
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
File: y8ZgM3D76EzM4GToT08m7b7CZ7E.mft (raw, json)
Hash identifier: Y+JELCnzPRKLwGvVP05l3I/EE1INeNsElYLIJOB9vS4=
Subject key identifier: 4A:06:2D:55:98:0A:9B:2F:B2:75:68:7C:CB:33:A0:FA:51:4E:33:9A
Authority key identifier: CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1
Certificate issuer: /CN=A91D9CA8/serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
Manifest number: 010C
Signing time: Sat 13 Jun 2026 06:18:17 +0000
Manifest this update: Sat 13 Jun 2026 06:18:17 +0000
Manifest next update: Sat 20 Jun 2026 06:18:17 +0000
Files and hashes: 1: y8ZgM3D76EzM4GToT08m7b7CZ7E.crl (hash: 0yRepCRAJV+9wRukq0vY3Xh/v5f5K9iRCwjzMnpqOYE=)
2: 459A40A0399111F0B589186BC4F9AE02.roa (hash: scPqVoYPhM9N9nt8I3yfdS2nCVlGwPE0LU2L+VLMObQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.crl
rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
Validity
Not Before: Jun 13 06:18:17 2026 GMT
Not After : Jun 20 06:18:17 2026 GMT
Subject: CN=6a2cf629-7aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:bc:82:f2:5c:4d:3e:46:1f:8a:64:bf:b2:
9e:d8:f6:d7:bc:4b:58:b1:38:2b:fc:07:7e:77:66:
7b:10:60:a3:ac:13:d6:39:25:11:a3:90:75:78:a7:
3b:70:33:55:23:92:bf:14:36:ba:8f:54:d2:52:73:
d6:13:86:1b:49:8e:84:b5:b6:c1:26:75:67:86:86:
00:f2:fa:7a:e9:c3:bb:bd:f6:20:47:5b:6b:a4:78:
cd:e3:67:5d:4b:40:b0:b4:ed:ff:02:f1:07:aa:68:
93:f6:13:d3:93:7b:1e:ab:50:d0:48:08:ee:01:a6:
a5:1d:b5:d3:88:9c:88:a6:d3:ac:bd:b1:9b:a6:d7:
6d:33:e5:bb:c9:43:67:95:52:2e:97:fe:f0:68:18:
ea:fd:6c:a4:14:3a:93:51:9b:81:6a:8f:b9:93:78:
7f:cb:1e:54:6d:b4:89:e4:48:73:a9:c5:c8:2e:6c:
9d:b3:73:1c:0c:b0:8a:02:7e:b1:fe:dd:f6:bd:f3:
37:6e:b6:87:26:07:d3:3e:60:b8:a9:6d:9c:c6:e6:
18:f4:d0:bd:56:12:28:33:85:aa:ca:79:c9:7f:d1:
a8:31:ad:8a:15:98:13:8c:a8:a9:97:23:42:37:64:
b5:d8:f9:3a:72:fb:7c:21:59:4b:30:7b:6b:be:bf:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:06:2D:55:98:0A:9B:2F:B2:75:68:7C:CB:33:A0:FA:51:4E:33:9A
X509v3 Authority Key Identifier:
keyid:CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:88:02:2e:f3:48:48:15:d9:cb:b1:1f:07:9a:c4:fa:a5:e7:
7d:19:61:19:13:9d:31:d8:8b:0e:b9:9e:a7:3a:80:c1:76:ec:
02:63:9e:81:ea:83:06:72:4f:75:17:ce:de:2a:94:ae:e5:7a:
11:8a:69:13:da:93:46:06:2f:39:a9:17:2b:88:57:df:ea:95:
a7:bd:22:6d:f7:02:5b:ab:3d:84:ae:0c:4b:a7:3d:43:f3:fd:
ae:cb:aa:cc:c2:ad:d2:f8:91:01:9f:87:e4:11:60:1c:27:cc:
d0:0c:0d:ef:37:52:58:d5:5a:5b:06:e8:15:aa:5d:de:fd:cf:
d0:b8:48:15:23:d8:0a:89:7d:61:12:31:ec:1d:80:1b:84:7c:
5b:42:e6:8c:d9:04:ef:4b:e1:c7:d3:59:44:04:71:f0:bd:70:
a0:96:78:62:59:a6:f0:b0:46:21:4d:43:ff:9b:d7:ff:9f:4c:
53:29:dd:fb:85:f7:88:c8:99:cf:9c:24:d9:3b:44:cb:c1:b8:
31:18:11:3b:63:6b:61:0e:6e:b8:43:3b:9f:7c:d2:43:27:c5:
6a:c1:6b:69:8f:e4:83:31:0a:a6:20:7c:ff:2c:82:17:d1:0e:
21:18:45:d2:48:14:43:6e:81:ce:b3:1c:de:94:18:b4:8f:e1:
5f:12:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:51 2026 by rpki-client