
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json)
Hash identifier: sbMRYNytmlLg9WkohBZBLukIYuSMz9jYQWPjVH2dq7I=
Subject key identifier: E8:B1:70:8A:98:5B:6C:31:FC:48:CD:CC:85:E2:02:F8:94:03:5B:1F
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial: 02AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
Manifest number: 02A5
Signing time: Mon 27 Jul 2026 02:53:09 +0000
Manifest this update: Mon 27 Jul 2026 02:53:09 +0000
Manifest next update: Mon 03 Aug 2026 02:53:09 +0000
Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: It8MzfTV9IAPPKwnUkapEdOQ3Nf3aENH4T2BA3pvPCU=)
2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: R3KADOtwsyG/v2+mGTP92tv9io+mPYskKwwNor02wSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Validity
Not Before: Jul 27 02:53:09 2026 GMT
Not After : Aug 3 02:53:09 2026 GMT
Subject: CN=6a66c815-5fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:0b:b2:11:08:fd:61:0f:58:74:2a:77:11:
43:3a:17:8c:f0:19:de:23:8c:f1:4f:87:dd:3f:c2:
5a:81:39:d0:92:37:aa:53:b7:40:0d:ce:f9:7c:d7:
d4:83:36:7f:c8:2f:2d:f5:b4:1a:52:10:ef:42:a2:
a9:59:cd:ba:f2:fb:3d:54:26:a6:cc:0e:41:a3:d3:
18:34:eb:63:69:d1:72:19:bd:0e:1d:77:aa:4a:ec:
50:2a:b8:e4:5e:7c:3e:33:e7:01:85:a9:65:6c:56:
dd:6c:ce:23:d3:65:5e:da:c1:cd:83:ce:8f:86:82:
ec:c4:21:b2:fe:ea:d8:2b:7c:82:ac:04:0b:18:8c:
9f:97:a8:96:a9:0c:8f:84:37:1b:4b:ff:08:dd:78:
87:ef:d9:c7:37:3f:26:2d:b9:db:fc:e3:11:db:c7:
36:da:2c:83:e1:d9:2a:08:bb:43:56:65:5e:6d:03:
77:5b:74:88:5d:f4:7e:8e:bd:9a:6c:0b:eb:0d:a8:
64:23:e3:50:90:fb:0b:93:b0:bc:a7:45:95:75:51:
8e:f7:22:60:70:ef:74:ef:5d:06:8c:72:db:7c:f1:
02:1a:0a:f1:76:2d:23:12:fd:28:f2:8f:dc:56:9d:
a0:d2:36:62:a7:7a:54:39:58:f0:af:00:d3:69:91:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B1:70:8A:98:5B:6C:31:FC:48:CD:CC:85:E2:02:F8:94:03:5B:1F
X509v3 Authority Key Identifier:
keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:ef:bc:1a:33:50:48:fa:d8:83:7f:20:16:ff:60:de:63:12:
9e:0e:31:c4:cf:67:08:90:ee:f7:22:52:c7:b6:2e:36:d3:20:
cb:ad:70:f7:ac:44:83:8e:c6:a4:7c:80:fa:d2:e5:cc:c8:3a:
b1:f1:e8:7c:d1:b9:ad:ba:0c:e4:8b:46:4c:9d:c5:dd:ba:06:
2b:b1:2e:17:39:56:af:bf:b6:c2:85:ab:f4:83:09:68:15:8a:
4d:98:3e:b2:e5:0d:69:b1:7d:99:bd:be:63:ce:57:42:cc:78:
87:4a:fc:5d:ea:2d:f8:08:ec:7b:c6:d9:dc:3e:f4:c1:b3:2a:
d5:73:00:f0:3a:04:ea:75:d6:57:3c:1f:99:c0:04:07:24:1f:
b7:ef:a3:08:e0:57:fe:f0:6c:54:0c:bb:bd:9c:2b:1c:d8:1b:
88:f1:23:b0:ce:2c:60:b4:1f:06:26:aa:9c:2e:1e:61:e7:66:
6e:c7:07:94:7d:69:02:45:53:b2:e0:f9:59:e2:d0:d3:92:84:
f0:18:13:12:a6:9e:cc:64:69:e9:e7:43:f7:e2:b0:99:f3:4c:
a4:b7:3a:fb:62:15:2a:02:3d:2b:ef:16:aa:38:d2:54:ec:3b:
18:3b:b5:93:49:26:23:8f:e8:0b:67:fa:b3:80:48:a4:f8:05:
3a:c6:57:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:51 2026 by rpki-client