
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json)
Hash identifier: J+VNy/ezB5bXqiSpc9PIkoGUYxYaOgxPb+aClUTVgP4=
Subject key identifier: AA:15:5D:AE:8A:CB:61:DF:59:C3:34:1A:4E:6F:8D:EA:14:DC:DE:E9
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 0368
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
Manifest number: 033D
Signing time: Tue 09 Jun 2026 01:14:56 +0000
Manifest this update: Tue 09 Jun 2026 01:14:55 +0000
Manifest next update: Tue 16 Jun 2026 01:14:55 +0000
Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: AUpkdM9J9Obfka/KAVyh/2Qi9Cn0dlsmICHl25j/qtk=)
2: 69046BD0ECFE11F0B05C9076386F56BC.roa (hash: YCe2AE1AYEPbcU1s9LwUlVk97WjIwXee65C9XOQSVi0=)
3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: UazZSGRsaobkFh+uwdDtJ065Ep6bEbys8yH2m9dsJpw=)
4: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: U6gY9KKT7NSCpx8jpV/iJKW5bvGforRTQeZvJLFkBWs=)
5: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: PPilQKcKXmCzfDra94ptz+UOBe/ruKL5vBBrgys75yQ=)
6: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ayI2v9zEaoadhkrRa+ZcLsyQwGLPommiSdSXuXbqNDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 01:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872 (0x368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Jun 9 01:14:55 2026 GMT
Not After : Jun 16 01:14:55 2026 GMT
Subject: CN=6a276910-9044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:43:58:c0:63:85:ec:8d:9a:88:b5:85:22:
85:2b:c8:0c:d4:b7:38:5c:47:c6:b9:7a:93:53:d9:
22:47:d6:a6:48:a9:88:f9:be:95:fb:b8:50:7a:47:
2c:d8:c8:76:d6:12:df:b2:54:5b:f5:36:3f:aa:e3:
d9:bf:88:85:8a:68:3b:f2:b2:b9:84:80:37:fa:31:
69:c8:4e:e3:b6:c6:dd:10:9e:43:73:ac:3f:47:0d:
1d:e6:ac:d6:8f:47:7a:f3:1b:81:2d:cc:29:59:47:
b9:a8:a2:50:57:80:a8:05:c8:60:7a:bd:99:b8:f2:
0e:35:a1:0c:f0:cc:4a:40:8d:aa:ff:be:ee:ae:5c:
ad:39:31:b0:60:36:07:34:8b:8c:20:02:78:71:03:
65:15:9c:87:5d:4a:af:e6:c5:1b:3b:7b:5d:e6:cb:
e4:a0:7d:83:83:0c:b7:e7:13:e1:0d:26:cf:62:e7:
e0:0a:a1:cb:78:cc:d7:3a:8d:ea:d4:67:37:a0:7e:
2d:75:c3:45:43:7c:93:31:e6:b4:4f:7a:2a:bb:17:
cf:ce:e8:e6:47:18:4d:8e:5d:1a:cf:b6:47:5e:00:
06:56:f9:0f:1c:ae:d0:f6:a1:d3:a8:cb:e6:5a:b1:
ce:7d:df:3b:ea:eb:dd:d5:60:e4:e0:56:a4:c1:e7:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:15:5D:AE:8A:CB:61:DF:59:C3:34:1A:4E:6F:8D:EA:14:DC:DE:E9
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ea:04:2e:7a:3f:c0:4a:e4:56:dc:95:87:9c:67:e9:bf:62:
ab:dc:0a:4d:c4:f9:f5:4e:14:87:fd:3d:d6:0f:ed:4d:2c:37:
33:26:21:81:4f:a7:0c:4f:54:73:fa:73:05:75:4c:68:e9:bd:
c8:8e:a1:5c:1e:f3:ff:30:80:05:76:86:34:55:b0:f8:bc:96:
93:6d:cd:64:a2:d1:eb:dd:74:0d:04:86:7d:c6:e6:57:ea:20:
bc:ff:90:a5:28:20:d5:2c:bc:c3:d8:3a:44:84:a1:13:0a:8e:
03:69:a1:fc:c0:0e:2d:64:57:b6:82:73:f9:3e:cd:95:ab:b3:
9b:92:c4:b6:a6:5a:49:b0:2c:04:46:34:d3:d9:b9:ba:93:56:
fd:44:01:73:17:f9:7f:56:df:d7:96:09:8d:8b:f8:ba:4b:fa:
a5:93:06:2e:18:51:fc:78:bb:a6:b4:74:66:1e:fd:5c:bc:e9:
ed:c4:11:7b:1e:32:05:cf:24:83:f0:25:73:bd:6a:e1:6b:01:
c4:9d:6e:e9:ee:20:54:a1:f8:9b:46:d6:35:f8:18:2c:a5:6f:
cf:23:ef:4c:60:f3:93:ab:4d:1c:ec:b6:80:aa:5b:dc:3e:9c:
65:8b:fc:f4:4f:23:5a:54:3e:5d:2c:bc:4c:a5:f7:ba:c1:f0:
07:5a:54:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 09:23:42 2026 by rpki-client