
$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json)
Hash identifier: mBZVyLERoajpqMn1qzfqHrIDnoRoiY7x9aJY4ceCjLY=
Subject key identifier: 04:40:6C:FD:76:B9:21:31:3F:57:63:54:B5:88:55:A6:CB:11:37:47
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
Manifest number: 01D7
Signing time: Fri 17 Jul 2026 04:37:48 +0000
Manifest this update: Fri 17 Jul 2026 04:37:48 +0000
Manifest next update: Fri 24 Jul 2026 04:37:48 +0000
Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: GicR2kH5Oci7hS18Up8VFDEnhXNpDYW8XhKJ/iofFWA=)
2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: ExYQsL4DX6Hi4BKxNjsrHvE6gNcBGNmimGeGw2+s/0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Validity
Not Before: Jul 17 04:37:48 2026 GMT
Not After : Jul 24 04:37:48 2026 GMT
Subject: CN=6a59b19c-a610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4f:29:77:e9:18:92:77:6f:96:f8:fa:c1:3f:
fc:58:b3:00:6f:2d:42:86:31:a7:17:36:85:e6:c5:
f4:06:0d:6b:ab:48:71:01:86:a4:f9:73:10:1b:a6:
b9:91:37:cf:31:83:7c:78:b1:da:e8:1b:94:4d:54:
47:04:5d:1a:36:df:cf:d0:05:3b:66:01:b1:ce:af:
e1:4b:73:28:b6:65:d6:34:0f:d8:9d:88:f2:f3:27:
e9:ba:41:a0:2e:d0:4d:e2:b2:8e:7e:7a:ed:36:22:
47:27:eb:8f:07:d7:01:f6:3d:88:21:71:5a:7b:4a:
96:15:e9:b5:8e:38:6b:65:7a:84:77:6c:23:0a:a6:
cf:14:63:6e:84:b3:6c:b3:5a:8c:fd:c0:0f:d6:a1:
6e:f0:ca:7c:81:d8:6e:d8:a3:6d:ce:df:60:e8:6f:
97:e3:30:69:de:a9:91:4f:55:22:9a:d7:4c:8e:80:
b7:87:90:9e:b8:36:a3:c1:37:87:2c:d4:ba:44:03:
33:49:3f:37:a7:fb:dc:ad:94:bf:76:b5:01:7d:e1:
ed:1f:d0:95:45:9a:66:fa:b0:fe:5a:7d:04:fa:67:
ee:d6:a2:86:83:af:5d:ed:7e:9e:97:0c:d3:53:1b:
9c:d7:d2:07:b4:02:a8:5b:21:4f:d1:96:8b:ef:f5:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:6C:FD:76:B9:21:31:3F:57:63:54:B5:88:55:A6:CB:11:37:47
X509v3 Authority Key Identifier:
keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:f8:6e:4e:45:35:15:4c:d2:25:39:15:0e:ff:dd:fc:08:2d:
d4:4e:0e:7a:e4:3d:0d:46:3f:b1:d1:75:fd:18:21:24:db:ee:
58:78:6d:bf:9c:73:05:58:ab:8b:ec:f1:2d:10:5a:b7:a4:6e:
40:71:13:f3:2c:e7:d8:fc:bb:19:03:3a:74:a1:f8:97:e3:40:
43:4b:82:56:85:d7:86:2b:ea:b4:ad:9f:15:3d:43:b8:42:3c:
30:8e:31:b6:52:d8:9c:69:45:55:42:42:0c:56:38:99:d9:29:
c8:43:96:9c:ff:53:a8:5b:06:b7:ad:de:b1:b4:51:81:a6:40:
d6:3e:4c:f4:60:3e:bd:f0:e6:c4:9f:2f:56:c7:c2:21:c7:bf:
ee:48:f0:6b:1a:95:41:46:9f:3c:c2:55:0d:9d:f0:13:72:73:
30:30:d0:7f:8c:03:3e:04:ce:ab:ea:a4:a0:6c:fa:3b:be:ee:
e4:0a:60:a7:d2:ec:dd:b2:00:b6:2b:d0:48:51:9d:e3:d7:7c:
31:d4:75:a2:6a:aa:fa:34:9d:6e:58:4b:98:af:d7:22:a2:08:
e6:5d:e2:44:51:f4:2f:6c:06:2d:fe:7b:35:59:9f:48:7a:76:
d2:b4:36:73:be:dd:ee:af:d4:1e:60:fa:ef:8b:c2:bb:ab:bf:
c2:fe:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:19:34 2026 by rpki-client