
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json)
Hash identifier: nUM59bo0+iiDzhx9hQBCoYMfnMXEmdhwnE5+Z1bpfWg=
Subject key identifier: F7:4E:28:12:53:5A:5E:39:40:2D:5A:57:32:5E:00:FA:AA:7C:7C:DD
Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
Manifest number: 0210
Signing time: Fri 17 Apr 2026 02:44:03 +0000
Manifest this update: Fri 17 Apr 2026 02:44:03 +0000
Manifest next update: Fri 24 Apr 2026 02:44:03 +0000
Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: 1XpzS9XWxYCr3KlyIRCcpzYDHwhwF7cwuteKpZ6Jcnw=)
2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: tV7zN4p6YBZjKHrlAaXgAexa7jVk375T1BwHlahtKKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Validity
Not Before: Apr 17 02:44:03 2026 GMT
Not After : Apr 24 02:44:03 2026 GMT
Subject: CN=69e19e73-6a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:a5:33:ca:2e:88:a5:26:03:dd:f1:64:70:
7f:7b:cd:9d:14:68:27:2b:da:4d:6a:da:4d:d4:98:
ad:0a:4b:c8:c2:fb:64:ed:02:ff:46:aa:68:69:90:
d0:38:8a:bb:7d:f8:5a:d8:cb:aa:30:ed:47:be:f6:
a3:12:0b:92:f1:e7:46:3e:a8:ef:10:0d:b9:18:4c:
c8:fd:f9:d6:c1:86:70:21:f1:cb:54:38:1c:61:8e:
1f:a4:b2:ae:f5:f1:2c:7e:1d:3b:3e:5e:71:e3:27:
98:7c:dd:9c:fb:fa:9b:f0:19:69:c1:f3:67:a9:64:
37:67:e5:2d:04:d1:bd:57:19:79:b2:9b:09:68:08:
3f:70:92:68:7d:ff:da:c3:46:c0:29:fe:ab:a6:ab:
26:21:21:e8:3e:97:bc:9b:de:64:96:51:25:0c:99:
97:9d:cc:cb:4e:de:81:7f:fa:f9:7a:75:db:bf:05:
5d:7f:78:9f:bf:14:88:5a:cc:85:9a:22:19:bc:ea:
e1:aa:da:c3:8d:ab:ad:8b:47:f5:4f:69:1a:86:1d:
f6:e4:29:5e:51:d1:45:dc:09:40:75:12:1f:84:de:
d4:23:6a:45:b2:15:a3:52:6d:76:3d:12:6d:af:1e:
22:f9:82:4e:3b:6b:f9:23:1a:46:66:65:fa:a3:e5:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4E:28:12:53:5A:5E:39:40:2D:5A:57:32:5E:00:FA:AA:7C:7C:DD
X509v3 Authority Key Identifier:
keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:91:52:59:85:e4:a6:ee:20:4d:38:d6:7f:2a:58:9e:c3:99:
c8:0e:79:5a:c9:c9:b4:67:27:81:f8:a1:5b:59:80:2a:5e:ee:
4c:52:3f:2e:9f:25:f5:43:d9:be:0d:e0:58:13:f4:f8:b8:40:
f8:97:d0:9a:59:3a:46:39:af:de:ee:7a:e6:6e:80:80:7c:51:
1f:9f:4f:e5:ac:d6:a2:f9:ee:91:08:76:63:76:25:e8:4c:39:
9b:81:76:df:3b:bb:3a:79:8f:f3:df:d2:50:42:55:c8:5c:78:
a5:55:95:17:d0:da:ef:c7:da:d0:3d:60:56:fe:4d:54:02:66:
d2:05:88:c1:3a:c0:ad:4c:46:d5:9e:0a:e2:2d:ac:4a:b3:e7:
13:59:e1:80:14:1a:3e:2f:5a:32:a1:d0:51:b6:2b:c0:16:11:
5a:f6:33:61:bd:d7:44:fc:d7:d4:c7:53:5e:51:61:64:cf:55:
f7:39:d2:65:5b:4b:e4:53:01:ec:7a:6d:b6:0d:b4:54:d3:ce:
0e:55:0d:2c:eb:02:e9:12:5e:ea:c5:11:01:3c:e8:be:98:dd:
22:71:8b:cd:42:1c:95:30:bf:07:35:76:3d:b5:7c:c7:70:cc:
85:f4:3e:3a:ff:9b:c9:4f:ac:6f:20:a1:f6:55:7b:23:d7:1a:
f6:36:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:40:23 2026 by rpki-client