
$ rpki-client -vvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
File: YGtPQu6X90iOwgtj2LGq9tQtnKc.mft (raw, json)
Hash identifier: 6a267UiDxXXrFI1oHYwCFaGmNYisNxul77kd8KkDgYI=
Subject key identifier: 59:65:D9:70:B4:9B:48:45:20:31:49:72:78:80:07:68:43:39:6B:9E
Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
Certificate issuer: /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
Manifest number: 6F
Signing time: Sun 05 Apr 2026 07:11:38 +0000
Manifest this update: Sun 05 Apr 2026 07:11:38 +0000
Manifest next update: Sun 12 Apr 2026 07:11:38 +0000
Files and hashes: 1: YGtPQu6X90iOwgtj2LGq9tQtnKc.crl (hash: tYomuW+p06a3a7McuHVTZJp5do2P+cwxG/id+kXw8zU=)
2: 720ED6F487CB11F0B605C67DC4F9AE02.roa (hash: DkL8mKFGzHdVRylK1rD4tLxN/q/oxjuNdQSmCvoiiL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Validity
Not Before: Apr 5 07:11:38 2026 GMT
Not After : Apr 12 07:11:38 2026 GMT
Subject: CN=69d20b2a-3f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6e:0b:67:48:7a:09:b4:1f:09:da:99:ef:15:
d4:cc:ac:f1:3d:b3:95:ba:60:06:67:00:c5:66:5f:
4d:5d:8c:8a:9b:7f:e8:06:37:ba:60:20:36:d4:71:
81:03:5b:5f:e1:d9:51:0b:7b:57:1b:97:66:fe:01:
fa:5b:c7:0a:12:87:a3:e6:b2:6f:4d:4d:d1:a1:e3:
b3:6d:f1:fa:f1:62:42:fd:dc:e9:d0:b4:e5:4c:41:
a5:e1:c5:12:28:ff:04:a6:6d:d2:5f:f8:31:0f:35:
8d:b1:f6:7b:fe:54:d3:f5:4e:47:8e:48:ba:3e:23:
1e:f8:ae:f3:62:e1:c0:0d:34:4e:a4:72:ea:1d:da:
87:82:8c:da:df:a6:d8:d7:e8:d0:a7:ee:10:b2:31:
a3:bf:d4:91:29:0c:70:8b:81:21:99:db:0a:cd:47:
fb:26:aa:86:51:f0:a9:12:13:a8:3f:a5:17:3f:7a:
1c:46:25:25:83:50:51:df:f8:dd:4c:16:18:96:1e:
f8:27:34:e4:3e:c6:79:62:d6:89:86:12:2e:cf:84:
6c:62:de:61:d3:8c:ff:07:b9:6d:67:61:bf:72:64:
07:f4:8f:ce:55:68:98:8f:7a:1f:4a:68:28:6c:5d:
c6:1d:5d:6b:bf:f0:57:f1:76:59:3f:b1:9e:4e:07:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:D9:70:B4:9B:48:45:20:31:49:72:78:80:07:68:43:39:6B:9E
X509v3 Authority Key Identifier:
keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:26:4c:5b:75:77:af:ba:7b:ab:b7:62:b5:ba:61:f4:cb:d4:
f1:fa:e9:9b:4d:49:57:0f:e4:ad:17:6c:29:bb:52:6b:70:cd:
b1:20:b7:72:cf:a6:df:11:b8:0f:25:fe:84:85:05:ed:c8:75:
4f:72:88:c9:6a:8e:d8:45:f3:aa:21:eb:58:20:2b:69:92:40:
02:61:1b:3b:47:0e:49:a7:a1:0e:80:b9:2e:be:33:cc:7f:8a:
65:58:f3:a4:85:62:29:f3:db:00:74:9f:9e:8f:f8:09:a6:44:
5b:0c:5f:8d:c2:2f:0d:60:ec:05:f7:0e:ec:58:e8:53:5a:40:
c1:37:d7:37:e9:85:d2:25:9d:40:b7:0b:76:74:5b:b1:c6:98:
e9:a7:89:9a:26:9d:20:ff:ea:82:b4:47:e1:d4:ff:fe:bd:16:
80:f7:ea:27:a9:8a:da:b6:4b:f3:e4:bf:ac:44:7c:d6:51:ef:
71:ec:1a:fa:44:31:ee:d7:30:70:5b:59:3d:17:5e:14:81:a4:
07:0f:f0:b4:46:1c:e6:aa:ac:d9:95:fd:69:4c:e5:a3:7f:0d:
41:87:ea:92:a0:14:bb:d1:04:36:2d:db:1c:7b:09:04:a8:3b:
48:a6:6d:86:d0:eb:3b:69:39:d8:46:4d:d0:c8:68:30:94:c7:
24:c0:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:47 2026 by rpki-client