
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
File: YB71rSfD3A1NmC22u0dsBsvHAKA.mft (raw, json)
Hash identifier: nc4D46/wuavHWSew+rtPp4rAEI3uY/1OybCsZRNNsF0=
Subject key identifier: 8E:AE:4E:C4:31:28:60:87:EA:C8:F8:26:3B:40:C2:9F:1A:DC:45:1D
Authority key identifier: 60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0
Certificate issuer: /CN=A91BFE4E/serialNumber=601EF5AD27C3DC0D4D982DB6BB476C06CBC700A0
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
Manifest number: 0157
Signing time: Mon 27 Jul 2026 06:57:20 +0000
Manifest this update: Mon 27 Jul 2026 06:57:19 +0000
Manifest next update: Mon 03 Aug 2026 06:57:19 +0000
Files and hashes: 1: YB71rSfD3A1NmC22u0dsBsvHAKA.crl (hash: A/YRyualpiigFyc2c3uSDXiopD1g6VHm/RbFyL7kVoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.crl
rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE4E, serialNumber=601EF5AD27C3DC0D4D982DB6BB476C06CBC700A0
Validity
Not Before: Jul 27 06:57:19 2026 GMT
Not After : Aug 3 06:57:19 2026 GMT
Subject: CN=6a670150-af96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:c7:fd:b7:2d:bd:3d:68:d4:26:01:19:75:
08:5d:bd:13:4d:9b:22:18:f1:c4:34:41:45:ca:a0:
90:34:46:7d:8a:b7:fb:20:2a:b9:51:95:65:cc:d6:
ad:19:9e:4a:96:ea:0d:ea:72:b1:80:90:28:8c:b1:
56:50:3c:a7:0c:77:7e:42:b2:fe:cf:bb:1d:83:10:
4d:4b:2c:91:81:13:99:e6:23:a5:35:ae:a9:81:20:
66:7c:93:65:b7:16:2d:8f:4a:a7:0a:f2:eb:18:35:
d5:52:c0:26:33:45:7f:49:53:bb:a2:a4:63:e0:55:
65:de:aa:aa:cb:01:76:a7:2f:4a:c6:33:b9:7b:17:
6b:ee:ff:b8:1f:99:ec:8d:76:ec:cf:1c:0e:36:99:
0d:ab:5b:80:37:9c:5d:fd:7c:4d:d5:ef:1e:c8:d0:
2a:cf:17:44:6b:53:b6:c6:2c:0f:60:46:9d:4a:31:
43:b8:9f:15:b0:2c:27:c3:5a:d8:55:39:26:18:ea:
53:96:28:c7:4d:c5:34:a7:a7:f1:b4:60:e8:5d:17:
41:3a:3f:19:df:76:cb:d1:1b:91:62:f0:5c:2a:31:
40:12:8b:91:f6:e1:13:b6:8b:b1:80:7b:9a:8e:87:
3c:3e:1c:db:0c:0b:07:21:a8:60:18:34:c7:88:d8:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AE:4E:C4:31:28:60:87:EA:C8:F8:26:3B:40:C2:9F:1A:DC:45:1D
X509v3 Authority Key Identifier:
keyid:60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:66:cb:5f:28:e2:73:3e:3a:29:e6:ad:bd:da:d0:7a:e2:4c:
8d:83:be:d4:6d:9f:df:c9:3d:ef:6d:ec:de:51:61:0d:b9:3f:
5e:ab:44:74:90:c3:5d:71:a5:a2:75:df:14:b6:38:3b:30:9f:
df:fa:c9:99:d0:2f:d6:73:0b:14:0d:35:68:22:cb:b2:44:5d:
4d:bd:7e:a4:50:81:6f:64:ec:fe:36:6d:1e:88:6f:e7:7c:e2:
c1:2d:78:05:ce:ea:ec:88:ac:e7:10:4e:71:be:cd:27:21:e0:
36:a8:0d:b9:5f:72:4b:10:80:31:ea:e6:87:70:77:52:25:99:
3a:e8:ae:7f:d5:b2:42:f2:7c:13:ff:77:ed:7e:68:49:39:01:
0b:fd:c6:2b:15:c0:6c:92:da:89:6b:97:22:0a:21:d8:ea:44:
93:6a:7e:4a:eb:3d:ca:5e:6d:c9:49:c5:9d:52:ea:dd:2a:ad:
84:ac:dc:d9:d2:46:0a:f0:7a:72:ca:66:cd:a1:29:0f:b6:66:
a5:15:cd:1d:47:4c:b7:9a:17:4c:9c:2c:98:b4:a6:5d:6f:cb:
1b:0c:63:ba:ce:d3:49:40:47:6d:ff:6f:9d:06:e2:e9:8c:3a:
b9:60:7a:22:c4:3b:7a:08:75:1f:a1:02:10:56:8b:69:ad:20:
a9:90:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:30:47 2026 by rpki-client