
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json)
Hash identifier: m/TIN9GGOSTL1iwq1vDGLW/0iF61kIuUskjZF8dBFDk=
Subject key identifier: FA:9E:7A:80:DB:91:A1:24:8E:F5:08:3B:5D:63:13:5B:CC:CE:90:29
Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Certificate serial: 0568
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
Manifest number: 055F
Signing time: Sun 01 Mar 2026 23:09:44 +0000
Manifest this update: Sun 01 Mar 2026 23:09:43 +0000
Manifest next update: Sun 08 Mar 2026 23:09:43 +0000
Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: 2HiHsqo/52Kq+bnk8lx7xjJ7JmK/iejUuQdm1gA3WPE=)
2: 004A745EDBB011F0904A453A4D641951.roa (hash: 0TWkmfJVbCOLiU1v9M8I2M82G17YACYNARPjaSNnjI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Validity
Not Before: Mar 1 23:09:43 2026 GMT
Not After : Mar 8 23:09:43 2026 GMT
Subject: CN=69a4c737-2af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:43:cc:0b:90:0e:2b:af:c6:a0:59:39:7b:
14:6e:3b:25:1e:70:89:76:03:c0:49:c4:9d:72:18:
dc:80:24:24:f5:5b:98:da:2d:8a:38:d4:c8:8a:32:
c0:19:98:08:df:d3:9b:f9:39:18:ef:89:bb:80:c1:
c5:22:98:3b:b5:82:3a:a3:d4:f8:bd:9a:26:61:84:
36:84:ac:e6:36:64:34:d0:96:8a:d2:44:e7:af:df:
91:86:14:b4:d0:8f:f7:ff:23:71:5b:2b:77:4e:32:
6e:37:82:8f:15:fa:4d:ff:a1:d1:ce:20:0c:ca:ce:
27:58:6a:98:0f:3f:8e:e2:b5:04:3d:8a:11:7c:e7:
9a:a5:48:3a:da:6e:32:05:17:35:ec:b2:70:93:bf:
e1:51:c9:3d:2d:b7:9b:96:5a:12:cc:61:6c:27:7c:
30:74:7b:ab:14:09:2c:99:ed:44:a9:be:64:2a:e0:
47:2e:ab:76:5a:28:f4:db:bc:70:5e:34:f5:73:11:
34:46:a3:d5:a8:e9:08:d1:5c:52:51:35:b3:13:09:
26:b8:2b:8e:24:8f:83:46:c7:b5:06:0a:ee:46:8c:
05:77:e6:9a:30:90:71:b5:65:94:52:3e:d1:b7:6e:
65:f1:1e:d7:76:0f:60:07:c8:75:6c:4b:39:04:80:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:7A:80:DB:91:A1:24:8E:F5:08:3B:5D:63:13:5B:CC:CE:90:29
X509v3 Authority Key Identifier:
keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:72:30:81:d9:76:b8:20:f9:98:4e:16:dc:db:be:b9:e8:0e:
b0:02:5f:d5:59:f5:0b:ea:cc:a7:a3:95:1d:06:af:ce:55:61:
39:10:4d:92:72:fd:90:fd:48:80:b9:d4:9e:c8:28:6c:32:e7:
9d:dc:7f:c1:d8:8b:9d:40:be:14:f7:b8:64:ae:48:54:da:b6:
3e:cc:18:2f:ee:a1:47:c1:5b:cf:19:03:5f:41:2c:84:c6:5c:
1d:0b:05:9b:fa:8c:c7:5a:a2:ac:20:88:96:b6:1a:b7:bd:23:
ee:ca:28:d6:94:ea:39:df:60:3d:f9:45:10:76:b2:ac:7c:7a:
c1:a7:ab:d6:26:c5:b4:35:df:20:a9:fc:e6:bd:f8:f6:53:5b:
54:40:0d:16:f4:53:30:0e:30:0c:5d:10:91:e9:8b:7a:32:31:
42:96:dd:9a:cf:8b:2d:5f:e0:42:a0:72:14:1d:df:b8:07:6c:
68:0e:fd:87:93:62:c1:c7:20:48:d8:c3:eb:cb:99:47:07:75:
a1:d5:61:3f:6a:1f:19:ec:3f:11:46:30:ba:b9:3c:e9:50:3e:
ca:ad:cd:40:14:e5:17:83:a8:01:86:fa:f0:b5:32:eb:30:a2:
e3:f8:03:2e:c4:39:73:90:eb:fe:94:a0:aa:4e:7a:bc:be:d0:
da:51:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:21 2026 by rpki-client