
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier: Lt/FarynlTpp54KNYa6pAwq4W+CjhuaAYOIXcJJ/oxc=
Subject key identifier: 8D:98:D5:42:48:55:50:F4:9D:78:F0:BB:A4:2E:F0:7D:C2:83:ED:8F
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number: 0153
Signing time: Wed 15 Apr 2026 04:46:41 +0000
Manifest this update: Wed 15 Apr 2026 04:46:41 +0000
Manifest next update: Wed 22 Apr 2026 04:46:41 +0000
Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: IGD1SLL08sKlq57NrYRO8QshHCZLwguroJ/+NcpWDCw=)
2: 09799D96F36811F0BB995E0C666F56BC.roa (hash: k3tbTsuNd/0VaZo35U6WBx+uMYBIhVnOPOnYzqjLUfs=)
3: 09F2AE3EF36811F0BB995E0C666F56BC.roa (hash: 3qyXQf9X9ypzRtr6ed01ZGzQMiK+H459JYw687uWAE4=)
4: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: iZo2C57Z9aeJt224wtweP1I+ZMSYFsBAndFJeCnjn1U=)
5: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: QjR9A/HMp05od+zO3VCnyHZYpiHXbBVwXb61oJSOZeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Apr 15 04:46:41 2026 GMT
Not After : Apr 22 04:46:41 2026 GMT
Subject: CN=69df1831-927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:16:8b:12:e8:0f:a4:56:be:a5:70:f1:ed:
b8:78:c3:68:29:ce:01:c5:66:b5:b0:fd:88:2c:ba:
c7:a0:a9:f0:d5:db:07:9d:ee:e2:b2:d2:58:82:73:
85:ee:5b:56:7b:eb:1f:67:59:49:df:7f:76:84:ed:
6a:33:3e:3f:58:8e:c0:2f:21:07:50:34:66:8a:1e:
b3:9d:7f:6b:69:eb:e4:74:52:2d:f4:74:bb:dc:ed:
b9:32:8e:ab:92:bd:8c:e2:1d:7f:63:02:e1:70:4f:
63:b1:2d:ab:11:82:e9:1a:c5:9f:cd:5b:28:49:a7:
35:1c:48:69:6e:44:a9:68:4c:61:90:31:50:28:44:
d3:79:43:c0:b0:ff:76:0d:7c:83:03:ad:bf:48:37:
90:66:3b:a3:9a:59:86:13:8d:93:40:3e:6d:6c:3c:
eb:53:13:ed:5d:00:bf:47:fe:4d:13:f4:83:60:1a:
54:da:1e:aa:9b:06:04:9a:59:7d:29:6d:00:f4:c5:
03:91:80:e4:72:e6:fc:e4:7e:72:28:e9:45:ef:ee:
71:07:e3:65:41:aa:eb:cf:2a:ac:74:59:39:c7:56:
b5:92:68:62:5c:89:7b:b6:8c:af:f5:6f:42:e0:9d:
f9:64:a6:28:a0:5c:41:e1:f3:4b:1c:18:32:09:d2:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:98:D5:42:48:55:50:F4:9D:78:F0:BB:A4:2E:F0:7D:C2:83:ED:8F
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:30:b8:1b:39:f5:dd:b4:f6:8a:65:b2:ad:c7:a6:c6:dd:a9:
dd:0b:ef:00:29:dd:3e:2c:4c:a7:e5:46:86:21:cf:e7:e8:fe:
bc:5a:43:c2:35:22:e8:37:52:a8:8c:ab:97:21:f2:32:ff:e5:
cb:26:f0:ed:f9:56:99:ff:33:79:5b:b4:41:aa:7f:e2:65:bb:
fc:8c:9a:e5:e3:fa:ea:df:80:8e:39:f0:7e:2c:42:9a:33:d5:
18:a1:6a:cd:6f:74:06:7a:23:f5:4c:7e:e7:3d:05:c6:25:1d:
c0:70:96:e0:58:42:ef:4f:21:1b:ca:c2:4d:b6:b5:41:ac:79:
c2:93:30:9c:53:94:1e:82:e7:e3:06:e6:a5:f0:8e:62:ef:9d:
b6:e9:48:0e:54:fc:97:f5:fc:37:6f:24:45:9c:0a:60:e6:d1:
20:f2:87:63:40:92:d5:0a:ff:81:81:69:c2:9d:05:5f:11:f8:
cc:ea:91:d7:bc:fa:67:b2:5d:7a:9a:2b:4f:05:9e:3c:ad:22:
2c:9a:a9:04:c6:21:72:1f:aa:0d:0f:17:f9:2b:16:98:1a:9a:
60:92:71:31:5c:96:0b:f7:df:c5:74:db:8b:10:89:bc:f5:3e:
6c:56:6b:4e:fc:d4:42:cc:11:09:e3:d8:31:83:f1:4b:ec:54:
77:c1:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:09 2026 by rpki-client