
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier: 3x5ZADmmYrShsEwKhqJRq+Cwz7s+2BEM9vp34+xpA78=
Subject key identifier: 87:C6:1B:E6:A3:9D:B1:BB:2F:B6:0C:40:3E:11:AE:1E:9E:1E:2F:AF
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number: 013B
Signing time: Wed 17 Jun 2026 05:44:18 +0000
Manifest this update: Wed 17 Jun 2026 05:44:17 +0000
Manifest next update: Wed 24 Jun 2026 05:44:17 +0000
Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: AvX9Eoyu0ywG2YOM9glLXOyisy/pNzPu//a45mRUG8s=)
2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: GShmLLZyIO7t2gH3mgsqYTIagHhCJ4qJGdBs3grosz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Validity
Not Before: Jun 17 05:44:17 2026 GMT
Not After : Jun 24 05:44:17 2026 GMT
Subject: CN=6a323431-fb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:74:3f:bc:a3:2d:7a:34:76:e1:f5:f2:24:
b8:f8:f5:76:7e:d5:98:d3:14:eb:3e:0d:8f:eb:13:
32:80:9c:85:64:d9:8d:55:9b:3c:94:fd:fc:99:ac:
2f:f8:bb:a1:3e:6e:97:95:b0:cf:48:08:65:7c:b1:
14:ec:97:ab:cf:ac:c7:8c:21:70:d6:a1:93:5e:e1:
5e:ca:3c:e5:d8:39:05:f8:a0:c7:6f:89:0d:7c:c9:
57:b2:69:3e:29:a5:0e:31:31:18:e1:0d:fd:30:63:
ea:f1:11:41:2e:d9:26:4d:38:48:ea:33:d7:7b:ae:
ea:b1:bc:6c:ff:82:d9:79:68:c4:03:0e:04:a9:e1:
d4:bf:ed:c5:42:dc:1b:80:97:75:92:e3:95:f2:e9:
2f:d2:d6:17:f0:c4:e0:b3:ed:ed:8b:7e:bd:7d:94:
c6:76:92:15:a7:1d:33:24:ad:d0:d0:4d:47:2d:e6:
8f:d0:6b:a3:de:3a:da:70:88:c5:bd:9c:ea:4e:f3:
81:e8:a2:51:7e:83:11:88:de:14:76:55:ca:d1:00:
b8:b0:bd:44:0a:6a:dd:1c:81:be:b6:61:23:e4:47:
4b:ec:f9:fe:83:fb:b2:db:80:4b:48:6b:9a:66:3f:
34:7a:ea:f3:24:2d:65:39:e8:41:42:34:80:07:34:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:1B:E6:A3:9D:B1:BB:2F:B6:0C:40:3E:11:AE:1E:9E:1E:2F:AF
X509v3 Authority Key Identifier:
keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2c:cd:37:9d:8f:7b:4c:1c:08:13:1c:3e:96:38:e1:26:05:
4e:5e:17:79:65:6d:3d:be:bd:8d:1c:c9:8b:47:20:5c:c4:ec:
46:90:30:b7:63:ef:52:05:c2:01:c6:85:df:8e:7d:f0:c1:02:
e7:16:b6:03:a1:50:ac:62:79:9c:8a:06:46:8b:29:ec:78:30:
ec:a9:b1:9d:81:9d:25:e3:38:d1:b6:c0:0f:d4:bd:47:df:5c:
15:38:61:07:12:1b:60:36:4f:39:a8:43:fa:7e:63:fa:17:61:
3a:97:79:d4:30:87:e5:9c:4b:f9:e1:6e:2a:df:0a:10:91:bd:
0a:7e:24:3f:95:e6:34:e9:60:8c:df:5e:04:3a:b3:0a:f6:e1:
0e:ce:05:f3:9d:47:c0:e2:96:69:4b:93:59:20:19:de:12:53:
51:cc:60:1f:02:90:8b:23:c8:91:95:af:bc:93:7e:0c:03:f1:
94:af:96:cc:36:64:13:16:32:f2:dd:4c:7b:cc:f5:06:03:c1:
d9:1a:30:8a:17:ef:2f:2a:9a:9b:f6:fb:7f:0f:6c:57:00:8d:
0d:3c:d2:9d:0b:35:38:1a:89:4d:62:c0:e9:d7:30:f4:12:23:
f6:ac:45:99:83:79:c4:f3:81:01:48:e0:c9:b5:08:66:32:f4:
d0:0d:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:22:43 2026 by rpki-client