
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
File: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json)
Hash identifier: p2M5JSwTs2/EINGOBMCXq11SwX7Mvo+hghvPIOXrOcA=
Subject key identifier: 31:4F:39:08:D1:0E:85:E5:20:0C:AB:89:5D:70:99:14:F3:33:17:9F
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
Manifest number: 7C
Signing time: Fri 17 Apr 2026 07:26:55 +0000
Manifest this update: Fri 17 Apr 2026 07:26:54 +0000
Manifest next update: Fri 24 Apr 2026 07:26:54 +0000
Files and hashes: 1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: 1XB/FjRbFXfyUKe6AmKLRZRCABqlqDJIrCUnXX4kVyw=)
2: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: gAF8NOxTri4lmRnjfw1NrjD/U5F8xAKVG+vonQB71no=)
3: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: gKh2lmx6ZZYyw96B7i0NN7NG7ZPJA6ncWMPAGGPkE84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Validity
Not Before: Apr 17 07:26:54 2026 GMT
Not After : Apr 24 07:26:54 2026 GMT
Subject: CN=69e1e0bf-c6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:b4:88:c1:9c:6a:50:33:64:c8:f2:69:9f:
de:ef:43:11:01:cf:a5:ac:51:c4:d8:81:7b:81:39:
41:f5:16:1d:15:74:e6:b9:9e:19:62:fa:b4:20:2d:
58:3e:56:4f:8f:11:c2:a6:79:e3:9a:f2:3c:36:5d:
4b:e8:1a:37:9c:c3:b7:90:5e:60:f9:11:df:67:7d:
d0:7c:b0:43:e2:6f:4c:4e:bf:5e:c7:20:08:61:5c:
f6:1d:0c:c6:cd:9f:06:c2:9f:ba:40:ab:20:0a:7b:
b3:d6:e3:90:4e:54:42:ce:cf:9a:78:ab:0f:a8:19:
fa:c1:93:3e:87:35:12:87:1d:8b:46:22:e7:a3:ae:
85:2d:cc:6a:0c:d7:98:50:a1:82:db:95:ff:6c:75:
93:00:72:c2:0f:79:f5:1d:7b:6b:d2:b6:08:2d:ef:
85:a0:24:a8:14:1c:a9:c9:b6:df:02:0a:9d:13:09:
13:8d:07:a4:dc:0f:b3:f5:59:a1:f5:f2:73:7a:22:
68:74:40:65:61:2c:b9:f0:56:c8:5e:43:b4:85:d5:
d0:d0:70:ec:7f:be:c6:85:aa:44:a8:ad:3a:fc:3d:
1b:db:be:b3:92:e8:44:8e:bd:94:16:9a:00:dc:34:
fe:d5:9f:7e:22:62:aa:9d:66:34:4e:51:43:d3:ae:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:39:08:D1:0E:85:E5:20:0C:AB:89:5D:70:99:14:F3:33:17:9F
X509v3 Authority Key Identifier:
keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b3:6a:63:6a:0c:a4:16:98:52:40:fa:ca:23:9a:a9:19:b4:
7d:0a:ff:21:67:63:a4:0a:2f:01:a3:45:d0:f7:59:fc:4a:04:
eb:ee:26:71:f1:12:40:03:2a:77:5d:d5:f0:1b:3f:15:31:ab:
2a:d6:47:52:09:2b:6b:14:db:61:c7:37:fa:32:41:46:9f:ef:
a2:ca:0e:3f:1e:d7:5b:3b:24:df:66:b4:9e:f2:6f:9d:4e:84:
7d:b1:4d:14:6f:c0:89:65:e4:34:60:0b:72:be:fd:d5:3e:f6:
d7:a2:19:db:65:27:c1:8c:44:f5:76:22:de:7e:b0:35:c8:29:
ec:51:9e:c6:8b:c2:b1:2a:54:ac:11:3b:ca:be:39:3d:37:dd:
43:a1:60:db:42:77:09:b8:b6:47:5f:1e:ee:31:8f:38:6d:05:
f8:ae:43:81:e5:54:63:13:83:d3:25:6f:e6:9f:a3:17:22:95:
25:b3:91:7e:74:95:3f:81:66:7f:51:89:75:2d:bc:28:35:b7:
ac:54:d3:04:91:64:20:f8:78:9c:34:b3:7c:53:d0:4e:d6:72:
f3:54:ae:44:2d:57:d6:22:61:66:b9:d0:f0:f4:2e:e3:13:3b:
58:56:7b:37:d2:1a:39:7c:0f:fa:46:c8:c9:67:16:9b:72:75:
26:76:43:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:31:14 2026 by rpki-client