
$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json)
Hash identifier: 1AtTfGx105M6ndIbRVnlbFI+fVh4I/GpVWjVQ+H0b0M=
Subject key identifier: 7B:90:DE:92:D6:C0:30:2C:63:CA:70:D2:EC:42:6C:E0:43:92:63:60
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
Manifest number: 01E4
Signing time: Thu 21 May 2026 03:29:44 +0000
Manifest this update: Thu 21 May 2026 03:29:44 +0000
Manifest next update: Thu 28 May 2026 03:29:44 +0000
Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: k+EIw3AfLwU4PP+mK7squlbe7dB0XldCOQj2nUlnTwA=)
2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: g62n6MuaUWV6TMBxgw6JfizdoiYQ10/TclDcRrurcgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Validity
Not Before: May 21 03:29:44 2026 GMT
Not After : May 28 03:29:44 2026 GMT
Subject: CN=6a0e7c28-3f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:e8:84:85:b5:b7:83:9d:3b:f0:9d:4a:49:
5e:89:b8:d5:d5:09:9e:e9:ac:37:54:b4:5c:63:c8:
89:7e:63:f2:a0:d8:fb:7a:e6:76:16:11:9f:f3:94:
5f:41:95:08:23:2e:f0:83:85:f5:d7:89:be:90:77:
fd:7c:af:7f:82:f4:36:71:82:79:6c:e5:a0:dc:ab:
4e:35:54:6e:18:c2:9d:a7:83:7d:4c:8b:2f:0f:f2:
81:fe:11:f3:3e:62:8f:dd:ec:3e:6d:9a:65:82:93:
48:7e:0a:4e:b6:a0:5b:0d:5f:e0:96:81:50:d0:d6:
4a:f1:96:9e:60:02:c1:1e:cb:30:10:7a:da:34:43:
0e:09:06:3c:56:74:be:1b:c0:bd:e0:6d:69:69:38:
af:3c:22:0e:72:e3:16:74:fc:c6:5b:33:49:cb:16:
f9:6d:cc:4c:d8:6f:f6:c4:1e:d2:33:bf:36:fa:96:
a6:ce:47:a8:15:c2:13:3a:57:56:0c:74:38:91:30:
cf:55:52:49:e9:79:20:f4:86:f7:28:23:9f:da:c9:
e3:59:27:01:53:2a:04:f1:61:de:6b:26:d4:4b:98:
18:a7:02:0b:75:f5:7b:f4:b1:19:18:72:ad:8a:c5:
86:6b:13:8c:b2:f5:f6:57:19:cc:7f:0c:a8:6d:a7:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:90:DE:92:D6:C0:30:2C:63:CA:70:D2:EC:42:6C:E0:43:92:63:60
X509v3 Authority Key Identifier:
keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9e:08:dc:8a:dd:49:13:fa:c9:2c:86:18:ec:03:a7:64:c3:
8f:b8:78:51:5c:d3:c6:01:59:f8:49:42:76:e2:69:ab:7c:51:
a9:d6:1a:15:6e:8b:cd:d9:71:da:f0:04:5d:4d:a4:cb:ba:b0:
d0:f1:24:0d:24:e1:53:6c:f0:6d:d1:b7:11:a7:93:bf:c5:70:
0f:95:30:7e:04:71:79:cf:f2:45:70:97:41:3a:21:65:2f:c3:
2c:8b:8f:63:9a:4c:eb:bf:87:e2:82:0b:4f:09:14:7e:c8:c0:
ec:16:2e:79:7e:43:53:ad:bf:d4:32:f2:81:2f:90:84:bd:2d:
85:1b:7a:c0:67:e2:cd:6c:38:2f:64:f6:f4:83:76:13:8d:ad:
d5:56:06:48:1e:d5:8e:81:c7:56:cd:23:df:67:0a:bf:88:ea:
47:15:db:b0:aa:89:25:d8:e2:e6:ab:b8:e9:43:a9:98:7b:f1:
5e:b3:13:1c:7e:83:8e:ce:c8:25:15:3f:7d:bb:61:00:94:44:
86:c2:99:61:f4:96:c7:32:f0:20:ee:3d:e8:69:27:79:ed:01:
8c:bd:3c:55:28:79:fa:ed:66:52:eb:8c:92:e0:e8:c3:bb:54:
fc:74:fa:06:02:00:9c:2d:a2:a9:d0:75:3c:6e:b8:c4:d2:41:
8f:42:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:58:47 2026 by rpki-client