
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json)
Hash identifier: zHTN6rEfm1MllU5JUa047rTpE8r74s0IxlbKwNDwVgc=
Subject key identifier: 2E:CE:E4:64:93:22:E7:36:72:B2:FE:C9:93:44:76:78:4C:34:C1:E6
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
Manifest number: 0121
Signing time: Mon 27 Jul 2026 07:46:29 +0000
Manifest this update: Mon 27 Jul 2026 07:46:29 +0000
Manifest next update: Mon 03 Aug 2026 07:46:29 +0000
Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: 0pnNfErF9sNifWsq97iflAU6SDWGhJy5Gd0dRoE+Bf4=)
2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: rcro9dP46E34GMHce4QAeTN8arZ/RvTtUrO6lFBK5gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Validity
Not Before: Jul 27 07:46:29 2026 GMT
Not After : Aug 3 07:46:29 2026 GMT
Subject: CN=6a670cd5-d758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:03:de:52:1c:7a:32:32:d8:16:24:10:94:
ed:32:a9:62:06:22:31:b9:c8:79:6e:17:4e:e3:bf:
bd:29:fd:8e:f9:08:c5:e6:f7:c8:c5:d8:20:a9:a0:
8c:ea:f9:a5:a0:1a:46:06:4f:84:7c:51:31:14:a4:
76:bc:1f:d4:82:88:25:2e:8d:0b:16:ee:20:f9:ae:
30:de:6f:d5:76:92:c5:73:50:49:12:a0:d7:a5:56:
a4:0d:f0:d7:bb:a0:48:a5:a4:88:2a:f9:53:75:4f:
9f:46:02:67:54:6a:fa:62:ec:3b:72:d8:6c:61:b7:
54:5b:b5:d4:53:54:c8:d7:96:7b:d4:ea:32:25:44:
a2:03:96:5d:bb:cf:44:65:2c:91:91:65:de:c6:0c:
c8:e3:d4:96:37:7e:a7:ef:35:34:7e:61:13:d3:4d:
5c:a2:89:38:39:70:16:f0:fe:b2:cc:83:e2:64:d8:
c9:bf:27:da:0d:7f:61:2d:60:d7:62:6c:1f:e9:ce:
f2:20:7d:6e:12:fd:39:cd:64:46:26:79:62:75:c8:
a3:43:84:fe:df:b5:34:89:10:cd:80:3e:95:bf:5e:
3c:be:6b:c7:3d:37:62:1d:e6:69:de:68:66:ca:5c:
22:23:39:04:ad:9f:94:98:bb:8d:d8:fe:29:a3:61:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CE:E4:64:93:22:E7:36:72:B2:FE:C9:93:44:76:78:4C:34:C1:E6
X509v3 Authority Key Identifier:
keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:af:44:6c:9c:f3:98:e7:d2:81:20:3f:3a:8d:c2:f9:bf:3a:
6c:04:29:a0:0a:9a:62:39:28:b4:13:b6:18:8a:8b:00:8e:e9:
af:a9:41:fc:b1:b0:ca:d1:a5:4a:2c:37:c6:22:d3:5c:8a:c9:
9f:ae:c1:97:cd:68:15:ef:29:97:25:ba:77:cd:f1:3b:3d:3c:
98:9a:7b:77:03:90:b4:41:b7:44:cf:57:ee:3c:11:90:21:a0:
4f:5d:2c:ee:83:b0:56:91:a3:b9:5e:be:a9:2f:8b:fc:e4:77:
c7:48:e9:9c:ac:71:33:b6:c2:1d:ad:e4:a9:f5:6b:69:09:ee:
11:27:0c:e8:89:20:08:2b:59:55:8b:16:cc:38:ff:be:95:1e:
57:88:09:1c:0a:97:0e:3f:03:92:9b:52:a9:68:c8:64:92:9d:
6d:ba:6d:b3:5c:77:22:6d:a0:89:c5:70:2c:64:b9:de:27:ca:
bd:60:c6:f4:59:df:85:fb:b7:7a:4e:9a:69:8b:ee:39:ae:88:
cc:80:cc:39:98:8b:e2:77:2d:2c:51:09:e3:fb:ae:b8:01:8c:
31:af:25:aa:45:c4:19:74:ab:8a:e8:ca:e3:79:41:aa:03:8a:
48:35:2c:2a:b4:7b:57:1f:7b:0a:ef:fe:fa:64:57:ec:c5:fe:
3a:1a:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:23:10 2026 by rpki-client