
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json)
Hash identifier: 06Iorq5xXqoFkASkkbakJgDgTiJEk24CIz6JVgecfx0=
Subject key identifier: 30:EA:69:DF:B9:C4:68:DD:51:63:9F:66:46:FE:BF:96:F0:BA:7F:22
Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4
Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
Manifest number: 01CC
Signing time: Wed 29 Jul 2026 04:57:34 +0000
Manifest this update: Wed 29 Jul 2026 04:57:33 +0000
Manifest next update: Wed 05 Aug 2026 04:57:33 +0000
Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: iE3nflnygVJ07VDd0/LRrWGqBf3qoTs17pELrOQRtGE=)
2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: OVs3bObM0VWA4EP68dRKfCCFiIF6Ly1GMMGz0qApRdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl
rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
Validity
Not Before: Jul 29 04:57:33 2026 GMT
Not After : Aug 5 04:57:33 2026 GMT
Subject: CN=6a69883d-72d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:11:97:bf:60:51:4a:5b:8d:75:49:6d:7e:
b4:7c:6c:60:8c:c0:d3:ed:b1:34:25:c9:98:20:ae:
6f:65:f3:d6:e1:c8:d1:13:f1:a2:37:82:19:97:41:
40:8d:5a:b6:03:c8:67:c8:28:1c:dc:c1:d7:31:71:
7e:e8:d6:5f:fb:d9:0e:10:65:76:01:d2:1c:97:f0:
0b:d9:4d:6b:eb:a7:91:89:12:da:e0:d5:3b:a3:6f:
9a:ed:6e:9d:dc:49:17:a0:e2:70:86:2c:74:f4:4d:
8b:e0:02:53:0d:da:b5:bf:d2:29:6f:df:c6:4b:c7:
94:9d:ff:bb:cf:b7:40:1a:05:06:40:36:27:4c:a5:
83:2b:4e:7c:0d:7e:e7:1a:50:f4:5d:f5:e6:6e:62:
d8:68:57:ba:15:4f:ec:ba:fb:fd:ed:e9:28:58:d4:
4c:55:1a:b4:20:b4:d8:4d:d8:ff:0a:29:0a:0b:7b:
d7:cc:06:f7:ea:23:9d:e0:16:7b:36:fb:47:db:e5:
43:5e:5b:c5:21:43:a1:61:64:f9:15:19:17:e9:54:
e1:9c:e2:d4:2b:e6:51:04:89:9b:51:25:c7:ad:e3:
f6:6c:bb:f8:1e:45:85:4c:f0:80:42:8b:f0:dd:66:
b7:84:e4:e0:83:7d:5f:27:91:f9:1c:de:f9:fa:de:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EA:69:DF:B9:C4:68:DD:51:63:9F:66:46:FE:BF:96:F0:BA:7F:22
X509v3 Authority Key Identifier:
keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d0:d6:ef:9e:2c:9b:b4:0b:94:63:c3:eb:5c:bb:1c:71:e1:
d6:ba:65:e9:af:c7:0a:74:55:a2:92:68:16:32:dd:0e:9d:86:
4f:26:a8:11:db:cf:58:55:56:79:73:af:c6:46:97:fa:c1:74:
94:23:66:cf:8c:72:23:2f:78:47:eb:37:60:59:85:99:bf:47:
9f:89:f9:75:22:21:82:0b:ab:64:20:9f:b7:5b:c4:02:13:15:
06:81:00:4b:8d:b5:7a:a3:90:43:ef:88:f9:84:6b:fa:87:5d:
99:9a:f0:bf:77:77:73:20:8c:cb:fe:92:b1:54:be:5c:ae:a1:
f3:79:65:aa:31:0d:95:20:aa:26:80:da:37:15:0b:2c:f2:44:
4c:82:01:c1:b8:9a:76:de:bd:0e:cb:e5:3e:e6:ab:4b:a6:69:
df:fb:7f:2a:50:36:f6:34:68:d2:66:2a:9d:c7:8d:44:38:b4:
1f:00:6c:1a:ae:bc:fc:26:8d:e8:b1:88:86:ab:2c:7c:4e:0d:
b7:10:00:46:1d:2d:ff:fc:63:50:25:50:e1:f3:98:a7:4a:f7:
f3:44:76:e7:f1:4d:76:8a:70:a7:90:93:da:ca:2c:17:51:ab:
8f:25:4c:47:a7:c7:f7:e7:45:e1:4e:9b:5c:57:c4:64:b3:1e:
e9:24:ed:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:04:00 2026 by rpki-client