
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json)
Hash identifier: 9dpAzOd9ZFYuhYTUmqJ7CWW0dQf2mBM+Xy3SSdmSCzM=
Subject key identifier: DB:77:67:4F:8E:DD:10:BE:93:D9:33:3D:40:B4:58:E9:87:BE:5C:B8
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
Manifest number: 0273
Signing time: Fri 17 Apr 2026 01:46:19 +0000
Manifest this update: Fri 17 Apr 2026 01:46:19 +0000
Manifest next update: Fri 24 Apr 2026 01:46:19 +0000
Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: RPFMUAAfeBedU7OaMUGBpmtWggUv81vqegFTUe7f94c=)
2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: R3KADOtwsyG/v2+mGTP92tv9io+mPYskKwwNor02wSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Validity
Not Before: Apr 17 01:46:19 2026 GMT
Not After : Apr 24 01:46:19 2026 GMT
Subject: CN=69e190eb-3ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:fa:c9:81:5c:5e:fe:47:ad:ea:ac:31:fa:
da:a4:a1:0b:dd:72:94:36:93:24:4f:72:b9:50:ee:
52:d1:18:c9:66:93:d7:26:8c:ca:51:65:98:5a:7c:
7e:c5:b1:ff:40:27:3b:bf:bd:bc:28:4f:ad:e8:07:
34:ea:3a:48:1a:1a:96:7e:ce:55:e9:18:c0:87:2a:
45:d3:b0:1c:e0:25:31:44:a2:54:75:47:87:7e:43:
33:1e:2d:bc:8e:67:d8:7f:41:d9:d6:f9:53:25:15:
49:1a:54:05:ea:46:04:55:7f:2c:7e:23:7f:da:4c:
f8:7d:e1:74:3c:bc:46:4a:bd:4f:35:16:3e:51:c4:
74:92:67:18:f3:6c:69:65:d8:53:e3:66:34:de:41:
39:ac:7d:bd:7b:9e:4b:05:d3:08:8b:bf:2e:fe:39:
28:29:af:38:74:6e:57:2f:19:b3:ad:9c:2a:d0:8c:
54:75:7e:e3:22:f2:8d:cf:d7:68:5c:32:e5:63:68:
0a:37:5d:2a:76:b8:8b:dd:83:bf:89:2a:93:92:f9:
2f:e6:af:23:b4:86:56:2f:d3:a6:eb:ca:6b:e6:bb:
ad:99:ed:a9:34:1b:32:74:15:68:8e:fe:8a:c7:df:
c6:9f:b8:94:f8:28:1a:5f:23:7f:40:bd:9f:e7:08:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:77:67:4F:8E:DD:10:BE:93:D9:33:3D:40:B4:58:E9:87:BE:5C:B8
X509v3 Authority Key Identifier:
keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4b:c9:1d:08:b3:32:1a:79:3b:b8:a4:aa:45:ac:bb:d6:fa:
2d:60:bc:a5:62:79:70:ce:86:40:0f:70:df:77:d7:7b:7c:5b:
e6:80:9a:01:e1:52:5f:3a:9e:46:23:e0:cd:9f:0c:ab:5a:fa:
1d:8c:2d:b4:2c:69:90:93:79:e9:f2:3b:e1:9d:eb:a9:4e:19:
52:34:01:92:02:d0:78:17:94:61:68:74:7c:26:ba:c6:8c:af:
23:a2:de:f8:a1:68:f1:10:28:7d:50:c2:a8:8a:88:0d:05:58:
80:c0:7a:64:a1:97:3d:ba:41:d1:49:80:12:4f:53:be:b9:8a:
58:3e:83:40:f8:14:17:90:97:e2:45:83:31:53:98:e4:5a:cc:
2b:ad:fb:be:58:ad:85:80:d4:2f:06:be:da:b3:09:6b:54:01:
1a:d3:85:80:f2:97:70:d9:60:00:e6:c1:8f:b6:29:da:26:a7:
0a:1c:1d:a8:7b:d6:d2:fb:a5:5e:d8:ad:6b:a4:03:ae:cc:94:
25:b3:c1:50:fd:fb:ff:da:29:03:1c:82:3a:52:05:d2:13:5b:
76:13:1e:55:29:9d:68:68:d8:8c:cc:1f:1f:f9:b1:d9:b8:62:
17:e1:e9:b7:34:48:8d:0f:7b:b6:13:19:95:27:e4:15:4d:85:
f1:3b:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:04 2026 by rpki-client