
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json)
Hash identifier: F668MvXldByf6vrnm8YY6JfgajXbYGhQwwoJKssr+5I=
Subject key identifier: 83:8C:99:49:56:F6:84:B2:5B:23:D2:E3:65:A2:35:E5:23:D6:F0:26
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial: 26E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
Manifest number: 26C5
Signing time: Fri 12 Jun 2026 15:39:53 +0000
Manifest this update: Fri 12 Jun 2026 15:39:53 +0000
Manifest next update: Fri 19 Jun 2026 15:39:53 +0000
Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: 8dvZq8yhoEHvgw0nvOX9MctdpUYgJ5rI4rk2P7s9ICc=)
2: FBD68828FCBF11F0A4D02CBC666F56BC.roa (hash: SxJM2aFKgBGF6I9rZ7S9/EziiSoyCz/xteiPP/MBsS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9952 (0x26e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Validity
Not Before: Jun 12 15:39:53 2026 GMT
Not After : Jun 19 15:39:53 2026 GMT
Subject: CN=6a2c2849-a423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:e3:1c:42:29:0f:8f:d1:51:18:73:e7:ff:
f4:c7:f8:23:23:71:18:8c:fa:2a:cb:b8:10:a1:0c:
75:9d:3c:89:18:18:e2:2b:03:97:e9:30:0d:79:f5:
b9:58:4e:33:dc:08:db:ce:52:9c:c2:47:61:9c:6a:
4b:6a:a2:49:ea:ab:0a:9d:e4:ee:27:e7:a8:91:ce:
a1:2b:07:c4:a9:aa:9e:a2:42:42:8f:11:a0:35:98:
91:87:53:0f:c0:c2:40:4c:d1:90:5b:1c:a6:18:3c:
5d:87:ae:0f:7f:3f:02:89:8c:85:9d:81:7f:73:1e:
84:9c:e0:28:a8:31:a0:3d:45:65:82:fb:25:94:d8:
bc:12:55:d5:37:57:e9:d0:9a:58:55:d9:6f:b2:14:
0b:6f:77:06:02:2a:db:cb:03:ef:e6:29:95:4c:64:
52:0d:12:18:38:e2:1d:a1:c8:cb:f8:d9:20:11:12:
5b:f9:06:a1:8b:6a:17:84:3a:d9:0e:b7:97:35:d5:
21:36:9b:08:ff:4d:ad:d4:07:95:a5:e7:7a:6a:3a:
38:7b:63:c2:f4:60:bf:66:a4:81:03:0a:50:36:61:
aa:f6:ae:00:2c:52:8c:dc:93:c9:a3:f7:96:3f:57:
66:9f:58:29:db:aa:c9:ec:ad:eb:9d:3e:45:f8:05:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:99:49:56:F6:84:B2:5B:23:D2:E3:65:A2:35:E5:23:D6:F0:26
X509v3 Authority Key Identifier:
keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:e9:b7:61:52:bc:6e:c2:27:04:c3:11:40:df:a2:29:96:ae:
b3:bd:c2:27:49:22:8d:0c:80:46:27:8a:27:13:37:4e:2c:49:
cc:dc:5e:61:6a:da:93:9d:55:bd:84:d6:fd:1d:81:41:8e:49:
8f:e5:e7:4a:cb:3c:57:f7:2c:1b:af:fc:bf:96:ab:d3:3b:0d:
25:0c:a8:2f:e7:bf:b4:52:47:9d:9f:c4:56:ed:54:c6:e0:58:
d1:55:74:dd:d2:17:46:e8:b5:9e:4e:f7:8b:94:98:0e:46:4b:
80:3e:7f:8d:1f:f3:9f:2a:7c:4d:8d:a6:2a:a8:98:19:b3:fe:
1c:62:5d:eb:13:ea:b0:bc:b2:c6:49:70:70:26:42:8c:e4:41:
9b:ff:1f:c9:08:80:3d:03:70:8a:de:eb:85:e3:7e:88:36:2c:
4d:35:cc:71:9e:db:09:99:96:c1:82:09:de:c8:97:6d:2e:0e:
e8:a6:0c:34:ce:10:2e:a9:38:7a:dc:5d:39:40:32:9a:3a:6d:
57:4e:84:7a:40:73:a8:ee:96:3f:35:71:b5:33:73:b2:32:df:
0b:74:8b:1e:3e:3c:d4:d4:bc:b7:6a:28:42:3a:a0:ba:c8:16:
f3:2f:05:71:57:2c:2c:aa:ca:86:26:97:25:97:d4:6e:4e:10:
c4:00:0a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:46 2026 by rpki-client