
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json)
Hash identifier: MXHhsmELHRpsGF8YQrQsLwYH3UdAURuh2KHGak04ZHw=
Subject key identifier: DD:2C:25:76:C5:FF:AC:D0:7B:53:4D:3F:77:A6:FA:48:D2:34:D6:BC
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
Manifest number: 0207
Signing time: Sat 13 Jun 2026 03:09:20 +0000
Manifest this update: Sat 13 Jun 2026 03:09:20 +0000
Manifest next update: Sat 20 Jun 2026 03:09:20 +0000
Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: hVJpgAe0EQ5Gthh1X96m2NIpic/wxAvKD7Bm+0n7U7g=)
2: FFD36784600111F19064A2768247A888.roa (hash: V3bllZSRhm3+TX1SYEI07qXQ37w5NHGT/3GcjZvebcg=)
3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: b0f2l7SFJ4lf6D8dKmqlQhXFnbZKoG40QcikDdNJbvM=)
4: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: tza7lo1L0/WRLtMV4iTseTv38sI/dLZO8/zwvwzsN6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Validity
Not Before: Jun 13 03:09:20 2026 GMT
Not After : Jun 20 03:09:20 2026 GMT
Subject: CN=6a2cc9e0-6951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:55:22:1c:86:65:39:7d:87:23:26:30:fd:
02:67:6d:63:08:2b:8b:47:2b:dc:0a:9c:e9:00:ba:
5d:8e:07:9a:f9:14:ff:08:43:b1:b9:c7:79:fd:58:
73:c2:da:bf:55:d2:43:3d:3c:de:73:35:09:4d:9b:
9f:67:72:44:fd:6a:84:06:4f:fe:4b:f6:c8:de:cb:
66:74:fa:04:32:8a:20:69:bb:20:e9:da:dd:20:05:
6c:25:34:ee:e2:7e:d7:17:d6:1f:9c:8f:c5:02:c8:
d7:24:8e:15:f5:e6:88:ba:dd:cb:7a:46:92:f0:7a:
85:74:39:b0:05:98:bc:c2:c6:87:96:1a:4f:11:34:
67:0f:20:81:cb:22:10:d8:88:06:3a:3d:6f:fd:6b:
00:ad:42:3f:94:19:9a:0a:8f:3f:9a:ca:f0:c6:85:
17:02:2c:79:18:ed:c0:2e:bd:da:5f:da:6c:bd:40:
28:59:52:bc:13:bf:e6:a6:c7:78:20:70:86:c8:eb:
76:a5:fa:b7:d3:2e:2e:19:bf:93:c7:13:67:24:fb:
34:03:fe:ac:55:af:df:18:90:71:d4:61:00:b8:d3:
84:13:7e:1b:74:8e:88:37:85:d2:11:c7:c7:44:09:
1e:c3:5b:2d:57:59:8f:12:ec:27:c9:11:2b:24:8b:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:25:76:C5:FF:AC:D0:7B:53:4D:3F:77:A6:FA:48:D2:34:D6:BC
X509v3 Authority Key Identifier:
keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3f:34:37:a0:07:66:b7:db:34:eb:67:21:20:34:45:82:f6:
70:1a:82:f6:c0:0d:73:5b:44:70:ab:6b:bc:dc:41:9e:e9:8b:
0e:cd:68:21:08:fd:07:fc:68:b0:de:45:b1:cd:27:9a:da:f1:
d7:9b:2a:53:78:b6:86:6f:d6:fa:23:df:87:54:5c:d6:ea:44:
a9:ee:45:07:79:cb:7a:ba:79:49:9a:23:00:09:53:8d:46:b7:
7e:88:80:65:77:93:b9:11:39:a5:67:9d:52:85:ce:d1:a2:fc:
39:15:09:1e:75:68:5c:92:27:e3:58:36:de:3b:79:7c:a1:a8:
d9:19:4e:e3:24:50:59:96:c4:35:22:bb:1b:a4:9b:8d:b0:49:
03:69:c8:a2:0a:f5:3b:70:32:6a:e8:bd:8e:4e:f1:f0:66:36:
00:45:58:b8:78:c9:d3:a2:36:eb:d1:ba:de:14:19:26:71:72:
96:48:d7:56:c7:1d:35:1e:3a:f5:38:94:59:a0:2a:ec:a8:ff:
8f:1c:3d:7e:3a:20:2d:48:54:2c:3b:a9:db:7f:4b:6a:37:a9:
50:5c:87:b4:01:0c:ae:44:73:48:9b:dc:1b:88:9a:95:ed:0e:
78:76:f8:b3:00:8b:35:c1:77:9c:69:35:ec:f7:9c:04:d3:7d:
87:0d:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:53 2026 by rpki-client