
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json)
Hash identifier: MIYzypTyjK9RrVYViABvPUZE2strctI8R16U5omUgAw=
Subject key identifier: 28:A5:71:A0:23:94:99:D6:06:83:5E:C2:28:28:FE:36:D2:1F:9D:9D
Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Certificate serial: 06B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
Manifest number: 06AB
Signing time: Sat 28 Feb 2026 22:55:12 +0000
Manifest this update: Sat 28 Feb 2026 22:55:12 +0000
Manifest next update: Sat 07 Mar 2026 22:55:12 +0000
Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: ynTwWodelAg0vJxsOnX0eT3mFQmQ3HqvS1qsR3fnpmc=)
2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=)
3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Validity
Not Before: Feb 28 22:55:12 2026 GMT
Not After : Mar 7 22:55:12 2026 GMT
Subject: CN=69a37250-3884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:29:1f:91:a0:79:03:b5:b2:21:3c:68:3d:
ef:c1:bc:19:65:11:4d:77:45:f3:37:10:a4:ae:2f:
67:e6:cd:a7:1a:73:7f:00:b7:b9:56:a9:4e:79:48:
81:c5:45:e1:67:a0:77:85:1f:8d:5d:20:7b:f0:02:
e2:a5:a8:d6:df:98:c9:e1:69:0a:16:5c:a2:d9:60:
19:76:d3:c9:18:bd:3d:7c:7d:01:e4:d0:d0:50:82:
2f:cd:05:6e:11:29:5c:e0:7f:6c:e3:b6:9a:34:2f:
78:7c:4d:ba:a7:05:6a:89:fb:9e:62:c3:64:4e:8c:
12:cb:6d:50:f4:06:7a:c1:8b:3e:48:9a:58:d1:86:
ed:ff:4a:1f:6b:f0:91:90:0a:ae:06:d4:4d:09:ee:
76:bd:03:26:e7:c2:4f:cf:4b:58:22:e6:ac:d3:bf:
54:e2:06:97:84:34:69:dd:0f:c3:3f:85:61:bf:f9:
ca:a6:78:a9:79:f0:6a:fc:59:b8:76:04:b5:91:00:
42:d3:c0:74:b1:7a:ef:ff:b8:26:9e:af:79:4e:e1:
f5:ce:5d:6e:3e:b5:2c:c1:b0:fd:c9:3b:23:91:29:
98:35:0c:c8:c6:66:22:47:11:fd:e7:d4:fb:a9:d3:
f2:ae:d8:ee:7d:43:5d:f4:fc:28:7e:90:61:76:06:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A5:71:A0:23:94:99:D6:06:83:5E:C2:28:28:FE:36:D2:1F:9D:9D
X509v3 Authority Key Identifier:
keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:67:4f:a8:08:c9:df:db:89:60:8c:f9:25:4a:31:9d:40:97:
4b:8c:c5:58:e3:91:fd:ed:07:8f:5d:e4:d1:6c:83:5c:96:7f:
f9:94:43:91:a0:76:34:35:f8:0f:d8:5a:1d:59:65:d4:0b:86:
25:67:58:8a:a6:be:33:e8:92:61:95:be:77:6d:e2:31:bf:1d:
0d:76:f5:0a:70:a1:c2:f9:fa:27:db:fa:da:f0:50:f6:c2:e7:
58:97:60:27:b3:1a:70:15:cb:87:3a:a2:8b:f1:fc:47:cf:62:
e4:3c:c6:d8:36:a9:41:ad:2f:f5:ff:c1:8e:0f:46:e8:3d:7e:
4e:cf:d5:d9:6d:fd:76:68:35:d6:f8:0b:4e:2c:6c:d9:d0:8c:
56:c2:ac:04:99:6a:75:43:74:e8:d4:04:9e:a9:76:93:54:3c:
38:44:b1:5a:d7:67:45:49:4d:ba:16:c3:02:6e:b1:eb:d8:01:
0e:47:e6:6f:cb:0b:25:9b:34:dc:81:38:e7:04:ac:6b:d6:f2:
bd:01:56:d1:c1:dd:2f:7f:a8:c5:c0:05:25:19:0a:e4:ec:13:
a2:e9:09:77:85:04:b1:17:25:ae:9d:10:72:6a:c5:63:7e:7b:
da:52:69:f7:3c:57:92:33:1e:7c:cd:09:62:6d:aa:03:0b:a8:
f1:67:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:08 2026 by rpki-client