
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
File: 3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json)
Hash identifier: Wa1zzKn+FGVw4Kb6PXVddhR2xweW5mwJnXMKQySw8jQ=
Subject key identifier: A9:20:DA:F8:8B:3E:CB:3D:81:E5:B8:FE:0A:D5:26:19:A7:E5:CB:42
Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B
Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B
Certificate serial: 0450
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
Manifest number: 0445
Signing time: Fri 17 Apr 2026 00:11:50 +0000
Manifest this update: Fri 17 Apr 2026 00:11:49 +0000
Manifest next update: Fri 24 Apr 2026 00:11:49 +0000
Files and hashes: 1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: 6FXA2QpYxQiUir0/Q4SmSoaAKuxgz8WOJrXJmPObnT4=)
2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: ZJNhnD1KuiNnZ2YhdNAFUGJ359TyiQ0No8lMRqwYfSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl
rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B
Validity
Not Before: Apr 17 00:11:49 2026 GMT
Not After : Apr 24 00:11:49 2026 GMT
Subject: CN=69e17ac5-21d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:22:20:ff:c3:fa:6e:51:03:a5:22:f6:b4:
7a:0a:ef:05:98:c2:13:78:3d:04:45:c0:7e:fc:fe:
f9:87:a0:ee:c6:c4:08:19:b3:65:1c:ab:8c:06:fe:
8a:ea:28:ed:54:0a:38:63:03:63:e5:d3:b0:40:ca:
47:36:f4:96:f2:b7:f2:08:19:3f:e6:d4:8d:b8:10:
17:a0:db:98:78:13:ca:51:4c:99:ab:9c:b0:af:23:
0e:27:21:9e:e8:8e:18:4f:44:5b:e8:47:d9:ed:3a:
e6:2a:ea:64:b7:4e:1a:37:50:b5:82:2f:ef:00:1f:
dc:3c:7e:41:09:cb:f7:06:8d:e9:f8:ea:fe:ef:35:
a0:ea:46:d7:fe:38:cf:b7:16:36:a7:fa:38:82:6d:
eb:d3:82:5c:87:78:a6:6f:eb:3d:42:a9:3c:ce:5f:
aa:71:6c:60:73:57:38:28:a8:01:b5:b8:27:03:7f:
5f:cb:d0:ed:89:ad:13:f1:b8:4f:73:be:fb:c1:af:
bf:b1:72:37:95:0c:1a:1c:b0:f6:d5:f1:08:62:aa:
f0:8b:af:fb:95:77:01:6d:67:69:a2:84:19:d0:f0:
c9:11:9a:5f:f1:02:7d:f0:d0:fc:ee:20:8f:a8:89:
f0:a2:4e:f9:3b:8d:86:34:cf:21:64:bb:eb:ee:bd:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:20:DA:F8:8B:3E:CB:3D:81:E5:B8:FE:0A:D5:26:19:A7:E5:CB:42
X509v3 Authority Key Identifier:
keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:ee:6b:22:7e:bc:0a:b9:51:41:ed:1f:cb:fe:59:4d:f4:e5:
b9:fd:08:7c:c7:ba:45:84:53:db:aa:1e:13:0f:eb:4c:66:52:
61:0b:d4:3e:8c:d8:60:d0:d8:bc:53:7a:ca:bb:d0:46:28:f5:
ee:ae:92:be:60:38:cc:b1:70:e9:a9:e8:ab:de:dc:0c:c3:e9:
96:a2:bf:32:31:b5:77:f3:bd:9c:fd:0b:c1:24:48:fd:dc:59:
7a:c7:53:23:34:ce:90:1f:ee:cf:91:55:49:7b:a8:f5:a2:11:
b1:5e:ef:80:82:12:ca:ff:99:24:6e:a0:ba:7c:b1:59:24:22:
67:c4:3c:8a:47:94:50:6c:32:a3:bf:60:02:c6:9c:9e:b7:cd:
5d:93:9b:bd:08:9a:b8:4e:85:b6:39:bf:5d:c8:9f:64:9e:b5:
32:c3:3e:8b:cc:4b:64:de:e9:ad:54:4a:08:42:79:a9:0e:74:
e7:6e:75:2a:84:87:52:c9:d8:e3:1b:d1:ec:68:64:e1:69:52:
61:30:42:14:f3:76:c0:20:3c:bc:a2:32:81:ac:ab:b0:ca:e2:
73:8c:4f:d0:76:55:df:46:4a:74:0e:96:e6:79:ae:d1:09:76:
86:10:78:0d:6f:0c:a8:60:09:61:b3:22:5b:c3:55:5b:25:ef:
d0:4a:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:21 2026 by rpki-client