
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json)
Hash identifier: F9QhmO0Udxh7X4LUqVOwjstOSH+239r+ofn8gfbaEn0=
Subject key identifier: 44:72:0C:6A:CB:A8:D3:C7:4C:0C:5F:65:90:E9:24:4B:4F:E6:09:EF
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
Manifest number: 02A2
Signing time: Tue 21 Jul 2026 02:41:31 +0000
Manifest this update: Tue 21 Jul 2026 02:41:30 +0000
Manifest next update: Tue 28 Jul 2026 02:41:30 +0000
Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: fHxDjXPtVkj85M+sjAC/swEp3ALCFkJi/5NSx9DLOMc=)
2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: R3KADOtwsyG/v2+mGTP92tv9io+mPYskKwwNor02wSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Validity
Not Before: Jul 21 02:41:30 2026 GMT
Not After : Jul 28 02:41:30 2026 GMT
Subject: CN=6a5edc5b-e5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:d1:15:49:1d:f1:75:3e:2f:a1:d4:9d:23:
7d:cf:42:9c:2a:a3:d6:6a:a0:cf:49:48:96:cd:24:
d2:9a:09:8d:9c:91:81:4e:1f:7c:b5:ea:74:f6:1d:
7a:9a:37:ae:f3:51:0a:55:31:38:b3:8e:da:8a:ae:
7f:0a:57:1b:1b:77:ec:e5:f6:37:09:3c:b8:aa:b6:
fe:37:68:ae:60:cc:be:fa:59:0d:d6:ee:02:a1:30:
66:43:ff:14:ec:32:4c:00:98:7d:f9:95:f2:d8:ec:
96:74:62:4c:9e:b2:a2:f1:ad:04:53:01:1d:a0:ca:
59:3d:85:d3:7d:d5:8b:fe:87:a4:a0:21:fe:01:c9:
f1:be:c0:c9:d7:a9:e9:af:cd:e8:ab:51:be:fe:d4:
97:29:71:da:dc:6d:04:d4:2e:15:be:b2:5f:76:db:
92:39:b3:2e:3e:d8:a2:06:9d:44:1d:7b:1b:10:e1:
d4:d7:9c:2b:2c:9c:33:de:de:7a:1d:df:54:54:c3:
0d:bc:1a:5b:f5:df:ad:ee:b5:c4:7f:c9:4b:38:2c:
5f:c4:c9:24:3e:51:02:3a:2d:dc:5f:02:3f:99:45:
ad:cd:fa:f9:27:f4:51:15:e9:4f:0f:de:25:98:eb:
cb:3f:ac:79:49:a8:62:32:bc:43:5a:a6:fc:5d:a1:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:0C:6A:CB:A8:D3:C7:4C:0C:5F:65:90:E9:24:4B:4F:E6:09:EF
X509v3 Authority Key Identifier:
keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:75:6c:75:7a:13:2e:7e:86:5a:3f:92:c4:12:0c:d2:c4:fd:
2f:a9:67:49:f4:ba:82:37:56:5a:fc:eb:d5:cc:62:69:34:0a:
51:5d:2a:01:19:9f:ac:c9:a9:4b:61:37:98:7e:4e:5b:cc:1b:
76:68:81:ff:61:45:50:18:46:13:5a:06:5d:6f:23:fb:69:50:
bd:b7:85:45:bb:c7:54:51:b6:cb:35:c1:01:a7:23:32:f3:47:
4d:de:7f:ef:8f:de:ee:72:c8:fc:cd:91:09:8c:25:d5:4e:0f:
2f:62:21:9d:e2:5d:74:b0:b6:8c:2a:ad:ec:c1:b7:7d:03:9f:
63:26:d6:b4:34:cb:3c:ca:cc:c3:ba:70:f0:2f:02:89:0c:b6:
70:6b:ff:4d:8b:f9:ed:50:31:cb:08:1c:1f:32:09:58:0b:03:
94:cd:3d:91:47:48:62:dc:64:ee:f9:eb:67:0d:37:04:2a:bb:
b8:bc:52:79:2b:59:e5:3c:b8:93:51:bf:46:5a:71:64:74:cc:
60:66:1c:6d:db:f6:9a:4a:a8:70:32:93:05:d7:b9:16:2c:58:
d9:69:25:37:09:50:53:15:76:73:87:88:82:55:6c:83:1f:a8:
00:50:85:51:62:e6:2f:75:9d:ba:d0:f4:c6:0f:72:46:76:a8:
ec:d1:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:02:39 2026 by rpki-client