
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json)
Hash identifier: 9AkRkmenczULDP/LkxysbveoT8AFTCUWuDNMQx5KlGQ=
Subject key identifier: 6F:A3:12:AC:52:9A:F0:BA:B3:EA:C8:5D:87:61:92:B7:01:56:55:7C
Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Certificate serial: 0C35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
Manifest number: 156B
Signing time: Tue 28 Jul 2026 18:58:48 +0000
Manifest this update: Tue 28 Jul 2026 18:58:47 +0000
Manifest next update: Tue 04 Aug 2026 18:58:47 +0000
Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: ojVJhR88QmQcz9kgrQqMVHjJ1cJejfURssNrgMnLb4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3125 (0xc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Validity
Not Before: Jul 28 18:58:47 2026 GMT
Not After : Aug 4 18:58:47 2026 GMT
Subject: CN=6a68fbe8-4706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a1:40:7a:aa:36:b6:10:4c:6f:66:db:7f:69:
f1:52:75:b9:fc:a7:67:ba:53:85:04:42:01:ad:36:
6e:c6:2a:61:3a:fc:da:42:66:cb:3c:d2:ce:65:c1:
ec:0a:a0:4e:30:29:a9:fc:c2:5b:0f:b1:3f:2b:d6:
83:4e:a3:8d:78:b0:97:37:26:58:0e:9d:f7:4d:f7:
48:78:78:86:43:59:77:1f:2f:70:bc:2f:ca:95:04:
e3:ce:af:49:5e:7f:78:23:f0:0a:77:84:8f:4b:51:
47:a6:72:68:83:3f:72:b5:3e:b9:41:99:21:cb:ff:
b7:b3:7f:d7:51:3e:64:74:67:ba:1d:a8:38:35:1c:
ba:02:2e:83:1a:3e:c2:49:4b:3e:c5:0e:75:a5:09:
2c:29:0b:9c:d3:1f:b3:b4:10:2d:ad:22:50:6c:50:
78:fd:e1:d2:d6:75:38:d6:94:d8:55:32:2d:08:ff:
da:12:70:ec:f4:6c:42:2d:b5:15:4c:56:a6:5c:39:
1b:f5:9b:c8:0e:63:af:e2:7a:1e:45:51:43:a6:1b:
6b:9a:9c:1e:a2:b4:d0:3c:55:b2:2f:31:34:19:f5:
8b:49:bf:fc:81:79:5a:7c:42:fd:5d:4b:87:e5:99:
9c:7c:a8:82:88:eb:d1:55:c8:0b:ea:bd:ef:c5:e5:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:12:AC:52:9A:F0:BA:B3:EA:C8:5D:87:61:92:B7:01:56:55:7C
X509v3 Authority Key Identifier:
keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:70:56:24:b8:d0:fd:23:f3:8b:75:a6:30:e6:14:72:cc:10:
07:61:e3:c3:d9:31:45:02:c3:fd:a2:46:14:a2:d7:cd:4a:a3:
22:ab:5d:64:aa:5b:62:9a:a7:9a:c5:41:0d:32:76:aa:7c:8a:
8b:c2:12:2b:69:8c:4f:49:3e:92:d0:8d:b1:a1:ff:b4:25:97:
86:3e:3b:cd:14:6d:3c:24:55:af:00:7a:a1:04:fd:39:07:0d:
f7:69:9e:24:59:e1:4b:76:20:34:2e:67:9a:19:38:e5:f7:8d:
8d:aa:0e:a1:b5:29:bc:fd:cc:52:b6:ab:37:cd:ec:94:91:f3:
70:20:39:a7:3e:c9:48:73:d8:a0:f3:fc:f9:24:80:3b:8c:59:
5a:7b:b2:51:ff:00:07:36:65:04:dd:3e:63:35:eb:0f:52:47:
0d:10:b8:7e:14:ae:33:c7:2a:02:d4:57:03:09:61:b0:9e:12:
37:6c:1f:6f:99:b1:f8:01:30:35:3f:47:31:46:ae:c0:0b:02:
28:35:02:48:f2:25:c9:43:d8:1a:4f:a9:a6:88:8c:a8:92:05:
f9:17:95:9c:d6:19:53:af:d9:fb:d7:5e:1d:e0:4f:45:cf:88:
08:84:35:7a:0a:b4:63:66:c2:8e:9c:d7:94:fd:5b:87:92:9a:
6f:4c:a5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:27 2026 by rpki-client