
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json)
Hash identifier: 8PB7mRYkEkw6KZyGVs5q0wJIX50FbpZp0FhJk5iIcu8=
Subject key identifier: 80:44:3C:B5:24:6E:77:AE:12:84:8C:74:62:F5:C4:39:20:B3:6C:EF
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
Manifest number: AB
Signing time: Wed 29 Jul 2026 08:41:30 +0000
Manifest this update: Wed 29 Jul 2026 08:41:29 +0000
Manifest next update: Wed 05 Aug 2026 08:41:29 +0000
Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: 9HY69ju/Yolx8KoL8/qTCstdndBu/frfbRP0BeRWXO8=)
2: 56ACADFE47C011F1B54DF0A9AE833773.roa (hash: vxjWyQ9R73CYTlS7zLuzmK55YQslMUO/l+FMKzf2+xM=)
3: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: Cadr/xUb1+0gVtL0k3xW6zkBh+JLJ5ZTxdWq64WB59k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Validity
Not Before: Jul 29 08:41:29 2026 GMT
Not After : Aug 5 08:41:29 2026 GMT
Subject: CN=6a69bcb9-3c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:ba:8e:31:56:39:81:c4:9c:d6:6c:bd:01:
e8:9c:90:78:44:6d:eb:3a:b0:78:10:62:58:33:b9:
b1:18:5a:a7:47:cd:d2:ce:f2:0d:c6:65:55:48:d4:
c3:aa:78:b5:79:da:84:68:9a:63:7f:f6:3b:e0:38:
d2:e7:4e:94:f6:78:59:28:8d:49:27:b6:94:b0:4c:
8c:ca:9b:da:a8:83:1f:c9:df:b5:af:79:e6:59:fb:
b0:d2:2d:88:aa:23:76:e8:8d:fd:fc:12:3d:be:c8:
59:cd:40:81:c7:6e:c2:12:28:38:4c:61:9c:69:d8:
fe:ec:11:f2:85:0b:53:01:ce:af:33:b7:30:05:ab:
d9:e0:36:3b:5c:c1:7a:1b:1d:d4:67:15:7f:6e:eb:
0d:85:bc:9e:e7:cd:c9:86:a1:3e:d6:b2:d3:c4:73:
c1:54:30:70:2c:54:cd:bc:ce:39:d0:df:91:d3:fb:
24:3e:99:f3:c6:4a:41:bd:e7:70:48:b1:94:42:dc:
a0:f9:8d:81:ab:95:87:78:d8:5e:f7:17:0c:67:99:
01:b2:7b:92:83:95:41:05:b3:56:5a:6e:a7:ae:4e:
34:8b:6c:46:0f:b7:d1:79:78:7e:ea:89:cd:19:22:
3a:94:64:a5:3c:fe:d0:37:20:02:cd:23:30:60:ca:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:44:3C:B5:24:6E:77:AE:12:84:8C:74:62:F5:C4:39:20:B3:6C:EF
X509v3 Authority Key Identifier:
keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a5:bf:47:3c:f3:e4:a6:21:a9:48:93:f8:8a:76:09:6c:98:
9e:73:bd:17:3b:a6:8b:9a:5b:af:3e:b8:97:88:37:2d:04:28:
5a:bb:2c:76:53:56:81:f8:d1:30:ab:75:1a:39:20:8e:b8:36:
ed:13:2e:44:7e:d8:7d:65:bc:89:82:9e:05:53:f7:63:de:66:
07:7f:21:4b:5a:96:90:c2:06:81:53:9c:d8:73:fe:2e:42:cf:
0b:ae:b3:f3:82:c2:7a:91:de:fa:1d:78:cc:e6:cb:3c:3b:ff:
17:5b:09:6d:80:47:57:0d:c1:22:34:42:1d:cf:32:26:18:06:
4b:63:01:96:95:61:cf:a1:3c:69:55:ad:19:89:9b:3e:1c:e3:
c9:41:c0:4a:c7:2e:6f:17:b8:4c:a3:2d:bb:a5:f4:6f:90:b5:
f2:dc:c2:22:eb:48:79:eb:c7:1d:79:56:9e:93:f5:b3:b3:fd:
a3:54:6a:b6:0a:11:9b:a4:c7:c5:4c:fd:7e:fb:21:c4:d3:f0:
c9:10:86:f2:88:42:54:12:0b:c2:71:68:c4:b7:4a:b8:ff:f0:
be:9f:a5:5c:b9:93:be:70:aa:86:c4:0a:86:d6:17:cd:9a:80:
be:24:61:1a:aa:16:71:1d:d7:90:79:ab:6c:25:2a:ba:f0:2b:
6d:0f:42:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:00:07 2026 by rpki-client