
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json)
Hash identifier: UVgkwkPa0L8EB9lwpRlfgCzpxtpQWVKSaHC3whF1srw=
Subject key identifier: 38:66:EC:F8:0F:62:46:75:DA:3D:A4:76:4F:0A:08:9C:06:53:28:99
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial: 0775
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
Manifest number: 20DA
Signing time: Mon 22 Jun 2026 16:00:30 +0000
Manifest this update: Mon 22 Jun 2026 16:00:30 +0000
Manifest next update: Mon 29 Jun 2026 16:00:30 +0000
Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: 0TkH9KPvFtmg5bYdzIYh7eclrK3wH3QlzULJWNdQqXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909 (0x775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Validity
Not Before: Jun 22 16:00:30 2026 GMT
Not After : Jun 29 16:00:30 2026 GMT
Subject: CN=6a395c1e-d4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:92:ee:51:96:72:92:2a:3d:35:0b:7f:be:
d5:c3:95:72:ca:eb:68:5a:3a:33:35:8c:29:34:75:
15:2a:76:b7:96:05:77:78:2d:c8:06:2c:8f:eb:e3:
f2:03:fd:ff:fa:d7:85:02:13:2a:b5:35:eb:15:0c:
b3:2e:a9:3b:b8:a8:7f:37:b7:83:fe:b6:22:59:44:
f4:b1:bf:4a:ba:7e:bb:12:00:5c:55:08:0f:a7:6c:
7f:64:38:e8:e3:31:02:48:dc:11:c6:36:03:75:61:
63:85:20:fa:5d:0f:dd:90:63:8b:7b:db:68:c7:88:
84:1a:25:91:e2:78:01:ad:b6:51:92:a7:85:bb:08:
dd:95:1d:a9:35:7b:66:4a:c8:2f:b8:81:3e:6f:1f:
f6:74:5e:13:34:5f:44:d4:9c:01:c7:3d:a4:88:99:
02:6b:fa:19:55:f9:8c:11:c6:0d:76:e2:9c:4c:a6:
f6:14:88:85:29:9d:1b:91:4a:78:c5:32:c9:67:6e:
54:be:cc:87:12:86:a7:63:ae:dd:66:59:ee:8a:c7:
55:ad:91:a8:13:c4:63:4a:ac:11:39:32:10:f9:bc:
3f:09:6a:ca:48:69:d1:80:3b:12:1d:07:0a:86:15:
ce:a7:3e:97:c8:f9:73:ab:c0:b4:e9:d6:65:20:59:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:EC:F8:0F:62:46:75:DA:3D:A4:76:4F:0A:08:9C:06:53:28:99
X509v3 Authority Key Identifier:
keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c7:42:6c:34:29:2f:bf:a0:eb:ab:de:df:5a:cc:26:81:d6:
8d:50:73:cb:07:5c:54:79:e9:b7:be:8a:d2:4a:b6:0e:13:10:
be:d2:24:5e:4d:b7:c7:ab:4c:56:14:3a:a1:24:ba:a7:e4:99:
ff:91:f7:de:c8:47:da:ac:2b:23:f5:53:8b:9c:42:89:1b:6c:
07:15:77:9e:81:df:25:35:12:ba:bc:6e:9a:55:e4:29:ed:09:
5a:9a:fe:24:51:bd:17:cc:e3:ca:44:02:b4:35:4e:74:bb:36:
f5:23:c2:ba:7a:4b:b9:6e:7d:9f:1f:a3:bc:00:e2:89:51:1f:
e3:5b:29:ca:de:5d:26:50:89:b3:d4:14:5f:b6:c5:ab:95:67:
c4:82:9c:2b:34:3d:0e:24:62:3d:cb:da:52:24:9b:bb:0e:15:
e2:01:0f:b3:1f:d2:3e:6f:3f:cb:90:1c:5a:f3:c9:b5:0e:e6:
7c:c8:c5:59:ce:34:e4:4f:6d:0a:03:83:1f:0a:a3:8a:a0:24:
dd:a4:e6:57:96:a3:c8:ee:49:75:92:17:d6:43:75:39:70:0b:
6d:11:03:6c:59:90:a3:87:02:9b:24:46:e0:02:bb:48:3f:2e:
74:ed:de:b9:9b:14:9f:b0:a8:f1:5e:ed:4b:28:25:ba:4b:c8:
58:56:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:38 2026 by rpki-client