
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File: ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier: 4Ii2BlAIG/tB18NzWh+olbk8t25ikhpv4xBo7pw1Q4E=
Subject key identifier: 44:E3:9B:FA:D4:5D:22:66:A4:56:D2:3F:E0:BB:91:14:BF:94:AE:83
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer: /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number: 86
Signing time: Mon 27 Jul 2026 09:47:26 +0000
Manifest this update: Mon 27 Jul 2026 09:47:25 +0000
Manifest next update: Mon 03 Aug 2026 09:47:25 +0000
Files and hashes: 1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: XlAuwrSXCzAOQyFrcMuPzFdfdpstZZT0u8cb4LIZP+s=)
2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Validity
Not Before: Jul 27 09:47:25 2026 GMT
Not After : Aug 3 09:47:25 2026 GMT
Subject: CN=6a67292e-16b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:5c:6b:fc:43:e6:24:97:39:e6:aa:7c:83:
8b:76:b6:87:99:66:b0:e3:4e:25:42:69:0e:61:ac:
9b:96:44:62:d6:7f:38:25:ed:b4:dd:3e:e1:4d:d6:
e6:77:23:a5:cf:c8:bf:28:ea:38:0d:da:69:99:a5:
ae:41:8c:95:f7:1b:ea:4d:2e:ed:39:7c:cc:e7:8a:
61:5e:43:83:97:30:77:1a:4d:e8:0e:37:09:92:81:
a3:a8:4a:0f:8d:71:1c:e2:00:5d:36:60:55:35:0d:
6e:a0:43:35:49:a3:f6:85:a3:2a:2e:ff:e3:8c:17:
35:fa:d5:3f:ef:f0:ab:2f:f3:00:4f:6c:4b:15:d3:
dc:40:50:3b:d2:31:9c:ee:b5:9b:85:98:5e:39:5e:
a0:3d:62:ad:01:33:58:3e:d7:3e:94:f0:ae:27:03:
f9:24:e1:d7:09:9c:e3:65:7b:5f:69:9b:70:bf:80:
ce:c8:1e:43:77:27:ca:35:aa:8d:7b:c0:e5:7b:9e:
21:0b:48:7b:14:41:e3:0d:35:07:90:ec:8b:49:4c:
92:89:46:a3:02:00:ee:27:f0:8e:ad:c1:c2:43:74:
c8:4a:c8:9d:d9:3d:bc:92:cc:ae:29:23:b6:37:67:
ce:4a:4d:0e:2d:ee:91:c7:8a:d8:d1:6c:e6:b9:46:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E3:9B:FA:D4:5D:22:66:A4:56:D2:3F:E0:BB:91:14:BF:94:AE:83
X509v3 Authority Key Identifier:
keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:17:49:9f:55:a5:b0:22:93:96:57:eb:4e:01:28:dc:7f:51:
15:68:1c:f3:74:a0:fc:95:5e:e4:12:10:cb:14:03:16:0d:54:
b0:eb:c9:1a:b5:c5:8c:8f:06:ef:27:fc:c3:60:00:88:92:a8:
7a:74:7c:bd:24:f4:8a:c0:18:06:09:6d:3d:f5:56:fc:f7:fe:
eb:3b:d3:ab:dc:73:24:9b:06:fa:78:ce:0b:54:34:ca:19:f7:
8e:8c:b9:b6:a6:90:5b:a8:71:53:dd:7e:b3:e2:3d:d4:86:48:
4e:ca:2a:55:21:2d:41:f9:e1:e3:d2:94:35:d6:cf:8b:19:8a:
16:c3:76:55:ee:b9:b8:01:a4:dd:98:bd:f9:57:9d:1a:4f:81:
7e:85:75:92:f1:ea:ed:53:b1:35:f7:f5:0b:de:5c:03:de:45:
46:51:fc:93:11:c8:a1:26:b7:d0:5f:2e:7d:f3:5f:17:9b:14:
2f:dd:e4:17:f4:34:61:d7:bf:3d:24:44:ac:dd:ca:bd:ed:55:
1c:72:03:4f:14:0b:ab:4d:a8:3f:6a:69:05:e3:ef:5e:a8:76:
e7:2b:01:87:07:8c:61:af:7f:c2:80:cb:eb:ad:5b:42:eb:cb:
8a:bc:8e:20:4f:1d:62:8d:19:9a:ac:ac:22:88:43:74:c4:e2:
fd:9b:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:19 2026 by rpki-client