
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json)
Hash identifier: gglrWqyanVW9Slb3AgskjTlx3JamYR8cb8xp3+WL9Yg=
Subject key identifier: 3B:A0:26:D2:DB:3F:24:49:B9:FD:45:F6:3D:34:5A:68:28:28:57:46
Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Certificate serial: 0810
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
Manifest number: 0807
Signing time: Sun 26 Jul 2026 21:54:13 +0000
Manifest this update: Sun 26 Jul 2026 21:54:13 +0000
Manifest next update: Sun 02 Aug 2026 21:54:13 +0000
Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: AzCW9dqdWWQv0FFXuYOVwxTuHP+SJ+squvHFQNZWXMk=)
2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: MIjawd33la/jBdvWj1qHhi7fRFhJrDfr9QRihhf5huE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl
rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Validity
Not Before: Jul 26 21:54:13 2026 GMT
Not After : Aug 2 21:54:13 2026 GMT
Subject: CN=6a668205-0191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:b1:21:af:d8:ce:4f:cb:1a:98:01:a1:65:
62:44:f1:3a:97:e8:f4:41:2a:03:5f:06:0e:17:c1:
95:ba:9d:30:61:89:1a:44:54:f8:93:17:d1:e6:39:
f7:61:86:2f:79:39:ac:f5:3b:2a:be:ea:4b:7e:74:
a1:89:3d:24:37:14:35:15:c4:cf:ba:2e:fe:00:61:
57:0a:04:be:c8:db:5b:1d:c4:a2:a4:59:66:84:f9:
5f:6e:b0:58:28:b5:77:66:6f:ca:7f:dc:7a:1e:e6:
db:3d:fe:8d:0d:5d:ad:e2:db:7a:38:10:77:83:e2:
d0:ef:5f:3d:7e:a3:6f:b8:79:7e:59:a3:56:a0:16:
cd:cc:63:b9:d1:a0:a2:5e:91:7d:e7:d0:cf:72:86:
b5:6a:ab:a7:f8:99:1c:ee:aa:92:e6:b5:46:e6:74:
e9:24:85:0d:5f:7d:93:97:b1:55:0a:31:b9:70:c4:
0c:4b:de:b2:c5:1b:23:fe:76:c8:db:ed:84:06:25:
ef:bf:30:fa:b3:22:00:96:84:39:c6:2b:5f:dc:f3:
fe:2e:e7:60:fb:8a:16:79:91:6b:14:b7:86:ab:3e:
27:ff:f2:aa:66:5c:75:6a:f3:bb:e1:6a:b8:36:bb:
f3:a5:82:bc:3e:21:87:e2:e3:d5:5b:96:50:94:9e:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:26:D2:DB:3F:24:49:B9:FD:45:F6:3D:34:5A:68:28:28:57:46
X509v3 Authority Key Identifier:
keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:96:1b:2d:1c:ad:60:d8:a0:96:17:cd:d9:49:fa:1c:f4:23:
f5:6f:49:9c:40:99:6d:b3:e4:38:ab:6a:f7:5c:b5:b7:2e:25:
42:f6:ef:3f:02:1a:50:f2:e5:e1:51:4c:48:17:61:55:33:e0:
8f:00:90:7b:87:41:8f:3b:d7:af:94:26:7d:2c:06:32:ef:42:
4b:a6:3f:2c:a8:2c:c1:39:b7:e7:08:e5:ba:0a:b0:aa:8b:11:
21:dc:bf:e7:18:f9:dd:f6:60:e5:41:ac:bc:5e:ad:8b:ab:03:
77:9c:3c:cc:1c:20:83:67:80:99:c3:d3:db:10:07:69:43:85:
15:05:d5:a2:ff:87:8f:a0:39:d3:10:15:cf:90:1e:59:a7:18:
9c:7e:79:99:31:c0:f5:c9:90:8e:a5:3d:e3:23:c3:1a:20:3b:
03:20:b8:2e:85:b4:8b:aa:41:3b:71:35:bb:36:89:e2:5e:5a:
b5:8d:9d:b7:1e:f4:df:ba:11:60:ab:e8:8a:f8:cc:79:d8:4c:
f6:7c:f2:31:8b:ca:79:01:92:f8:d3:de:3b:5d:c6:59:03:30:
8a:c5:93:fb:1c:a9:67:0d:ed:30:35:98:26:9f:6b:01:fc:27:
34:e2:ef:67:4a:fa:42:f2:2e:db:6a:02:4b:e6:9c:42:05:c8:
3b:50:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:00 2026 by rpki-client