
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json)
Hash identifier: eqFJCx+YPQTYf7xSYUWH1OuWYXXXJC6+hLTDx7pdUnk=
Subject key identifier: B3:80:DF:75:C1:10:25:08:2E:6C:2E:93:C9:AC:E9:2B:CC:3C:4F:EC
Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Certificate serial: 356B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
Manifest number: 3564
Signing time: Tue 28 Jul 2026 15:06:42 +0000
Manifest this update: Tue 28 Jul 2026 15:06:41 +0000
Manifest next update: Tue 04 Aug 2026 15:06:41 +0000
Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: sQNJxQ8pL/IZ+vdzc8AbWJnYDd5+0c4cbagCPQSNp0s=)
2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: oxiDTJi92uEmvEoDjgv/y1DqmarljGA90TImE98cgWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13675 (0x356b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Validity
Not Before: Jul 28 15:06:41 2026 GMT
Not After : Aug 4 15:06:41 2026 GMT
Subject: CN=6a68c582-17c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:44:46:cc:06:75:32:6b:27:5e:7d:35:29:
c9:5d:02:54:64:37:16:bd:4b:88:1a:58:a2:5d:92:
72:77:25:f5:b5:df:c0:47:fb:65:0a:11:13:47:32:
0f:b5:37:65:de:3d:83:79:05:45:f7:56:b9:3a:15:
c9:52:8e:5a:18:b0:e0:cc:d9:32:15:c5:71:d6:eb:
4d:76:8d:e4:4c:b0:6f:f2:e1:f2:e4:c3:60:11:50:
94:0e:b0:48:2e:89:8a:90:27:35:0a:f7:a0:d6:4b:
90:94:1e:eb:bb:ff:7e:39:a8:86:34:76:9e:f7:3e:
b3:b0:0b:5a:3b:d6:f9:a2:62:74:ee:bb:93:84:f6:
e2:84:29:18:89:a3:5b:33:aa:a6:cc:e6:86:cd:4e:
aa:cf:9c:73:a6:d4:e9:df:7c:98:d9:be:e8:b9:72:
6c:e9:6e:d4:47:6c:41:95:35:b8:c3:31:76:00:22:
0a:b0:b8:da:6c:3a:61:96:d0:38:7d:81:b2:76:01:
33:33:99:5f:5a:4c:cf:08:29:9a:c7:03:01:8a:76:
e7:64:1e:a8:6c:38:10:94:d4:19:4e:78:97:b5:04:
48:0c:34:36:59:4d:5a:06:b9:98:44:90:bf:a1:57:
18:cc:27:24:6e:9b:b5:41:03:5a:2a:ef:4b:93:e7:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:DF:75:C1:10:25:08:2E:6C:2E:93:C9:AC:E9:2B:CC:3C:4F:EC
X509v3 Authority Key Identifier:
keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:0b:d2:3d:21:73:4c:a2:f5:0f:31:40:3c:06:d8:60:aa:a9:
42:f3:44:d0:44:06:c6:d5:aa:ba:ef:f8:88:fb:cf:c4:47:a2:
eb:c9:de:1e:a2:16:5c:53:9b:53:56:bd:ce:fd:a8:24:24:0a:
44:6f:13:db:ca:f4:2d:02:c1:89:1e:b6:ee:f4:56:49:3c:f5:
53:a5:39:8c:b3:91:00:44:c6:0c:58:82:ce:d7:19:70:b1:c8:
c0:e1:be:94:a0:1f:b2:a4:5b:af:55:cb:b3:4c:e7:11:cf:36:
c2:e7:18:46:79:25:a5:97:88:8a:87:67:44:f1:7d:45:eb:eb:
36:d3:b8:64:30:92:8d:fe:64:56:38:bc:f9:78:a0:41:eb:0d:
b5:3d:93:40:20:ea:6c:72:8e:06:15:c5:ad:85:59:50:3a:c1:
69:49:b0:9e:02:20:85:b9:d6:70:33:9e:0e:79:96:77:36:85:
0b:4e:91:e2:f0:95:73:d9:fb:13:5a:aa:57:1a:2a:47:11:d5:
82:f7:6a:11:f1:33:5e:39:b7:38:17:fe:14:44:fb:c6:77:80:
6f:72:56:bd:a8:c3:ca:1a:a0:ba:8d:ac:53:38:3f:54:91:e8:
68:e5:78:8e:23:ed:9a:4b:e2:b4:65:71:28:39:48:8f:43:b7:
34:1b:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:08 2026 by rpki-client