
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json)
Hash identifier: hc+/8CZk/sl/e8pNGukuakfu37Mhbif4jdLQjq+P8UM=
Subject key identifier: 87:F1:DA:62:54:F5:04:9B:DA:06:AA:41:1F:8D:59:03:8D:77:8B:DC
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial: 26C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
Manifest number: 26A8
Signing time: Thu 16 Apr 2026 15:39:32 +0000
Manifest this update: Thu 16 Apr 2026 15:39:32 +0000
Manifest next update: Thu 23 Apr 2026 15:39:32 +0000
Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: UOtkvq+6kEJ36Q5qlTeL5hD2gNPiV/39qyKfRAQG374=)
2: FBD68828FCBF11F0A4D02CBC666F56BC.roa (hash: SxJM2aFKgBGF6I9rZ7S9/EziiSoyCz/xteiPP/MBsS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9923 (0x26c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Validity
Not Before: Apr 16 15:39:32 2026 GMT
Not After : Apr 23 15:39:32 2026 GMT
Subject: CN=69e102b4-ab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:14:27:b4:f8:7e:a0:8b:92:19:d7:de:26:
95:dc:a1:11:53:d5:58:94:e9:d2:17:51:d8:3e:bf:
71:2a:05:9b:e0:e3:b3:c4:dc:fb:05:00:2c:59:99:
b9:a8:e0:05:93:2c:41:98:e8:c1:bc:ab:69:8a:f6:
6e:0e:a9:17:64:d3:c9:76:9e:7e:95:50:9a:5c:aa:
7f:e9:f5:87:d3:22:ee:00:9e:32:f9:ad:0f:11:aa:
4a:83:4b:8c:56:ad:57:19:c1:8b:f5:e7:01:db:69:
6a:2d:04:08:5f:5b:d2:f2:23:97:cf:be:97:25:25:
63:b1:49:f0:4f:26:58:f2:ec:4e:c3:41:ec:21:d3:
a4:dd:37:be:ad:96:5e:91:4c:76:d7:1a:6f:70:ff:
d9:2c:65:be:e2:f2:bb:67:6b:61:8a:4a:09:c8:d2:
15:6c:ee:9d:26:1e:0d:3b:34:89:b8:97:0e:a2:cf:
c6:0a:61:5a:9f:b9:81:e2:0f:02:b1:2c:9c:5d:5c:
1e:8f:e1:78:e7:d2:88:51:0d:6b:d7:ed:ae:fe:53:
7d:af:80:85:e1:9a:83:26:0c:26:04:bd:76:02:96:
99:b8:2d:25:4d:34:3a:47:21:07:26:dd:06:d5:02:
04:a8:17:44:63:17:9f:ef:21:a1:39:ee:4a:b7:2b:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:DA:62:54:F5:04:9B:DA:06:AA:41:1F:8D:59:03:8D:77:8B:DC
X509v3 Authority Key Identifier:
keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:eb:64:f3:e4:fc:bc:93:7d:dc:ba:78:74:98:28:8b:d6:ea:
a9:70:b6:76:f5:b4:10:23:6c:65:55:f3:59:03:40:78:74:6f:
3a:65:47:28:8c:ad:e7:9b:85:94:1d:14:9c:36:18:06:28:99:
fc:4d:ea:25:d5:c3:87:e1:ac:e4:eb:65:86:98:40:dc:f9:5e:
db:f6:2a:f1:ac:c2:83:bf:bc:07:8e:d9:dd:86:f2:89:97:4b:
75:14:df:a5:77:05:7a:c4:8c:63:97:de:7d:82:78:8f:84:5a:
19:b4:97:7d:13:e0:ed:1b:7a:3c:a8:2c:86:69:88:9b:bd:c7:
9a:30:af:c9:02:a9:86:8b:22:b7:26:4b:7b:a2:16:8c:99:98:
6e:9f:fb:63:ad:6c:f5:86:53:84:47:3c:60:ce:f8:97:06:c0:
0f:04:d0:21:a5:0d:cb:7f:a5:db:67:88:f6:be:d2:74:99:cb:
b5:b8:a6:20:84:27:fa:eb:c5:ab:fe:a7:72:a8:3a:e1:a5:bf:
03:ae:3d:c3:07:b8:33:d2:ff:6c:d5:d5:7f:8d:bb:3d:e4:ed:
6f:1a:01:22:e8:d2:64:e7:40:a3:88:d7:95:d3:76:60:ad:dd:
37:cd:6d:a1:81:5d:28:f7:2b:11:51:5c:c5:0f:c4:7e:bf:a7:
5f:a3:dc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:50 2026 by rpki-client