
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json)
Hash identifier: kIP0/zaoJNYPqbyERBrXpseN7hWwjg2zsfCe5Ze+EW4=
Subject key identifier: 22:86:D3:AA:CB:82:85:2E:2D:16:8D:E0:DA:43:D4:4C:24:FD:AB:1E
Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Certificate serial: 3554
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
Manifest number: 354D
Signing time: Fri 12 Jun 2026 15:02:35 +0000
Manifest this update: Fri 12 Jun 2026 15:02:34 +0000
Manifest next update: Fri 19 Jun 2026 15:02:34 +0000
Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: /SUdN+luCz/v91ILgEwK4hNrTeN+3XyhZpvCvs2gQ6U=)
2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: oxiDTJi92uEmvEoDjgv/y1DqmarljGA90TImE98cgWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13652 (0x3554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Validity
Not Before: Jun 12 15:02:34 2026 GMT
Not After : Jun 19 15:02:34 2026 GMT
Subject: CN=6a2c1f8b-c8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:1c:c9:a8:99:98:5f:b0:ed:02:16:2c:a3:
30:5d:85:bc:29:9e:12:e2:3c:95:eb:a3:79:82:37:
1a:5a:9a:78:07:0c:fc:2a:e3:4a:56:f7:d7:6b:49:
cb:5d:ca:8f:59:67:9c:cb:36:06:f8:3e:23:5f:55:
dd:ea:31:6f:14:1c:ee:4c:18:7a:a3:bb:d3:73:17:
0f:29:80:0d:8c:70:54:31:f2:6a:dc:53:0b:b3:24:
44:19:e8:bd:e3:6b:0c:fa:7f:de:74:51:41:b4:3f:
94:85:42:ce:ff:be:11:74:26:ba:95:c7:51:af:9f:
9f:8c:a9:2f:16:e3:e7:33:52:91:8c:01:0e:8d:7e:
fd:8d:38:09:21:ed:8b:25:02:c1:26:2d:e5:0f:71:
43:33:97:4c:4c:26:b7:88:9c:aa:c1:3a:0e:f4:5b:
24:e0:2f:73:48:d5:c8:5f:96:6b:f4:71:51:3f:ee:
a0:2a:1f:a6:05:76:7f:80:11:ae:ed:09:61:f7:f1:
4c:64:41:bb:23:a5:06:22:4f:b9:7b:12:4f:62:32:
4a:a8:c4:4a:24:38:dc:33:87:31:1e:3a:f6:51:83:
e2:20:26:de:3d:88:8e:b8:52:5a:e6:b8:52:b0:ec:
3d:11:fd:9c:92:0b:72:03:06:a0:ab:df:87:16:df:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:D3:AA:CB:82:85:2E:2D:16:8D:E0:DA:43:D4:4C:24:FD:AB:1E
X509v3 Authority Key Identifier:
keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ca:e8:32:86:2b:39:b2:5c:88:04:e4:92:79:38:6b:9c:b3:
12:c0:a7:8e:7e:91:b9:62:07:4b:ec:1b:89:16:00:47:70:8c:
ba:16:44:7f:83:ba:9b:12:6e:2a:ba:31:36:54:01:92:1a:d9:
70:f1:e4:4f:cd:c4:bd:57:91:14:0a:7d:67:fc:42:d2:de:c1:
84:76:96:82:1c:87:d9:e4:e7:34:2f:6e:a5:86:49:66:3a:e8:
a1:06:e9:4c:07:08:07:2a:a6:de:c0:08:da:c4:69:f3:5b:46:
d3:c9:56:78:bb:69:4a:33:d5:81:5e:3e:25:5b:3c:35:be:91:
94:7b:ae:b2:23:b5:99:28:87:3c:f0:97:a1:16:bc:1e:6a:51:
46:26:f1:3e:f6:96:7b:d3:70:b8:2c:d6:6c:cb:e4:23:4a:b5:
4b:8a:84:09:8f:c7:15:f4:eb:69:c7:01:45:8f:a2:09:13:ac:
b3:00:e4:b2:c6:e6:0e:9f:23:7e:02:4b:31:62:ab:1a:0e:32:
85:3b:fa:f4:20:13:99:aa:aa:6c:83:b7:47:cc:d9:81:75:61:
83:54:09:87:9a:33:2d:a2:97:5c:c0:f0:17:04:89:c0:02:06:
a4:21:40:e7:ee:ce:3b:18:70:19:fe:25:82:2a:c2:64:19:62:
52:1d:94:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:20 2026 by rpki-client