
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier: mVQhP9qDn4e+5ginIGsi80HA5JFkUpUnQK1pc+r9pMQ=
Subject key identifier: A8:E0:B8:E4:82:22:97:94:F9:BC:C8:F2:B4:48:A7:00:58:88:39:3B
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number: 01CF
Signing time: Sun 19 Apr 2026 03:25:10 +0000
Manifest this update: Sun 19 Apr 2026 03:25:09 +0000
Manifest next update: Sun 26 Apr 2026 03:25:09 +0000
Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: Xk9qB/aRSBS9IcKkIDjVM15adm6s9jFEHx/oixpa+6M=)
2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: fG2F07ozyOAGX3OfyVFC/xUJQ5PUexYp8MQrIGuykkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 03:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Validity
Not Before: Apr 19 03:25:09 2026 GMT
Not After : Apr 26 03:25:09 2026 GMT
Subject: CN=69e44b16-8234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:5b:c4:94:82:34:89:42:ab:5a:d3:e5:9a:
a4:6e:8e:45:58:3f:ca:54:52:71:33:79:0e:c5:8e:
85:3f:6f:f0:29:4a:32:ed:3d:fc:da:76:3a:a7:f3:
69:6f:d7:c0:3b:d6:7d:21:ca:0b:e6:83:72:e9:4f:
35:f7:dc:b3:73:ab:33:c5:4f:eb:2b:07:ba:21:c3:
c9:cd:67:77:2c:da:2f:6d:df:87:31:80:b4:b7:32:
44:d3:0e:1b:e5:61:8e:a2:7d:09:59:83:f9:ec:94:
4d:a2:ab:7f:57:16:36:68:0d:4d:02:10:0e:9f:d3:
de:b4:ee:8d:2d:02:32:14:a3:d6:61:35:49:0b:f2:
4c:80:78:7b:65:e6:bb:46:5e:16:96:52:12:ff:1e:
60:44:c2:97:13:97:15:14:72:24:4c:9f:4e:82:ff:
ae:96:5a:7c:02:53:4a:6f:56:e4:9c:34:f0:fa:7e:
ce:30:5b:92:e7:4c:6c:68:83:23:8c:96:6d:f8:1d:
39:47:13:12:b0:51:49:0d:60:32:dd:2e:ad:58:bf:
d9:0c:c3:5c:d0:ce:b3:fd:3f:ba:6f:05:fa:f1:67:
9b:d4:25:8c:2c:1b:c1:34:7c:36:c7:01:f0:13:5e:
35:92:83:44:78:04:26:9d:fa:69:83:21:9e:53:f7:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:B8:E4:82:22:97:94:F9:BC:C8:F2:B4:48:A7:00:58:88:39:3B
X509v3 Authority Key Identifier:
keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d3:e4:7c:08:4c:1c:9d:a9:25:39:66:5f:f4:86:90:fa:7a:
fc:b5:3b:60:cd:bd:f4:7b:c5:a8:31:8b:fa:6d:a5:ed:c2:0c:
db:ae:67:7f:06:b2:c2:87:f4:99:af:8f:43:fb:a3:64:b8:28:
ed:33:57:1d:d5:2f:49:d6:96:bc:c5:63:8c:95:32:b2:96:65:
cb:ea:00:2d:b4:ce:2e:28:c5:e7:31:57:55:3c:99:90:80:91:
f1:d8:b7:f7:d8:1c:35:63:86:79:fa:01:ec:a3:ed:6c:b5:5c:
f8:0d:db:5c:09:dc:f8:82:42:70:95:b8:fd:56:cf:3a:ee:90:
bc:b9:92:09:09:c3:96:0f:92:d8:cf:a5:6c:2a:2c:08:8f:49:
4b:8a:fb:5c:41:ce:f7:9a:e8:c6:93:ee:22:b8:6b:ab:43:35:
07:7d:15:38:6b:1e:f3:50:04:33:93:95:dc:54:f2:e2:90:46:
f1:66:92:5f:ac:48:51:9f:49:e1:b5:e9:7a:be:d8:b6:b4:07:
61:0b:6f:45:11:00:ef:db:da:60:5e:83:fd:6d:23:27:e4:50:
51:d6:42:dc:04:34:91:06:5c:ee:1d:8e:13:f0:ef:01:47:9a:
23:11:f9:93:e1:8e:b3:cd:96:77:d6:a5:fe:76:ef:40:f1:9d:
09:3b:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:58 2026 by rpki-client