
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json)
Hash identifier: I6QNk3tKwAd6DaYRVPeJ962vr40fbD9h2ng7NDf3LQE=
Subject key identifier: 5B:5C:BA:46:B2:25:B7:57:DE:3F:2B:B7:89:68:F8:79:A9:66:DB:CB
Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Certificate serial: 0C02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
Manifest number: 1505
Signing time: Sat 18 Apr 2026 18:44:04 +0000
Manifest this update: Sat 18 Apr 2026 18:44:04 +0000
Manifest next update: Sat 25 Apr 2026 18:44:04 +0000
Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: Ntu7WdL+z6Vj1vygnZx8uzu3KfctgVd64xFQP6HXVYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3074 (0xc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Validity
Not Before: Apr 18 18:44:04 2026 GMT
Not After : Apr 25 18:44:04 2026 GMT
Subject: CN=69e3d0f4-da49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:1d:ac:b0:fc:e7:dd:06:e6:3e:bd:e8:26:
ee:dc:d2:e0:13:ea:8c:32:ea:a3:86:84:e6:8b:3f:
09:76:ce:64:5b:35:d6:e5:c3:13:73:01:cc:fa:a2:
95:8b:f4:d6:f1:aa:c5:a9:fe:6d:01:e6:b1:37:6d:
2a:66:3d:34:7c:47:4b:c5:02:6a:fe:d6:64:60:9d:
3b:7a:05:1d:6a:65:21:f9:a1:98:56:0a:dd:fe:08:
d4:06:31:66:66:68:02:54:bf:e2:fc:7b:cd:29:91:
87:84:e5:b2:70:15:f2:38:3e:76:36:ad:dd:63:72:
cf:f2:7d:a0:95:dc:25:64:aa:60:8b:a0:9d:c1:26:
24:13:9b:e1:6d:8b:a9:30:df:aa:1f:de:27:72:93:
14:45:85:03:e6:e0:d7:53:3a:d7:04:8e:01:97:80:
a9:fd:3c:2b:7a:7e:41:03:0c:b9:95:34:e3:c0:cb:
30:bd:fa:87:2d:ca:0c:af:00:fc:ea:be:49:20:33:
b1:e8:59:8a:74:07:6e:dc:69:ad:f4:28:5d:88:40:
19:2f:e4:c6:04:3a:d2:1e:36:f4:a1:06:7d:c5:c4:
87:9a:65:51:42:45:af:f8:26:33:ae:9f:b8:f8:aa:
a5:01:32:9b:66:c1:2e:8c:10:79:c4:b9:10:8f:15:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5C:BA:46:B2:25:B7:57:DE:3F:2B:B7:89:68:F8:79:A9:66:DB:CB
X509v3 Authority Key Identifier:
keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:8d:d7:d8:9b:bb:de:dc:fa:6b:7a:bd:0b:a2:16:a3:54:44:
ec:0b:b9:35:33:e8:a9:d0:c4:06:12:7d:e7:44:6f:73:44:a2:
3e:3f:bd:db:68:17:4d:92:8b:dd:fc:3c:ac:ca:a5:b4:00:e2:
02:a9:9e:47:0d:d8:c6:9f:3b:81:02:dc:a0:7f:c3:b2:49:9a:
38:d3:58:7c:cf:1c:28:b4:13:5b:c9:9d:23:0f:94:30:cb:ce:
fc:fd:ea:81:2d:e7:ff:a0:93:0c:eb:76:50:e9:89:42:d8:b6:
85:b2:a7:0d:71:a4:af:ff:4a:11:06:e2:f3:8e:82:39:dc:2f:
b5:62:aa:b4:37:a3:6b:fd:a8:f0:3c:be:d2:98:70:31:7e:c9:
a0:83:ea:e9:08:09:75:de:da:59:d3:6f:aa:07:9d:c6:2b:99:
0d:3e:05:d2:25:5e:4d:d2:13:2b:72:82:e8:e0:37:21:57:1b:
eb:6c:1c:6e:de:a1:a6:6a:39:15:8d:e5:54:52:0b:2d:6a:22:
bc:02:2c:3a:72:6c:bb:11:f1:85:c2:d0:33:95:0d:09:29:55:
0a:bb:57:3f:f4:94:64:ce:da:73:9a:e0:38:21:f0:4a:8f:6f:
c3:bb:9a:63:b4:c3:97:3e:fa:bf:e4:b5:4d:79:8e:f5:40:ac:
6a:7e:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:14 2026 by rpki-client