
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier: xQk8mUOmXQEp/9uP2gPRLb2jhw2TUw6dUxGFiFiVOOU=
Subject key identifier: 77:31:20:5B:D3:D4:70:C4:34:69:9F:4E:73:B1:BE:FF:26:AC:B2:93
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial: 04FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number: 04E0
Signing time: Fri 12 Jun 2026 23:53:00 +0000
Manifest this update: Fri 12 Jun 2026 23:53:00 +0000
Manifest next update: Fri 19 Jun 2026 23:53:00 +0000
Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: 1OpcmgYe3L0c0u580AXFf8uZgsfpUEtTUY7WF5Aa/gs=)
2: 08241A166B1111EE99759439C4F9AE02.roa (hash: K46zscW9+DlHk+xiudMsMr6EAgw3qNVaD7QCOdFwwmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Validity
Not Before: Jun 12 23:53:00 2026 GMT
Not After : Jun 19 23:53:00 2026 GMT
Subject: CN=6a2c9bdc-cc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:cc:d9:ad:b0:11:1b:71:9d:d3:88:ff:1f:
f3:15:7e:46:6e:06:ce:ee:29:43:b3:6d:15:58:0e:
d5:c0:38:1f:84:fd:8f:1b:7a:91:0d:7c:30:38:20:
b6:c7:6e:76:3b:8f:44:6b:3e:70:26:da:60:e7:be:
ad:56:8c:c0:7f:c5:30:20:13:8e:0b:db:eb:73:f6:
27:41:80:fa:e2:a9:f3:ea:b0:02:7a:ea:f4:ee:d0:
60:c8:44:aa:aa:a0:c9:c6:38:e4:1b:63:4d:e2:35:
3d:b2:5d:bf:5d:c2:05:e0:dd:01:08:11:a9:28:70:
90:80:18:40:6c:37:60:00:f9:c2:a1:26:53:03:b6:
a4:27:9e:b1:e6:72:88:74:59:67:52:56:90:af:9a:
d9:80:52:36:ab:a9:dd:6c:25:30:75:c3:92:11:24:
f3:b9:e2:0d:65:9a:e4:16:55:03:1e:b0:11:cf:b5:
b6:b9:c2:29:dc:18:20:f3:1d:ae:d3:74:68:08:c6:
9a:24:53:f1:ac:37:b8:af:b6:e3:4d:a1:0b:1f:29:
74:b1:86:49:da:61:ce:82:d4:51:c5:e8:90:a8:ad:
5b:f8:a9:be:94:e4:1a:8c:0c:19:2e:84:d3:63:d6:
be:7f:48:72:36:2d:dc:29:ce:6b:dc:c8:b3:67:12:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:31:20:5B:D3:D4:70:C4:34:69:9F:4E:73:B1:BE:FF:26:AC:B2:93
X509v3 Authority Key Identifier:
keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a3:68:75:52:31:4c:ed:98:01:24:0c:a2:ce:ed:9d:ad:6b:
62:a2:86:77:9a:23:ac:07:b7:4e:0f:d7:de:96:5f:3c:97:25:
5a:09:d3:ed:8f:0b:f5:91:e8:bf:c3:4d:89:58:a5:f8:fb:8d:
34:a1:0d:6f:f1:72:1d:d2:4c:c3:4a:21:31:5b:5a:61:21:e2:
e7:7f:d8:45:17:44:f9:7d:b3:e0:44:eb:2b:e7:63:1d:ca:37:
64:9c:6c:5c:29:43:11:56:62:d2:14:31:e7:4c:8e:00:b1:c1:
b9:bf:88:03:ae:91:ee:8c:e6:56:17:5d:69:bb:ad:d9:2e:5b:
2f:4b:04:f3:12:32:06:1f:d8:3a:43:57:41:5c:27:c0:18:90:
2f:48:e6:4f:06:f7:35:6e:21:0c:31:7a:de:da:42:5b:9e:86:
09:78:08:f4:bd:53:61:ee:17:97:32:60:3f:bd:e1:ae:58:b2:
37:bc:0b:9e:5f:67:5f:11:30:b6:29:22:cb:e5:e4:47:41:e9:
cc:97:c4:0a:56:38:4e:13:8c:aa:fb:d5:cb:c5:05:d2:2e:a6:
00:73:1b:ea:e1:06:b0:a7:39:f7:41:07:b4:20:93:da:70:89:
33:94:c7:ac:6c:c8:ee:4b:c0:4c:73:9f:65:60:7b:8d:9a:b2:
2f:79:ce:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:13 2026 by rpki-client