
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json)
Hash identifier: 2YBFFK4DoqKRh/bnXpTuYrASInhTk3okadP+Po2euCM=
Subject key identifier: 36:DE:F8:79:AB:78:C2:F5:8E:1B:CC:48:F6:26:C8:B3:27:52:D3:79
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 04D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
Manifest number: 04B7
Signing time: Mon 02 Mar 2026 00:51:42 +0000
Manifest this update: Mon 02 Mar 2026 00:51:40 +0000
Manifest next update: Mon 09 Mar 2026 00:51:40 +0000
Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: /JEfTCuZ4Hn+2fvRGTETe4l+Ro+qE5ZD8U/Hcq43vqU=)
2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: 4ijaOJ2+7U7oN4x3SqY0L3WCZ6WSLk5KycTCu9vay3M=)
3: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: CyhUpuelxfurs175TzhNpev0g401OlIUHRIQIbAxz3o=)
4: BC148566D22B11EE9443A443C4F9AE02.roa (hash: B6MzTFBVsCaLqko+Vbcswq3v0VyexLB2gQb+zDIx35I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Mar 2 00:51:40 2026 GMT
Not After : Mar 9 00:51:40 2026 GMT
Subject: CN=69a4df1e-295f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:f0:52:11:91:7a:d1:e1:40:82:cb:4b:41:
ad:7e:7a:30:a0:be:fe:8d:03:e9:4a:1b:08:39:43:
24:57:f8:df:88:da:46:64:3e:6a:a6:67:19:e7:2a:
5c:6e:f7:a3:16:7b:43:86:f0:15:24:ba:fe:8f:8c:
00:fc:14:9b:08:50:23:d1:aa:cc:c8:50:ea:7d:47:
8b:97:35:2a:00:77:9d:12:0e:a7:37:91:e7:9e:05:
73:49:d8:14:ca:4f:99:57:71:ad:0c:a7:5b:b4:08:
e2:25:9b:dd:13:5c:79:0b:f2:34:1b:7a:e2:fd:24:
72:cd:d3:4f:20:32:df:c6:c7:45:05:96:68:73:7c:
2b:05:f2:ea:46:50:cd:f5:6b:88:6e:d7:cb:aa:b7:
2b:f8:4f:cc:69:a6:9e:83:97:92:64:ce:3d:d6:6b:
56:cf:f0:66:98:d2:97:94:a3:c1:62:fd:f5:63:81:
bf:2b:eb:73:e1:24:bd:97:4c:43:52:0b:84:2b:3c:
31:54:09:ee:7f:05:83:43:6b:ee:f0:3a:69:c8:1d:
a7:b7:91:c4:18:59:b9:52:73:8c:c2:4b:d3:d1:45:
d2:f7:8a:a2:db:93:fd:29:a5:e2:71:88:23:92:d5:
cc:99:28:bf:79:19:43:39:c6:a4:06:1c:75:a1:6e:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DE:F8:79:AB:78:C2:F5:8E:1B:CC:48:F6:26:C8:B3:27:52:D3:79
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:a9:7c:75:9e:02:b7:b4:30:c5:5f:0d:75:9d:ca:a4:ed:4e:
ae:29:7a:32:90:0f:37:0b:84:9f:d3:25:60:10:dd:1b:98:7c:
ce:2a:7a:1e:92:a0:12:1c:f9:09:45:95:19:12:f4:8c:bb:c7:
e1:95:cb:47:6d:44:a6:96:b9:cd:0e:b8:82:f7:0f:f4:38:d0:
db:96:15:5e:e1:45:8d:69:30:0f:f0:4e:2a:a8:c6:a7:bc:f5:
f4:1d:d2:cc:b3:d7:ab:6e:68:08:74:7e:8e:ca:35:e9:14:bb:
ae:31:21:7c:00:e8:bd:51:bf:de:10:bc:22:16:83:8a:2a:b4:
ce:21:09:9d:12:2b:58:13:f0:1d:98:87:f9:71:37:ad:67:d4:
81:e1:f9:04:a6:d9:e4:bd:6e:1d:40:36:3c:a1:c7:75:58:15:
48:5c:33:35:15:c8:3d:23:ae:24:4a:8e:6a:a3:4a:5f:32:2e:
4c:40:12:24:ce:20:ec:af:bc:9d:c8:48:60:23:50:a0:d1:e4:
4c:fe:aa:d6:91:0a:84:53:fb:da:5a:bb:68:de:19:56:c4:74:
dc:b4:85:bf:7e:2e:03:3a:4d:d0:03:9b:ab:0f:b3:47:5c:d2:
ce:ff:af:83:26:75:e0:cb:9c:d1:84:8e:9e:8a:2f:cd:5b:3a:
90:42:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:43 2026 by rpki-client