
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json)
Hash identifier: wDrULAKFmhVp6dUouY7cOY4OiTf6C6dRbBoWQSmS3hA=
Subject key identifier: D3:64:AE:C5:34:C2:58:B8:04:2C:BB:C5:FD:91:6A:9F:88:33:0F:5F
Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85
Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
Manifest number: 0228
Signing time: Mon 27 Jul 2026 04:19:18 +0000
Manifest this update: Mon 27 Jul 2026 04:19:18 +0000
Manifest next update: Mon 03 Aug 2026 04:19:18 +0000
Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: jxi+KJ4kqOwbrHb78t4ow/o3v0WZgPZt/Z+xWrBAEcA=)
2: A355C1A8B6D511F089793D6DC4F9AE02.roa (hash: h0j3mf/tfCqfATi6s2p0ZWyH9rfUorcBAbjHkKVPs1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl
rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
Validity
Not Before: Jul 27 04:19:18 2026 GMT
Not After : Aug 3 04:19:18 2026 GMT
Subject: CN=6a66dc46-a452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:c7:99:22:2b:d5:25:8f:0e:f9:e4:4d:3f:
13:95:cd:5d:d5:8a:87:cb:54:aa:dc:97:e7:8c:df:
d3:16:e5:71:d0:55:08:a1:88:4d:df:13:8b:9d:df:
e0:02:d3:ea:d3:ec:0a:76:71:e8:d6:13:fd:2a:02:
fb:db:10:d1:76:07:70:f1:da:62:ca:80:9f:d2:60:
07:0f:a3:f9:50:71:f7:78:79:50:3d:07:5c:35:95:
b0:fc:1c:e2:b1:37:ab:24:38:e6:2d:50:eb:9f:66:
41:49:63:31:c3:91:7c:f8:82:7b:b3:6e:83:83:d9:
bc:5e:6f:1b:de:db:ac:ec:c6:93:ba:e6:9c:1b:8e:
0f:a9:2a:4d:ad:0c:7a:d5:10:86:76:2c:c1:40:de:
1d:b4:2d:c8:94:f5:ef:1e:e9:ba:a8:ae:4d:2c:c6:
6b:55:b1:e7:c9:f7:f7:85:3f:42:7b:c9:d1:dd:a9:
81:b5:4a:ed:4a:e2:cc:de:e1:29:cf:34:1b:b6:c4:
9b:31:98:12:05:61:d0:62:59:4b:de:71:62:b5:24:
8f:01:f7:e4:92:b6:33:99:9a:a8:0d:0c:96:8a:f1:
a8:6c:bb:15:4e:e4:d8:52:a1:c3:55:5a:f6:3c:21:
35:74:48:e1:07:6f:0f:0e:94:2b:e3:43:dd:11:01:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:AE:C5:34:C2:58:B8:04:2C:BB:C5:FD:91:6A:9F:88:33:0F:5F
X509v3 Authority Key Identifier:
keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3d:81:98:87:a0:14:e4:4b:09:a6:05:33:ae:d9:81:f1:91:
b6:2f:60:f0:22:7a:13:80:bf:66:f8:fe:43:63:f1:00:6c:fd:
5f:fa:04:6e:ef:08:7c:6b:76:7c:f6:16:75:0e:c5:3e:eb:e4:
a0:48:db:c8:8d:28:d5:c7:1b:b0:e9:73:4f:a3:0b:96:29:c6:
3c:14:92:84:0b:9f:48:b1:fe:38:ad:9c:29:1e:48:8d:d2:b0:
7e:6d:ca:af:2f:51:a1:7c:ee:ba:d3:b0:d8:aa:fe:f0:05:5d:
c7:05:20:bb:ed:54:63:34:08:2e:dd:ad:7e:2c:56:ae:96:99:
42:29:e0:92:7e:7c:a4:b1:c0:a1:5f:ae:af:58:f8:14:70:2f:
c0:f5:d0:c3:b8:19:c8:d7:f4:0f:1e:59:d2:2a:bd:53:33:d4:
dc:8e:a8:33:f4:37:a0:d6:8f:7e:ba:44:2a:8c:91:2e:87:9d:
51:c5:f8:58:7b:2f:60:dd:9b:90:78:29:a4:44:84:8f:0b:7a:
86:fa:83:64:ec:4b:6b:01:78:26:37:f2:ac:2e:df:9e:b5:61:
c0:3f:97:10:83:f9:d7:ba:ce:10:c8:2d:fa:6f:c3:b3:23:76:
a6:69:23:fb:83:c3:99:77:e5:73:d7:cf:fd:17:7c:a2:0a:df:
1d:7e:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:09 2026 by rpki-client