
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
File: YGHkRpDveLCtqNg1DRHKngGUnBQ.mft (raw, json)
Hash identifier: J4b38cwFgXZYxtRAlyr99AKPCZmWo7qrEemp9R4kecU=
Subject key identifier: 26:BB:DD:B0:09:C4:CF:7F:4E:B6:1C:A3:7E:FD:D8:C1:D4:9D:67:FC
Authority key identifier: 60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14
Certificate issuer: /CN=A91BFE76/serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
Manifest number: 57
Signing time: Fri 17 Apr 2026 07:49:18 +0000
Manifest this update: Fri 17 Apr 2026 07:49:18 +0000
Manifest next update: Fri 24 Apr 2026 07:49:18 +0000
Files and hashes: 1: YGHkRpDveLCtqNg1DRHKngGUnBQ.crl (hash: RLVuLCQ39oP7k/h3SBRQdvDfzE0H/Zj/jiUZVN9bWS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl
rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE76, serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14
Validity
Not Before: Apr 17 07:49:18 2026 GMT
Not After : Apr 24 07:49:18 2026 GMT
Subject: CN=69e1e5fe-3c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:ee:5d:ab:f2:66:5a:76:c5:8b:ab:5a:f4:
70:43:47:80:94:a1:a7:7c:68:2e:ac:90:55:0c:90:
88:e8:3e:52:c5:76:d5:3c:4c:51:28:97:6d:c7:d2:
ea:59:c1:26:4a:ac:1f:4e:71:eb:83:5e:1e:51:b1:
0a:1e:fa:1b:0a:ad:7f:9c:87:69:41:6e:a4:03:eb:
cf:f1:40:f1:19:15:c9:98:c0:9d:90:27:1c:27:1a:
5e:ce:f7:e9:9e:00:8d:8a:0c:41:1c:e7:bf:c5:b3:
3f:5a:ff:e7:c5:0a:f0:a8:50:32:b7:71:6a:80:f3:
6f:e5:06:40:31:31:27:24:74:ed:e1:ad:7c:03:31:
98:7c:b2:69:bf:18:4c:21:3d:a5:9a:01:fd:31:d9:
66:9a:f2:6a:67:36:e7:9e:74:c0:62:3d:9d:e0:f5:
dd:3d:ea:b2:bc:c7:89:14:11:8c:d8:57:70:98:4c:
91:55:25:a9:8a:91:8f:a4:ad:49:5c:2b:71:65:69:
e9:44:e6:3c:bf:01:7d:32:be:e3:d4:7f:87:0f:3a:
e6:fd:f4:31:04:c2:b3:74:0f:50:03:ff:f1:a6:c1:
62:0b:b4:cb:c1:f2:83:47:68:82:a5:8a:dd:e7:1a:
4a:87:26:46:5b:f0:e6:6d:26:ae:7e:56:d7:5b:ea:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:DD:B0:09:C4:CF:7F:4E:B6:1C:A3:7E:FD:D8:C1:D4:9D:67:FC
X509v3 Authority Key Identifier:
keyid:60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:65:b9:c8:28:80:98:58:58:90:ef:d7:da:bc:cf:dd:76:27:
1c:1e:fe:7d:c1:0f:60:8a:c9:40:72:2b:57:e1:59:b7:f2:45:
4d:0c:67:ae:a1:2e:c4:53:9f:a8:59:27:9d:c2:56:73:ba:3d:
76:66:09:d7:de:c9:a4:4a:ed:2e:70:34:9b:47:24:15:dd:14:
0e:bd:c7:95:eb:94:05:81:5e:39:c0:0e:c4:ab:3b:1c:e2:78:
49:13:36:2e:00:56:ce:c2:26:5b:67:17:66:85:cf:6a:14:83:
e7:03:36:fe:7e:a9:d7:05:df:05:18:4a:f8:c9:61:c4:b4:39:
21:66:e5:6b:f7:a5:54:37:2f:0c:61:01:d1:f5:1e:57:9a:4b:
d6:0c:b8:75:ee:33:4c:22:47:5e:86:dc:27:f3:61:bc:3e:fe:
11:79:17:a8:e2:b7:72:8e:c2:34:1d:99:e2:7f:e0:9e:f9:d8:
3a:ff:95:f6:c8:6d:43:91:62:4a:22:45:ad:68:42:a4:12:e2:
40:36:33:6a:7b:83:09:fc:42:e9:09:35:a7:f5:94:04:2f:51:
d2:e8:3f:62:07:b5:98:2a:97:54:f4:1e:82:bf:2a:2b:a8:45:
5f:f0:2d:db:ee:fb:08:8e:52:1a:ec:67:2f:66:07:79:33:2e:
74:a8:b4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:25 2026 by rpki-client