
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
File: yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json)
Hash identifier: IqK5tQBITcj7ueg42WKUHNeXNKbmSaL1IQhYTKqjhDY=
Subject key identifier: 49:FA:04:D8:3F:1B:EB:C0:3A:21:20:7D:D4:A5:9D:AA:91:32:1E:FC
Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76
Certificate issuer: /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76
Certificate serial: 085A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
Manifest number: 0851
Signing time: Fri 12 Jun 2026 20:54:29 +0000
Manifest this update: Fri 12 Jun 2026 20:54:29 +0000
Manifest next update: Fri 19 Jun 2026 20:54:29 +0000
Files and hashes: 1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: Eabi5skWNzMlD1+5CI13bcq8icwoTRWbDpn3/huIfG8=)
2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: 1FYTa+b4b7Loa31EgzeXR7TOb6YS6HpedmRkzfbLWn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl
rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC42E, serialNumber=CA85E133C1E239614C9C57780118BDB309528E76
Validity
Not Before: Jun 12 20:54:29 2026 GMT
Not After : Jun 19 20:54:29 2026 GMT
Subject: CN=6a2c7205-ec11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:ba:a8:96:3d:fd:63:d3:64:8d:4e:ed:60:
c1:4f:3f:8a:aa:2d:22:2c:8e:49:06:e4:52:01:25:
73:a9:18:40:35:82:68:51:04:74:1a:1f:df:93:e6:
f2:04:9e:32:b2:b9:54:42:1a:f3:fd:80:de:3f:dc:
e3:b1:30:31:3d:c3:ae:8a:94:2b:91:14:fb:6f:8f:
9f:85:c7:af:b7:f8:b8:7f:4d:d1:0b:b9:a2:05:3a:
3b:56:d9:82:a7:b5:83:ac:3e:df:69:7e:09:a3:7a:
e7:10:1e:a5:ed:0a:e6:23:7b:f5:c2:92:c2:bb:f0:
09:a7:e5:dd:b4:d3:a1:1d:66:a8:6a:66:fd:3c:07:
61:5b:bf:8d:bb:ad:1f:26:fc:e6:d0:f5:ef:01:4f:
99:6b:57:e2:8a:ff:e5:f6:4f:0d:f2:e5:4c:34:e8:
e3:d9:ec:e2:d2:bd:2e:78:b5:d0:81:d0:f2:f2:d0:
8e:2f:6f:c8:09:64:23:8d:4a:34:56:ec:0b:7b:3f:
67:5a:ec:f7:a4:d2:c0:33:a3:c3:bf:1d:ea:57:5d:
83:67:26:1b:fb:73:dc:f3:51:c5:1f:b4:b4:19:74:
13:db:d5:3b:75:d6:27:56:5f:4f:97:35:a2:32:4b:
cf:cc:e4:8a:e3:d9:9b:d4:f3:7a:f2:d1:6c:a4:a9:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:04:D8:3F:1B:EB:C0:3A:21:20:7D:D4:A5:9D:AA:91:32:1E:FC
X509v3 Authority Key Identifier:
keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5d:ef:ea:11:11:9c:d3:46:23:30:cd:ef:7f:bf:b5:9c:42:
76:d0:12:6d:5b:ae:d5:11:4e:b2:e8:08:73:d5:32:de:bc:7e:
33:7c:1c:65:8a:78:46:f9:7c:72:6f:d8:62:67:2a:05:35:a3:
ff:4f:b2:29:e0:06:3c:44:55:5d:9d:4d:78:be:ac:e2:98:33:
e3:d9:6e:51:fa:ce:47:62:db:ad:28:06:9d:16:5b:46:e4:0c:
ed:2f:f9:62:55:c7:54:58:f4:52:85:ec:c2:84:44:e9:d9:6c:
11:6d:7d:b7:27:ed:b0:f8:28:c4:34:31:62:3c:8f:79:b0:d5:
9f:fd:40:aa:d1:bc:7d:e6:87:34:d6:d9:8d:39:93:be:a1:95:
65:5c:d4:79:79:d9:10:ad:0d:5d:4c:b7:79:2a:de:2c:7e:e6:
30:b2:ff:10:dd:65:b7:4a:9a:3d:a5:15:cc:4c:9a:81:a1:d6:
e5:c7:6d:8d:ac:b2:5d:e8:03:04:ac:93:57:6f:3d:9b:5e:1b:
c2:3b:66:6c:e1:13:83:b9:e3:ac:c4:ea:e7:ec:42:7c:30:4c:
87:eb:3d:be:24:09:a7:02:07:e6:c7:24:96:3d:cd:64:a7:cb:
93:63:39:d6:dd:31:c2:08:c2:fe:18:91:36:47:a9:68:a4:a4:
5b:8c:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:26 2026 by rpki-client