
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json)
Hash identifier: B55CJFmQNioX9GeMyyWVgFEZqHby4Z0VafpfvELmxyU=
Subject key identifier: 2D:45:79:48:D3:89:0B:12:20:55:55:24:87:93:54:20:A4:5F:04:01
Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2
Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2
Certificate serial: 1265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
Manifest number: 1259
Signing time: Tue 28 Jul 2026 17:11:53 +0000
Manifest this update: Tue 28 Jul 2026 17:11:52 +0000
Manifest next update: Tue 04 Aug 2026 17:11:52 +0000
Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: TwG1k4vR28bprY28HfXFzC99EQtaYkVt3o6hDBW5fUY=)
2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: wLzSSsb1W3A2MYP49E/fklCTD0d/JRiMl3Lul9XwiIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl
rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4709 (0x1265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2
Validity
Not Before: Jul 28 17:11:52 2026 GMT
Not After : Aug 4 17:11:52 2026 GMT
Subject: CN=6a68e2d9-4386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:68:54:ae:9e:9e:8c:ce:86:c7:42:ef:6d:
01:9b:01:5b:19:31:da:bc:fb:ed:b4:c3:d0:92:d4:
64:fb:9f:2f:fb:cf:0c:28:a0:84:25:76:38:1d:ba:
18:c3:46:d9:18:12:97:05:1e:0e:36:a8:ec:d1:83:
7c:33:30:35:87:3a:44:9a:3d:30:4b:d9:a9:b3:93:
b0:b2:e6:d5:e1:10:bc:21:93:93:85:5a:3d:5e:d3:
b0:fe:bc:43:3c:a7:d9:58:d2:80:c3:09:26:4b:fc:
03:37:d5:cb:8c:a6:79:fe:97:17:c6:58:3e:72:f1:
75:5a:70:72:b3:10:29:f3:a4:3d:a1:bb:ef:94:31:
86:a2:b5:5d:b7:8c:45:73:45:95:d6:c2:9c:37:65:
5c:08:70:5f:46:04:41:7c:e5:5c:67:76:07:18:16:
8a:bf:d7:a4:ba:d3:f9:36:3e:47:dc:ac:9a:73:a9:
10:cc:ae:9b:8b:e5:4f:3c:5c:35:d7:d2:ad:f1:38:
bd:bc:4b:df:82:bb:04:9c:f7:18:ae:81:7d:f3:7f:
04:40:50:c1:24:ba:cb:bd:1f:94:f0:22:ff:1c:14:
94:8a:5a:44:eb:9a:d3:bc:0f:3f:9f:2b:83:3b:e3:
6f:da:4b:d1:43:9f:4e:41:26:0b:81:1a:de:70:41:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:79:48:D3:89:0B:12:20:55:55:24:87:93:54:20:A4:5F:04:01
X509v3 Authority Key Identifier:
keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:3f:09:11:8f:b6:3e:03:12:07:8f:bf:23:e0:b0:ca:23:68:
b9:02:be:48:c8:c7:8e:2b:7d:6d:88:42:38:d8:9e:ef:49:2f:
ec:f4:c9:41:d4:05:9d:82:58:c1:36:f5:5b:10:2c:b6:5f:9e:
ef:98:e8:38:19:50:2a:e1:4f:f3:b3:be:28:c6:48:fd:49:49:
45:e4:eb:48:2f:f5:6a:53:2a:b3:0d:85:ea:bb:44:f8:bd:f1:
63:2f:af:39:92:fb:d4:0d:d8:38:60:13:b3:53:c4:cd:e9:f2:
c3:08:7b:b6:de:a5:41:30:49:6d:ef:e2:13:f3:50:c2:ca:48:
25:f3:6d:d9:de:be:b3:80:cd:c2:96:94:bd:45:ac:10:5d:06:
97:8b:38:4a:41:1c:d7:4c:2c:3e:23:0b:0e:44:e7:f7:40:cb:
fa:88:93:85:5a:7b:f5:1a:24:a7:76:3c:7d:67:f5:12:f7:e5:
ec:ff:1e:67:99:e1:b2:55:c3:1d:42:6d:04:b5:cd:7e:82:f3:
34:d5:04:b1:66:ad:34:f1:bf:6c:83:a4:26:68:a7:eb:2f:40:
0f:73:fd:9e:a4:4c:3d:3c:13:9b:f8:f1:df:35:66:e7:78:83:
06:90:2f:87:6c:fb:d2:58:8b:4f:d2:8a:d5:19:49:7d:d6:5f:
93:23:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:40 2026 by rpki-client