
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json)
Hash identifier: p7/PDOUmRoAE6Xx8knt2jnJiJIpP/mXyTECh08MiIHk=
Subject key identifier: F1:9C:4F:70:A7:80:A8:22:03:55:E2:AA:04:65:7D:AA:8D:E6:5F:3D
Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
Manifest number: 0242
Signing time: Mon 27 Jul 2026 03:59:36 +0000
Manifest this update: Mon 27 Jul 2026 03:59:35 +0000
Manifest next update: Mon 03 Aug 2026 03:59:35 +0000
Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: 4G1rYRbLfAqVrazMt8NzW9cfVdEVAtdxJ/lEOXxZt4Y=)
2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: tV7zN4p6YBZjKHrlAaXgAexa7jVk375T1BwHlahtKKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Validity
Not Before: Jul 27 03:59:35 2026 GMT
Not After : Aug 3 03:59:35 2026 GMT
Subject: CN=6a66d7a7-9dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:19:aa:09:15:5e:5b:d0:d9:41:e2:2b:6e:
55:e2:7f:dc:ae:c4:e9:35:5a:8a:92:bb:27:72:90:
45:8f:58:7d:33:fa:73:dc:b4:5f:b8:6b:f6:4c:b0:
70:76:52:96:42:f8:ac:10:d2:98:e0:bd:98:f7:a5:
90:92:94:68:95:b4:6a:ed:8b:a1:f5:19:85:74:4c:
2d:a3:ab:f9:df:56:03:05:8b:aa:4a:0c:f5:d8:63:
82:69:4a:c1:aa:cb:3e:ae:67:65:b2:5e:78:4d:96:
04:6d:77:35:40:a4:d5:e9:8a:fe:05:f0:28:dc:c5:
6e:f7:50:fa:a8:d2:15:95:09:84:67:d0:84:65:0d:
c2:f5:48:53:94:64:f5:4a:a4:c6:93:a2:f5:82:1e:
b1:a3:c0:31:6b:66:25:70:4c:20:4f:29:92:1b:2b:
b3:3b:7a:a4:03:5d:ea:b7:bb:88:60:56:b4:f7:4e:
4f:1c:cf:cf:2d:df:49:ab:9c:a0:62:73:e0:ca:d7:
b0:48:88:70:43:72:1e:6e:f4:dd:6f:97:44:4f:83:
c3:21:7d:e2:2a:50:3c:8a:36:56:7c:98:35:f5:d6:
f2:32:8c:b0:12:3a:ab:6d:27:df:36:0a:62:29:44:
75:15:8e:53:53:74:f2:0b:cc:bf:cd:59:dd:05:7c:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:4F:70:A7:80:A8:22:03:55:E2:AA:04:65:7D:AA:8D:E6:5F:3D
X509v3 Authority Key Identifier:
keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c9:a7:5e:18:43:ef:16:ab:22:fa:43:e9:f6:ed:96:46:df:
1f:ee:fd:15:b2:5e:aa:fb:00:a8:17:4c:fc:75:37:69:55:fc:
45:df:3c:c9:0b:8f:34:51:7b:e5:00:a0:bd:92:49:5d:ed:88:
cd:2e:37:71:76:93:c3:f5:e0:bc:eb:12:d7:82:59:62:d7:cf:
22:16:31:a2:02:b0:1d:5b:7c:c2:ce:8e:5f:9d:bf:2c:b5:61:
78:5e:43:cf:90:4f:52:9a:63:21:a6:8d:83:65:d8:df:af:f1:
f8:72:b1:f0:e1:e5:70:c0:0c:11:d8:68:33:cf:47:23:4f:72:
60:18:8b:ca:57:5f:c1:7e:ad:dd:e7:ab:40:58:29:74:1e:fe:
ea:d2:21:9b:b8:3b:63:ac:89:02:5d:bb:83:6f:4a:9d:1b:02:
0a:c1:f7:e6:a8:58:45:42:f7:35:5c:c6:e7:e4:01:b8:02:bf:
b7:5d:84:4b:ad:3a:e4:26:6e:a2:3b:92:14:e8:09:6b:e6:98:
97:bb:64:8a:47:ff:27:cb:36:35:91:32:5e:8a:93:e5:d7:41:
29:ca:cb:6c:66:23:37:d6:6d:44:d6:41:48:e4:6c:09:ef:db:
05:40:31:2e:ea:c8:35:d2:53:87:ed:00:9c:5f:2c:42:c0:23:
bd:19:67:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx
MDNERkQ1RTMwHhcNMjYwNzI3MDM1OTM1WhcNMjYwODAzMDM1OTM1WjAYMRYwFAYD
VQQDEw02YTY2ZDdhNy05ZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj38ZqgkVXlvQ2UHiK25V4n/crsTpNVqKkrsncpBFj1h9M/pz3LRfuGv2TLBw
dlKWQvisENKY4L2Y96WQkpRolbRq7Yuh9RmFdEwto6v531YDBYuqSgz12GOCaUrB
qss+rmdlsl54TZYEbXc1QKTV6Yr+BfAo3MVu91D6qNIVlQmEZ9CEZQ3C9UhTlGT1
SqTGk6L1gh6xo8Axa2YlcEwgTymSGyuzO3qkA13qt7uIYFa0905PHM/PLd9Jq5yg
YnPgytewSIhwQ3IebvTdb5dET4PDIX3iKlA8ijZWfJg19dbyMoywEjqrbSffNgpi
KUR1FY5TU3TyC8y/zVndBXwxTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGcT3Cn
gKgiA1XiqgRlfaqN5l89MB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC
RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTgzQi81QUYwNDE5QzFCRTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZt
Y2JGaVRtT3JiMmdRUGYxZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs8mnXhhD7xarIvpD6fbtlkbfH+79FbJeqvsAqBdM/HU3aVX8Rd88yQuPNFF7
5QCgvZJJXe2IzS43cXaTw/XgvOsS14JZYtfPIhYxogKwHVt8ws6OX52/LLVheF5D
z5BPUppjIaaNg2XY36/x+HKx8OHlcMAMEdhoM89HI09yYBiLyldfwX6t3eerQFgp
dB7+6tIhm7g7Y6yJAl27g29KnRsCCsH35qhYRUL3NVzG5+QBuAK/t12ES6065CZu
ojuSFOgJa+aYl7tkikf/J8s2NZEyXoqT5ddBKcrLbGYjN9ZtRNZBSORsCe/bBUAx
LurINdJTh+0AnF8sQsAjvRlnuw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:28:25 2026 by rpki-client