
$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
File: Y06sGbStSypNQSgRX59VZ5TMdSM.mft (raw, json)
Hash identifier: ku4KhGROhVlTV4zo2k8yRAP7sATJAXa44Xp7P7rnvPM=
Subject key identifier: 58:5B:E0:C5:2A:BF:0B:58:56:C5:FB:73:2B:63:50:D2:4A:1D:34:57
Authority key identifier: 63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23
Certificate issuer: /CN=A91647ED/serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
Manifest number: 45
Signing time: Sun 05 Apr 2026 07:43:51 +0000
Manifest this update: Sun 05 Apr 2026 07:43:50 +0000
Manifest next update: Sun 12 Apr 2026 07:43:50 +0000
Files and hashes: 1: Y06sGbStSypNQSgRX59VZ5TMdSM.crl (hash: v4+5ivdI/udcsPr70b22IO7Tp8efaTkvk0tUHBx+dF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl
rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91647ED, serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
Validity
Not Before: Apr 5 07:43:50 2026 GMT
Not After : Apr 12 07:43:50 2026 GMT
Subject: CN=69d212b7-2549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:59:45:47:c4:29:09:cb:36:af:2b:68:b7:c2:
32:d0:da:69:cb:49:a1:aa:06:fe:6c:a9:fc:23:4a:
20:69:f3:4a:18:de:f9:03:ce:4d:fe:57:d4:e3:53:
5f:ae:aa:17:a6:f4:90:d0:50:78:cc:ad:2f:0d:3e:
26:b9:94:7b:42:5b:02:da:57:b3:01:23:e1:21:29:
d8:90:06:a0:f6:f6:31:cd:c0:ce:df:08:85:fa:4e:
c6:65:e0:a8:49:46:eb:c9:d7:40:85:32:9a:c4:d6:
45:e3:06:5d:2d:a0:d2:76:34:a6:38:6e:65:e9:6b:
f6:bf:f7:73:53:9f:0b:66:d8:6e:f4:6f:10:67:3a:
63:60:da:ad:fb:b8:5e:39:58:69:4f:45:fd:1b:b5:
2b:a1:66:0e:d3:58:d5:7f:25:8e:d6:67:2f:05:47:
59:3e:f4:d7:85:96:0a:78:03:93:ff:d4:94:47:a9:
2d:5f:c6:53:f2:89:24:a4:89:9d:d3:55:a1:52:94:
2c:26:0c:25:39:e4:91:b4:79:b0:a6:d2:d0:50:35:
62:64:0c:5f:d3:eb:cf:1a:79:89:1b:83:6d:c2:55:
9f:ee:12:b6:e0:74:fe:c8:4e:40:27:25:f1:63:86:
88:29:ca:72:d7:b2:81:c6:de:70:0b:96:71:7d:a3:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5B:E0:C5:2A:BF:0B:58:56:C5:FB:73:2B:63:50:D2:4A:1D:34:57
X509v3 Authority Key Identifier:
keyid:63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:c7:5d:78:d2:56:da:01:73:32:79:d1:7f:c6:eb:28:90:
97:79:d8:f2:f8:81:54:72:a7:e3:80:e7:67:9c:49:a3:13:2e:
1c:68:68:2e:8d:d7:fb:3f:98:ce:5a:dd:06:f3:c9:2c:b7:95:
f7:90:76:cc:d5:49:d9:55:51:42:14:27:89:98:43:d1:7e:45:
d6:b7:f4:36:b1:52:96:68:85:e0:95:ce:64:cf:c8:99:43:5a:
39:ce:3d:24:13:0d:2b:ca:41:b8:ba:e4:3a:11:c6:94:e8:48:
10:b5:33:d3:65:8d:95:2a:b9:d4:03:2c:e3:64:f8:32:96:fa:
d9:c4:f3:af:4c:c1:44:4e:a6:8e:79:e2:a1:a4:76:b7:b7:48:
06:b7:51:58:b1:57:0b:63:ee:ba:ee:4e:59:4e:6c:26:0d:df:
ca:f7:09:9d:39:9f:ad:d5:4b:e5:84:58:03:6d:9e:04:c0:3f:
2b:4d:06:dd:d2:41:09:73:29:da:a8:9b:2a:b2:11:cf:bd:7a:
7c:54:97:08:e6:24:08:75:e4:1c:94:8a:f4:72:e8:9a:f2:ac:
8c:e3:d2:fc:53:67:24:99:04:fa:2a:b1:1b:ca:d0:fe:f0:9e:
d0:da:34:2e:a0:f5:59:ef:aa:f8:f6:25:c4:c9:07:90:f5:72:
c6:14:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:24 2026 by rpki-client