
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json)
Hash identifier: 8EEzdRMCOqZZvnriuJvtvJGmhtbjCPEFvhLvppq1bAc=
Subject key identifier: D3:1E:49:32:78:2C:F9:2E:F7:0B:11:F9:57:F9:97:E4:64:CF:53:4A
Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
Manifest number: D1
Signing time: Sun 01 Mar 2026 07:56:09 +0000
Manifest this update: Sun 01 Mar 2026 07:56:08 +0000
Manifest next update: Sun 08 Mar 2026 07:56:08 +0000
Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: ApJ6gXoozsmdq5M+1OFXHE7TwWKaaOlvS7TshgITwLM=)
2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: eYKV4envgCgs3WvH6pBo9YBy1q8A8VpKoNaaI9QRSww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Validity
Not Before: Mar 1 07:56:08 2026 GMT
Not After : Mar 8 07:56:08 2026 GMT
Subject: CN=69a3f118-f0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:07:8b:7f:9a:d2:c2:fa:5d:11:3b:e1:5a:24:
a0:10:94:2a:e4:f5:9f:6d:f2:71:b8:e4:77:55:a4:
5c:b1:66:73:7c:ac:79:a0:83:30:e5:53:34:f8:ec:
a9:29:9b:de:58:1a:04:98:98:ec:f0:fa:bb:d6:08:
00:08:fc:ac:80:03:7e:59:23:9e:3e:ac:60:3a:d3:
7b:32:ad:47:8c:46:96:c2:90:56:11:24:95:fd:64:
54:aa:03:0a:c9:ac:63:75:e5:48:f3:8c:83:1c:b8:
92:40:72:63:ab:f3:bc:93:e2:c1:ff:31:6f:8e:2c:
e7:12:52:b9:3a:73:c0:13:d5:56:68:75:3e:67:a2:
67:73:05:cc:eb:92:0b:78:49:73:50:fe:77:5f:37:
4c:6c:f2:7e:f4:ea:f0:b0:fa:ad:64:df:d2:db:d6:
02:f2:1b:96:d7:83:ca:a0:33:10:e9:15:4d:ff:12:
ac:3b:f2:e0:2f:74:84:d2:61:4a:2e:47:04:c7:98:
29:9f:9f:6f:c6:d7:b7:e5:06:51:26:94:34:0b:66:
81:6b:5e:52:bf:14:cb:0c:fc:99:c0:94:f3:88:4c:
58:71:9e:67:41:6b:c1:ca:90:a9:93:47:c2:5a:14:
b2:58:0d:e4:b3:81:1c:3e:98:13:06:20:c3:30:35:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1E:49:32:78:2C:F9:2E:F7:0B:11:F9:57:F9:97:E4:64:CF:53:4A
X509v3 Authority Key Identifier:
keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:4a:54:b1:89:13:38:c2:75:40:a9:78:0d:73:a4:99:3f:a7:
21:3d:2c:0e:b9:55:6e:c2:53:3e:45:40:f0:69:46:53:4a:68:
d7:09:99:5d:58:f0:69:03:7c:80:c8:8b:9c:45:f3:7b:88:dd:
11:03:ee:c1:3d:84:18:69:7a:5a:8a:56:08:ae:da:23:2f:36:
dc:01:73:35:d6:35:fe:3b:86:a5:60:b2:3c:cd:27:fd:e7:dc:
23:a5:ab:ee:0b:d2:06:7b:28:a3:15:03:d8:b2:50:27:f3:5c:
55:9a:a4:2e:2a:0c:aa:ea:02:7d:46:82:d4:4c:42:ca:b6:25:
03:81:30:75:74:1e:e9:45:ad:e4:d4:53:df:98:e2:f6:fb:a2:
bd:73:02:fb:a3:fc:09:c0:be:a2:0f:65:e3:55:6d:fe:13:f7:
6d:14:4a:18:04:c1:55:8d:17:b3:f2:16:dc:32:cb:8c:ff:52:
45:55:a9:6e:93:1d:0b:a1:e7:5d:3b:b7:2b:23:38:bd:cb:29:
89:13:4b:8b:b3:f1:ce:7a:d6:a1:2c:49:32:56:07:ed:8f:46:
4e:57:d0:ad:c2:e1:38:29:36:7b:60:a4:92:68:d8:91:d9:16:
42:d3:78:3a:ff:80:0c:3b:f0:38:f5:36:06:95:ea:c8:48:ef:
93:b0:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:47 2026 by rpki-client