
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json)
Hash identifier: yhBnY2IbvqERFeDkUuYdC+VgN4WdVl3lJIaZHovNrRU=
Subject key identifier: 91:22:B4:31:61:24:2B:71:B6:C2:19:62:36:69:55:93:6D:2D:6F:7A
Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Certificate serial: 0CDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
Manifest number: 0CCE
Signing time: Tue 28 Jul 2026 18:39:27 +0000
Manifest this update: Tue 28 Jul 2026 18:39:27 +0000
Manifest next update: Tue 04 Aug 2026 18:39:27 +0000
Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: lN0pb4ZRlxXH3Zhdxo2SgE+GiaxxbmYsiMtPOg/pT28=)
2: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: +veuE7uroMOvZaLX4YYQUXIUo7kDv0lS8n9ppMEUfBU=)
3: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: RqF3cRBG8AaHKTEnB008C+GD7GzGFEY6SVWZ6TQ/56s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Validity
Not Before: Jul 28 18:39:27 2026 GMT
Not After : Aug 4 18:39:27 2026 GMT
Subject: CN=6a68f75f-18aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:81:9b:1a:97:67:a4:3f:20:c0:a2:b9:96:
52:04:f4:d7:31:d4:0d:79:aa:1c:a8:66:25:df:54:
8b:fd:17:8b:b8:63:74:44:94:ed:a3:34:c8:f6:f4:
50:d0:32:16:39:c2:6a:23:90:19:95:0e:c0:9c:01:
00:ec:67:29:9c:aa:43:f8:a1:4c:8a:99:2c:84:b8:
d8:96:5c:97:28:26:76:63:bc:e1:ad:d5:7d:26:dd:
26:61:c5:d8:0c:1a:a5:51:3a:bf:e2:45:4b:2d:a2:
00:a1:15:aa:3b:d5:33:15:68:02:b7:f3:cd:22:1d:
2b:a8:4e:d7:0c:52:8c:ec:60:7c:cf:d7:ba:d2:30:
34:18:96:08:0e:ba:4b:e9:4a:ef:24:28:44:53:1b:
b5:f1:0a:ea:a1:89:a1:d3:82:7f:5f:a3:5b:2b:6b:
b7:4e:cc:c0:58:53:3a:96:08:f9:03:32:a4:97:13:
53:b3:0d:b8:0a:25:e2:e1:e1:49:49:ac:28:a0:f8:
ab:41:68:0e:80:b3:15:d3:43:f7:0e:98:59:cc:73:
cd:8c:9f:58:4f:47:c2:4d:75:01:b2:1f:9d:ec:59:
60:f6:c1:51:0c:21:5f:51:64:a4:63:cb:82:4a:ba:
d9:c5:1f:7d:c5:71:db:00:e1:b0:80:31:8e:00:f7:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:B4:31:61:24:2B:71:B6:C2:19:62:36:69:55:93:6D:2D:6F:7A
X509v3 Authority Key Identifier:
keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ff:c7:76:e1:86:a2:c8:8f:f4:e7:5c:12:c5:d7:c9:ce:aa:
8f:15:d6:62:c4:6b:e3:55:3a:f3:a7:01:38:9f:6f:92:5e:be:
d3:15:10:a7:e4:84:9c:11:1e:c3:05:a1:14:1a:50:80:ba:be:
49:e5:3f:04:d7:f7:f4:dd:80:8b:f8:a8:1b:4e:fe:5e:9d:17:
93:99:e4:0c:66:e1:f5:aa:45:48:7b:c6:cd:d1:9e:5c:63:8f:
86:d3:68:31:42:ec:bf:5b:39:b6:82:5e:f4:7f:57:67:99:c4:
9c:a2:f2:68:04:81:c0:8c:d7:0d:79:43:1a:e8:13:02:52:83:
3b:ae:4a:40:11:1d:22:b8:e4:36:bc:fe:97:9c:e0:f9:91:06:
88:10:2e:b6:37:b0:c5:17:d4:e3:a6:3f:08:16:e5:b6:5b:18:
be:72:ee:51:cb:c3:01:b2:35:ce:e7:e5:de:2b:22:81:4c:09:
01:af:5a:76:85:70:0d:e4:d9:53:79:1b:86:ab:ec:6a:e2:44:
fd:10:3c:00:df:27:6b:bf:c8:e0:91:37:c9:b5:e9:cd:6d:5d:
3e:15:bd:58:85:b9:06:1b:6f:4b:87:0b:fb:4e:64:a8:32:13:
94:9e:e4:23:c9:33:2e:52:10:26:0b:b1:d4:90:df:68:ba:1b:
71:e2:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:54 2026 by rpki-client