
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json)
Hash identifier: aLYiqMepQsd43WiSX6DP/+ybbW2F1+IVm6i5Tc9euHU=
Subject key identifier: A2:AD:BF:83:48:E2:A4:3A:7A:65:A2:ED:94:D3:6F:70:BF:63:10:BB
Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Certificate serial: 0352
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
Manifest number: 034B
Signing time: Fri 17 Apr 2026 00:52:09 +0000
Manifest this update: Fri 17 Apr 2026 00:52:09 +0000
Manifest next update: Fri 24 Apr 2026 00:52:09 +0000
Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: VFQh677ZcdG8uuIdEgY4NVlHrfuz432GFqtcCtQalQs=)
2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: eTFcd93Ik05dvYU83eyYl+NfNuBY+EuLqHvO4+8nNVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl
rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Validity
Not Before: Apr 17 00:52:09 2026 GMT
Not After : Apr 24 00:52:09 2026 GMT
Subject: CN=69e18439-3f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:ab:26:08:e3:ef:87:67:fe:67:3a:b0:7e:
fe:62:e9:92:82:80:98:df:28:40:e9:00:1c:f3:46:
58:45:47:bc:8c:f2:67:11:28:4b:06:66:ee:9a:c0:
b5:ff:59:33:ff:c6:28:e0:ce:37:89:ec:d6:b6:5d:
21:c0:e4:60:ca:b9:7e:d5:e4:3e:53:44:7a:93:86:
c2:a4:35:53:49:99:66:c4:9a:eb:56:8f:0a:c6:50:
2b:36:94:c1:3b:cb:a0:f6:4d:b9:f6:44:3d:2a:a2:
8a:ef:41:53:ea:c6:06:24:ef:25:95:ec:f1:cd:a7:
ea:95:d2:6d:ec:fa:9f:27:16:5c:72:e1:24:0b:aa:
45:b9:ad:1e:00:75:71:7f:d1:cd:a0:af:7f:a6:da:
83:78:cd:0e:4e:39:68:c0:93:94:df:23:52:f9:ce:
cc:2b:a9:d0:78:48:ed:27:16:73:e4:5b:50:24:78:
b1:57:4d:6a:ab:78:20:05:0a:9b:66:1a:72:3b:21:
d1:3f:79:a5:13:ec:bc:c0:b6:e2:24:6f:0b:ab:f5:
3d:8e:4e:6b:4d:0c:33:28:6a:0f:26:fd:5e:12:55:
4b:31:82:50:fc:e0:0a:ff:59:e0:93:23:76:40:7a:
0d:5d:cb:ac:7e:3f:d1:43:c0:c9:33:b2:ee:3a:fd:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AD:BF:83:48:E2:A4:3A:7A:65:A2:ED:94:D3:6F:70:BF:63:10:BB
X509v3 Authority Key Identifier:
keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bd:83:c7:e1:b8:ac:32:7b:d4:88:68:75:0f:01:71:f2:00:
a4:16:d3:c0:54:9f:bb:5e:7e:97:86:44:c6:14:c5:4d:01:4a:
60:74:38:fa:65:97:18:32:fe:9c:a9:3c:61:22:a0:17:5a:c9:
a3:2f:8f:fc:ff:ac:eb:a0:7b:2d:f0:92:8d:f2:8e:ae:18:70:
0c:bd:f0:1b:0c:a3:cb:9f:f7:cb:6f:cb:4a:9c:89:64:b8:69:
14:c0:cc:7d:e3:87:a6:f6:ff:b7:7b:ce:a3:fa:dd:21:97:29:
3a:c3:56:a0:b3:52:bf:39:29:59:b0:85:a9:62:f9:f6:5c:89:
5c:c5:fa:cd:6b:0f:2a:a3:68:76:74:74:39:ab:01:a4:fb:1a:
d2:1f:27:33:35:dd:6f:4d:fd:c3:e4:c4:c3:b7:b5:ce:e3:1b:
89:f0:ab:d8:09:df:c2:b8:a1:c1:0c:81:fc:54:49:4a:db:ca:
73:02:0b:42:30:b4:64:b6:2f:d4:63:90:f5:23:69:09:3e:29:
eb:c2:65:fb:f5:3d:98:d2:43:ef:44:cb:cf:5b:64:79:8c:13:
43:e6:9f:31:1e:c4:7a:33:1e:66:72:3d:21:af:ce:e5:a8:55:
56:d8:bd:0e:48:b7:2c:c8:ea:8b:d2:e6:dd:d2:23:48:1b:7e:
77:09:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:29 2026 by rpki-client