
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
File: y4244fF7x3I0bdn_uyByz6j9plI.mft (raw, json)
Hash identifier: LsiNJd9/mvH4+9Uo6K5DpPO6QVtogRMb7/DOw1UhBn0=
Subject key identifier: B4:DF:8F:35:25:0E:12:A9:8E:AC:A4:E3:A9:F6:82:D4:5B:2E:82:61
Authority key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
Certificate issuer: /CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
Manifest number: 01DA
Signing time: Fri 17 Apr 2026 03:19:00 +0000
Manifest this update: Fri 17 Apr 2026 03:19:00 +0000
Manifest next update: Fri 24 Apr 2026 03:19:00 +0000
Files and hashes: 1: y4244fF7x3I0bdn_uyByz6j9plI.crl (hash: YeRh35d8w4As4Slpge/Li4yd1WzJ0GKOZaD8XbBHflU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652
Validity
Not Before: Apr 17 03:19:00 2026 GMT
Not After : Apr 24 03:19:00 2026 GMT
Subject: CN=69e1a6a4-961b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a2:17:a7:77:06:12:4d:a1:e8:c6:53:8f:7f:
e2:bb:b5:90:59:0e:1f:08:81:4f:8d:78:c4:12:fe:
2d:3a:66:d2:05:07:04:73:c4:a1:5e:24:d1:7f:bf:
eb:0a:ef:36:75:32:b2:fe:e6:cb:cf:dc:32:ae:ce:
37:25:16:75:3c:79:21:3e:31:0f:bd:3f:17:5e:3e:
cf:7c:99:5c:8e:a8:7f:69:72:32:75:aa:ac:a4:bb:
a6:c9:2c:a4:59:02:b2:0a:a4:89:2f:1f:28:89:12:
17:e8:77:7b:c2:15:ab:46:8e:a1:1d:06:8a:77:88:
db:0a:57:79:4f:1d:eb:84:20:52:65:0b:1e:05:e0:
d9:2c:ae:24:44:ff:59:e4:86:f5:ea:7e:e6:ee:18:
db:6a:e6:11:09:a8:7c:67:87:67:fb:17:bf:74:fa:
9a:e0:e5:6d:58:4c:1f:c8:92:83:ea:3a:25:32:6d:
c8:3c:7a:5b:c9:76:b4:82:df:02:4e:32:a4:e8:60:
b7:25:50:3e:c1:a5:15:29:06:3d:db:d4:59:31:86:
90:42:f2:67:af:f3:d9:3b:e4:9f:a2:58:eb:38:da:
b7:3f:e9:d8:53:b7:34:cd:81:e9:68:eb:26:4c:d0:
8a:5e:5b:c4:00:91:f0:33:b7:d2:81:08:d8:4b:7e:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:8F:35:25:0E:12:A9:8E:AC:A4:E3:A9:F6:82:D4:5B:2E:82:61
X509v3 Authority Key Identifier:
keyid:CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:e9:61:9f:74:1c:14:01:61:fd:36:cd:67:8e:ee:b9:11:89:
be:56:6a:95:a4:c9:f8:ee:c2:55:d4:b8:1c:31:b9:70:79:71:
a9:7a:0d:63:52:2a:15:5d:58:cc:2a:92:73:c9:16:3b:42:c7:
63:f0:71:00:79:02:97:88:f7:9a:6c:e3:2f:65:ce:5a:f8:9d:
89:80:dc:ef:05:c5:dd:06:86:40:66:b8:93:74:41:2f:8c:46:
99:28:43:29:f2:cd:a3:eb:86:38:3d:ac:d9:a5:45:c2:0c:2a:
50:c1:41:7f:c2:a9:d0:fd:a6:ef:d4:d0:05:29:23:d9:c8:3d:
2d:f5:84:d0:cd:bf:6a:ea:b4:8d:ea:f5:f8:b2:6e:a7:8d:26:
2b:1e:8b:2f:17:f5:9c:a7:1b:bf:53:7a:0a:a9:1f:c0:63:a6:
65:2b:a0:e0:63:41:81:e7:20:aa:68:9e:be:0f:5f:15:2e:87:
26:26:d5:75:e5:6e:42:2f:6e:c4:eb:2e:2a:78:5f:e2:df:d6:
a1:d7:d8:33:81:12:3e:4c:f3:a9:1a:d7:9d:3a:02:11:af:3b:
5e:9f:d3:28:57:88:20:87:c2:e3:7a:49:92:84:ae:b3:90:24:
c6:02:89:21:0f:98:15:a0:61:73:15:92:ad:98:70:db:32:8c:
76:ba:0f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:32 2026 by rpki-client