
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json)
Hash identifier: o1BDfJ5REb8/a21dEr0IT/xnc/Kk7kvk8q9A6X+y8a8=
Subject key identifier: D5:A2:5E:1F:52:A9:36:EE:7C:29:80:80:0A:4A:DE:BB:EA:56:B6:BD
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
Manifest number: 75
Signing time: Fri 17 Apr 2026 07:33:41 +0000
Manifest this update: Fri 17 Apr 2026 07:33:40 +0000
Manifest next update: Fri 24 Apr 2026 07:33:40 +0000
Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: pmMSDtN63cnVSMFAfM9XmEodJOwv+A29topzdQffkpg=)
2: 11CCFCD8DB0B11F0BC36350982D3641D.roa (hash: iqoDOOCu/fngDkkSni/oqHyjislrgnbGvgYBpgWoetA=)
3: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: Cadr/xUb1+0gVtL0k3xW6zkBh+JLJ5ZTxdWq64WB59k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Validity
Not Before: Apr 17 07:33:40 2026 GMT
Not After : Apr 24 07:33:40 2026 GMT
Subject: CN=69e1e254-0123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:cb:d1:de:1c:6a:94:ba:fc:57:eb:f1:3f:
41:5b:7c:df:df:b4:29:e8:7f:dd:f6:6b:aa:bf:1d:
d9:ca:29:50:9b:f1:88:6b:52:d8:39:f7:70:a9:11:
61:96:6e:16:66:57:2b:16:7c:05:ac:c5:43:ae:27:
6d:7b:19:56:16:60:d1:81:50:db:a8:a3:96:13:54:
5d:a9:28:36:ee:f9:f8:3d:2c:72:c4:a0:10:e4:1a:
67:e0:0c:9e:d9:8f:96:f0:e8:e5:73:fc:fc:3b:42:
9e:34:97:71:5e:76:55:44:37:47:89:da:29:52:62:
bc:61:ee:97:b5:6b:d3:b3:99:3c:98:e8:7a:71:81:
3f:64:e6:d9:d5:f6:5c:63:2c:56:69:86:92:e0:3a:
8c:9e:5a:ce:16:5d:90:03:50:34:0e:29:89:05:5e:
e6:02:f4:93:89:2a:32:c4:0b:37:ad:40:94:d4:83:
12:ba:d9:90:e7:f0:3d:5b:31:27:dc:2c:cd:1d:aa:
b3:e8:80:69:19:af:b2:c8:63:54:ec:b0:bc:44:45:
09:b6:bc:68:2f:67:57:e3:b9:9a:6c:32:2e:65:72:
30:36:e2:1a:57:9b:ee:85:03:1e:94:dd:61:e0:8c:
e4:96:f6:bb:09:7d:26:a7:a9:e2:b2:1c:7e:a1:9c:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:5E:1F:52:A9:36:EE:7C:29:80:80:0A:4A:DE:BB:EA:56:B6:BD
X509v3 Authority Key Identifier:
keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:15:60:06:11:8f:9f:c7:5c:f6:d9:f5:4f:9d:12:fb:4b:77:
5a:47:f1:de:8f:36:24:43:60:dc:02:8b:85:14:48:76:92:a8:
61:2a:d6:e9:68:17:d7:0b:42:54:35:85:cb:7b:bc:e0:10:04:
94:3f:8d:3b:ef:7b:f3:36:53:8c:3a:c7:a1:12:0a:63:1f:cb:
d2:f3:4b:77:d3:ee:31:ae:f3:70:22:cb:18:3b:22:7e:6b:1a:
77:e0:bf:fb:90:19:e5:8c:a6:cb:cc:c5:71:8c:b2:17:af:8b:
4d:f0:7a:fb:9b:40:5a:7e:ce:1c:a9:48:76:e7:a4:b3:7c:a2:
af:5c:af:fd:fa:9d:4f:65:ce:4d:ce:29:44:f5:6b:31:55:37:
48:70:37:11:dc:8f:9f:8c:0e:ad:45:4a:7e:07:5e:3d:e0:dd:
66:47:c8:c5:f7:ba:45:1e:ba:df:92:d5:7a:40:ce:a2:c1:cf:
f8:48:d8:c0:f7:f7:57:94:90:ec:4d:5c:4d:80:ab:39:e9:7c:
9d:db:00:f0:fc:db:4b:ea:f9:0d:35:5f:a2:a3:cc:92:22:6e:
da:52:13:73:97:7c:79:cc:a5:e4:0f:e5:1d:3b:60:36:b0:ff:
0e:a5:b9:70:28:b1:6b:87:21:a3:fb:3b:1a:27:a1:e3:62:13:
98:1b:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:58 2026 by rpki-client