
$ rpki-client -vvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
File: yAlz0WzMyeGME6aIAz3E0PDmHEo.mft (raw, json)
Hash identifier: /M9V2qDdKmm/t2W8ZOA5bWed1KdfXJT3HtZWjHdE03k=
Subject key identifier: D3:43:86:2F:47:96:9B:86:8B:FD:34:E3:0C:4E:21:32:32:23:1C:63
Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
Manifest number: B0
Signing time: Tue 19 May 2026 06:59:48 +0000
Manifest this update: Tue 19 May 2026 06:59:48 +0000
Manifest next update: Tue 26 May 2026 06:59:48 +0000
Files and hashes: 1: yAlz0WzMyeGME6aIAz3E0PDmHEo.crl (hash: tIsG2pObLkKGMAcuzf7uCGNvNpNuP6C2aDoX7CbfoTQ=)
2: BFEE74284D9811F0930F6465C4F9AE02.roa (hash: 40BbeTseOH9cOE/V8iDSe91ozItNcwOvKSn/Wv2JFTU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 06:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Validity
Not Before: May 19 06:59:48 2026 GMT
Not After : May 26 06:59:48 2026 GMT
Subject: CN=6a0c0a64-531c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:62:17:51:4c:b9:77:46:8e:85:a5:51:e8:
31:d9:9a:90:1e:97:ce:95:b8:19:01:19:e8:8a:e4:
c3:7f:48:51:57:cb:80:d6:8e:af:24:34:3a:c2:0a:
1a:ee:1b:90:d3:d9:4f:c9:59:01:52:a1:a6:3e:29:
04:04:0e:95:28:b0:7f:ce:ef:98:77:8e:20:ac:69:
ba:88:93:e5:54:4c:1c:f4:17:d2:1b:0c:d0:8a:51:
78:b2:a7:d5:fc:d3:41:2e:ad:ea:37:0b:ae:7b:a5:
50:53:00:93:28:5c:5f:f9:fb:68:1c:63:93:ae:a1:
5d:23:df:7d:f2:82:75:42:ec:11:c3:64:24:4a:14:
ad:62:6b:d0:0a:61:4a:b1:86:17:2d:91:2e:c6:92:
ef:79:b1:ca:35:51:5f:da:0a:a5:6c:80:54:07:b1:
c5:e9:c1:cf:2c:f3:e0:1c:19:d2:3f:51:7c:33:52:
d0:a6:6a:61:31:ea:5a:f4:18:a5:2c:d4:02:a8:8e:
77:e7:64:da:26:ce:12:07:54:f7:76:a6:32:71:07:
55:fd:02:f8:fe:06:e9:24:86:46:c4:5a:ee:c4:ad:
41:85:7b:ca:55:2c:4d:f9:8f:81:fe:fe:e5:47:85:
3f:a9:50:89:b8:32:16:2a:70:af:e8:77:a8:50:d3:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:86:2F:47:96:9B:86:8B:FD:34:E3:0C:4E:21:32:32:23:1C:63
X509v3 Authority Key Identifier:
keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:c9:c6:f0:b8:cc:04:6f:db:fd:b2:7d:fc:99:47:96:d6:b1:
e3:07:f6:6c:bf:5d:5c:bc:96:91:df:fd:6e:4a:d4:5a:12:b9:
8d:73:e2:9c:37:73:59:e5:28:19:ef:ba:26:5f:ba:30:a4:eb:
94:99:a5:5c:50:3a:46:eb:04:86:96:8f:ad:1b:5b:e1:3c:a6:
ca:7e:53:95:b5:6c:26:9c:af:59:03:c4:b9:7c:6b:71:dc:4e:
03:b5:04:2e:d3:9d:0d:0c:89:54:4b:6d:bc:3b:e5:08:8e:0a:
0e:66:19:cf:d0:26:ed:5e:65:63:6c:43:55:e1:75:36:65:a9:
88:d1:ab:0d:f9:54:13:d2:12:65:5e:4f:8b:19:65:59:cf:13:
0b:31:aa:12:8f:34:5a:71:ad:ef:54:d2:68:77:91:66:d1:cc:
c4:7e:e5:d7:3e:10:b5:ae:51:cd:5b:f9:00:49:45:c3:cc:54:
b8:d1:e7:9b:38:1a:9b:8c:0f:bc:42:5e:42:3f:3d:c7:71:ff:
26:39:bc:c8:6e:d0:6d:0c:ad:38:9c:a9:9f:8e:b7:76:3f:7f:
bd:11:14:f6:db:49:d5:e3:82:69:2b:0f:7d:3b:74:81:cc:bf:
8b:e5:33:f5:b8:8e:cc:cf:fd:df:4a:ea:0f:8c:a8:85:9a:42:
78:ac:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:09 2026 by rpki-client