
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier: ORXPBcoiQp6y2GpZ79kb3kKYUH0Kfv/j3tNwdLErLCs=
Subject key identifier: 5B:5A:4D:C2:8F:35:87:01:98:A9:46:3D:F0:59:0F:83:4D:FA:97:B9
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 0523
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number: 051C
Signing time: Wed 20 May 2026 23:38:44 +0000
Manifest this update: Wed 20 May 2026 23:38:44 +0000
Manifest next update: Wed 27 May 2026 23:38:44 +0000
Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: VbFKSMkDS8riBrjm13y/kFZxI06tVl0KGnd3jZc6obg=)
2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: FCX1sDJ2lcFZeK81Yi1zKSTIFWnL4W2ESjtnUZrEFH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Validity
Not Before: May 20 23:38:44 2026 GMT
Not After : May 27 23:38:44 2026 GMT
Subject: CN=6a0e4604-a65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:ba:27:01:52:57:9c:37:a8:72:02:9f:24:
52:35:36:46:8f:9c:8c:8a:99:36:8a:e2:69:16:29:
97:d3:e8:8b:88:4e:b2:80:ea:19:85:af:17:8f:41:
2c:b9:de:b0:01:b0:06:82:a0:83:87:69:ba:83:fc:
49:ac:67:d3:6c:32:95:03:90:75:e3:e1:43:00:ac:
c5:8e:33:59:fb:c8:c1:d0:4b:b7:10:ca:74:7b:1d:
e8:14:81:99:fe:cc:f2:1b:2b:5b:53:e4:f0:cd:bb:
0c:b5:6e:ff:69:c2:2c:4a:b2:a0:19:82:72:46:34:
7c:90:84:66:9d:c0:9e:b9:ca:a7:b7:97:12:32:3c:
6e:4c:86:54:94:98:1a:08:d1:25:c7:69:f3:44:ab:
2d:9d:76:64:40:a8:37:cb:97:0b:48:a1:1f:50:56:
76:8c:87:9c:f6:95:95:71:b0:69:47:0f:62:c1:82:
ac:c1:ff:5b:26:8a:a3:f3:ee:4b:e1:9b:4b:0d:b4:
ca:6c:69:48:50:24:72:16:50:3f:0e:81:50:ef:52:
bc:a3:12:3f:9c:32:f5:3b:da:cc:bf:a5:c6:9f:3f:
c2:74:88:c0:99:22:aa:05:e9:de:52:39:fe:df:e5:
64:fd:68:3a:b6:99:e7:79:5b:39:44:42:a3:13:ca:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5A:4D:C2:8F:35:87:01:98:A9:46:3D:F0:59:0F:83:4D:FA:97:B9
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6a:73:4c:62:d9:9d:f9:c5:46:80:52:73:57:7c:60:67:39:
20:ee:82:77:20:ff:43:50:31:7f:45:93:fc:eb:aa:1f:55:dd:
3a:f6:5a:d9:4c:88:13:93:4a:23:31:76:ff:61:35:41:4f:d2:
fb:31:f3:9f:20:68:0a:51:aa:5e:be:08:fd:77:80:03:a1:d6:
b5:85:32:fa:5b:5a:fb:78:2c:88:d6:71:aa:aa:5a:93:be:7e:
4a:92:7d:ae:12:06:a7:78:bd:0e:13:c2:fa:29:00:c1:6b:36:
22:f9:9c:ed:a8:2d:36:15:14:a9:20:de:2d:75:47:37:08:11:
eb:40:2b:5c:4f:ac:ea:1f:18:81:1b:76:df:29:85:f0:af:ce:
2b:0d:af:42:4a:40:4d:80:6e:58:b7:a1:db:f2:84:c3:1d:d9:
dc:05:2c:a8:c4:83:d4:60:40:07:4e:6f:da:1a:0c:6c:4c:bf:
6b:b2:35:44:55:c1:26:53:4e:94:14:d8:f0:f2:94:56:0d:cb:
01:52:9d:dd:67:f8:27:9f:dc:7a:18:30:bd:37:a7:b3:ec:94:
08:09:33:90:9d:31:9f:80:b7:fe:3c:02:c1:51:7d:22:6d:db:
50:32:ca:af:ab:99:3d:53:9c:b4:13:c3:b9:83:49:ad:7c:48:
23:ec:a5:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG
NkExM0VGRTUwHhcNMjYwNTIwMjMzODQ0WhcNMjYwNTI3MjMzODQ0WjAYMRYwFAYD
VQQDEw02YTBlNDYwNC1hNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAur66JwFSV5w3qHICnyRSNTZGj5yMipk2iuJpFimX0+iLiE6ygOoZha8Xj0Es
ud6wAbAGgqCDh2m6g/xJrGfTbDKVA5B14+FDAKzFjjNZ+8jB0Eu3EMp0ex3oFIGZ
/szyGytbU+TwzbsMtW7/acIsSrKgGYJyRjR8kIRmncCeucqnt5cSMjxuTIZUlJga
CNElx2nzRKstnXZkQKg3y5cLSKEfUFZ2jIec9pWVcbBpRw9iwYKswf9bJoqj8+5L
4ZtLDbTKbGlIUCRyFlA/DoFQ71K8oxI/nDL1O9rMv6XGnz/CdIjAmSKqBeneUjn+
3+Vk/Wg6tpnneVs5REKjE8qPTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtaTcKP
NYcBmKlGPfBZD4NN+pe5MB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD
QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl
cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATWpzTGLZnfnFRoBSc1d8YGc5IO6CdyD/Q1Axf0WT/OuqH1XdOvZa2UyIE5NK
IzF2/2E1QU/S+zHznyBoClGqXr4I/XeAA6HWtYUy+lta+3gsiNZxqqpak75+SpJ9
rhIGp3i9DhPC+ikAwWs2Ivmc7agtNhUUqSDeLXVHNwgR60ArXE+s6h8YgRt23ymF
8K/OKw2vQkpATYBuWLeh2/KEwx3Z3AUsqMSD1GBAB05v2hoMbEy/a7I1RFXBJlNO
lBTY8PKUVg3LAVKd3Wf4J5/cehgwvTens+yUCAkzkJ0xn4C3/jwCwVF9Im3bUDLK
r6uZPVOctBPDuYNJrXxII+ylbw==
-----END CERTIFICATE-----
Generated at Thu May 21 16:11:47 2026 by rpki-client