Apr 2026 03:23:32 +0000
Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: 0FieLGN3+UrShwkGgItw4UefLpXKCevTkRJZZ09e27Q=)
2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: BaVQtlGks/nXODj3nVj6X8TPxl0CNzfAzBCFqERU/qA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Validity
Not Before: Apr 17 03:23:32 2026 GMT
Not After : Apr 24 03:23:32 2026 GMT
Subject: CN=69e1a7b4-9ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:17:3e:a1:78:67:31:56:f3:26:bb:ec:ba:
0a:b2:ac:a3:21:03:b9:57:54:84:dc:86:f9:09:41:
91:6f:f7:51:af:bb:30:eb:55:28:47:fa:b7:dc:83:
a9:93:00:67:09:ae:64:e8:e3:b6:69:f8:d4:fd:07:
60:49:1d:52:62:51:63:c0:8a:f2:c4:2b:2f:77:1b:
e3:b1:08:44:38:30:df:03:f0:fe:c5:6e:12:2f:17:
f9:42:24:f1:a5:b4:98:af:5d:e4:1b:bc:44:fe:70:
f6:7c:11:4b:3b:00:e0:8b:d0:8e:3c:e6:28:d2:bc:
ed:d6:69:99:40:03:8f:09:39:02:81:f7:e0:e1:46:
db:9e:8c:e4:2f:3c:bd:12:48:99:c3:17:5d:9a:78:
e1:81:5d:0b:0e:e8:a4:25:37:13:88:f7:84:03:9d:
b7:3b:2e:07:b7:c0:e4:8a:d3:37:b0:62:aa:66:d3:
0a:42:40:1a:96:23:a9:01:7c:59:02:5a:21:ef:4b:
be:96:f4:e1:da:35:72:33:2a:f6:f3:3e:1d:84:e2:
48:5d:7c:0f:ad:ce:89:7f:43:3b:48:01:ad:51:fb:
0b:bf:b5:20:b1:c4:57:04:f5:90:71:1a:c1:60:40:
d9:a8:8d:ce:9f:a4:48:b2:93:16:99:e6:5e:bd:2b:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:2E:81:3F:16:2A:34:E0:14:17:66:F1:1D:1E:B6:A7:ED:57:F6
X509v3 Authority Key Identifier:
keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:19:95:92:68:8d:53:e3:78:26:1e:ed:6a:97:1b:ad:6e:45:
c2:39:5b:1b:ca:a7:70:15:da:c0:47:04:19:79:ff:a7:39:41:
34:2b:a7:3f:22:e0:e4:dd:b1:a6:87:d1:bd:fe:0b:c8:82:41:
fa:16:8b:c0:7b:84:51:dd:0b:a1:b4:a7:09:e1:13:89:73:9d:
06:48:f0:fb:1f:38:c6:21:06:89:cd:af:78:6d:a2:1a:bf:fa:
08:89:6d:94:e7:c1:d5:92:fe:72:53:eb:18:3a:d0:ef:3b:5c:
35:3a:16:24:00:52:ae:c3:13:b5:bc:a1:22:68:4a:5f:95:d4:
5c:84:d2:9e:1d:cb:a7:65:1f:e8:98:50:89:8b:de:35:3c:fb:
c4:52:85:e4:d4:0f:ca:d0:31:80:b8:11:f3:ca:a5:38:84:2f:
66:d2:e0:b7:98:af:e5:66:70:86:7c:ee:22:71:48:69:47:b1:
8a:e1:0b:23:8d:61:df:17:c3:d5:47:70:a2:f9:c9:a6:52:6c:
ba:d1:21:74:c7:59:d8:26:23:ea:93:23:87:d5:21:3e:ab:cd:
ac:ab:29:de:32:44:44:51:cd:98:3d:c9:a8:aa:03:17:58:b7:
87:c2:62:ef:d6:e9:3c:90:8d:1b:e1:5e:51:e2:7a:2e:54:c9:
0f:e8:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:54 2026 by rpki-client