
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json)
Hash identifier: 0WWKH9jCcQ88KpC8LxDsxNstjOjR2JlR/Xj/rcWezKA=
Subject key identifier: 24:14:13:E8:28:89:85:D6:EA:78:8F:E1:83:6F:2E:37:88:E6:B1:CD
Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
Manifest number: 024C
Signing time: Fri 17 Apr 2026 02:12:20 +0000
Manifest this update: Fri 17 Apr 2026 02:12:20 +0000
Manifest next update: Fri 24 Apr 2026 02:12:20 +0000
Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: oJMMfZaaH8RNiyEtE/+eKUWcUkwcQDOBpjwXASb0kew=)
2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: 3w67fjihibZok1qWjIP39FszAZUqgmCtMKGJLAm88jM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Validity
Not Before: Apr 17 02:12:20 2026 GMT
Not After : Apr 24 02:12:20 2026 GMT
Subject: CN=69e19704-ef07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:af:ca:16:3e:39:6c:43:fd:e8:b3:ee:36:
a4:f5:55:1a:ec:cf:fb:ab:83:ac:0e:bc:30:eb:75:
38:29:26:5f:47:a5:33:ad:36:67:bb:8d:3a:64:17:
2a:2b:7a:75:69:67:be:10:64:55:cf:bd:36:46:24:
70:4e:6b:85:3c:2d:ca:13:47:e1:c4:04:55:b9:50:
69:fe:11:96:d5:6b:37:60:e2:da:e2:61:ad:4d:fc:
5c:46:87:fc:eb:d4:da:4d:87:cf:27:25:40:2b:81:
a0:e1:53:4d:45:6d:97:78:59:d9:b9:f2:83:2e:16:
b4:1d:f7:da:05:2c:99:ac:61:2c:04:cf:f4:87:27:
3c:3f:c0:72:1b:f1:6c:2f:ed:26:6d:8d:25:76:11:
f0:af:65:e4:5e:73:73:21:5c:39:c3:b3:42:52:43:
a4:5d:2e:37:a4:3d:95:df:30:38:97:19:2d:70:75:
a8:f1:0e:14:e6:1b:df:51:bc:0c:26:78:1e:73:0a:
48:8e:15:a8:9b:a6:a6:e8:fc:57:bb:c4:62:67:67:
f0:b4:b7:4f:82:14:29:43:2f:bc:85:d6:e1:ed:24:
72:f3:57:b4:b9:c9:dc:30:20:7b:a3:ad:1f:85:37:
af:62:1a:b7:98:a4:47:8c:24:80:18:b9:c7:6c:af:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:13:E8:28:89:85:D6:EA:78:8F:E1:83:6F:2E:37:88:E6:B1:CD
X509v3 Authority Key Identifier:
keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:a4:3c:80:11:0f:85:ec:65:db:f4:fe:bc:c2:07:f2:0f:8a:
fe:cd:3c:18:56:4d:86:30:4d:72:2c:7a:a2:a1:a4:8c:12:35:
a1:0b:74:2e:2e:53:f1:3a:38:fe:01:5a:dd:d7:c3:fa:15:9a:
b3:4a:b4:25:fc:29:db:4f:a4:9a:c1:6f:f4:55:78:c1:68:ce:
d0:4f:8f:5c:ed:ae:97:2b:c5:56:4c:31:e1:f2:15:81:27:8f:
d1:36:40:3e:18:92:0f:a3:1c:f5:d3:7b:10:93:31:de:c4:8c:
2f:97:b6:8f:66:67:b1:a9:f2:66:87:22:ab:7b:e5:c0:f5:ff:
10:e0:37:06:a8:85:a4:ae:29:16:27:00:fc:79:6d:b4:09:aa:
42:5e:e4:03:24:57:ff:49:f5:d8:b7:20:c5:c0:79:02:4f:bd:
4c:f5:d6:8f:7d:39:1e:20:16:88:15:84:d1:93:f7:90:aa:c2:
cb:f0:c5:6f:8a:ce:36:a3:e9:76:ba:3c:7a:cc:48:77:5b:79:
cd:76:f8:2a:da:9d:9b:cb:3a:18:6d:1f:48:b9:8b:a6:0f:19:
67:ab:57:bc:a5:36:d2:43:44:a5:8b:4e:2d:ea:5a:ee:50:8d:
c7:9a:3e:98:a9:16:3a:0b:10:3d:ab:15:de:3e:4b:30:02:b8:
ce:b8:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:56 2026 by rpki-client