
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier: 1EMbcVt1gpQ5lbIt2qnkxDuSCHNemdTxl6B841CBqEA=
Subject key identifier: D9:1C:7E:0A:FC:37:7D:D3:98:3F:94:06:40:C6:9E:EC:9E:B4:69:69
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number: 0106
Signing time: Sun 05 Apr 2026 05:50:58 +0000
Manifest this update: Sun 05 Apr 2026 05:50:57 +0000
Manifest next update: Sun 12 Apr 2026 05:50:57 +0000
Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: VvYOJfuuofDXh5qIoCDibzj7gkLs38Ozc6E1i8GG984=)
2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: yjuBkaQ9iRKgMQ7a+4P/BtzlYCvqc8B89mQbeBjPRXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Apr 5 05:50:57 2026 GMT
Not After : Apr 12 05:50:57 2026 GMT
Subject: CN=69d1f842-16df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:89:7e:7c:7f:69:d3:a9:33:f8:7d:12:29:
40:41:83:9f:03:c1:eb:fe:a9:e9:6c:1c:ae:cc:d7:
a0:46:fe:fb:44:05:6c:01:24:c2:6e:23:1d:78:c7:
65:eb:a7:1f:5a:b2:50:d8:0d:a2:8a:a3:4b:b2:91:
28:49:3e:1b:8f:70:a2:eb:5f:25:d9:d3:84:99:e3:
04:8a:47:8c:e6:b1:9f:55:39:12:23:ec:15:5e:bc:
6d:0c:06:35:1a:b9:51:88:07:b3:c8:c0:26:bc:d4:
51:21:c0:7c:79:9a:e9:06:cb:de:84:fa:fe:3d:cc:
eb:4c:fb:f5:dd:57:9b:db:76:18:8e:f1:64:9e:a6:
ef:c3:0f:b2:30:de:e4:ad:52:14:84:68:9e:c8:f8:
90:eb:91:cd:b2:00:76:00:37:49:90:d3:5f:5e:12:
ef:11:c3:5e:22:27:21:02:aa:ba:10:64:61:a0:a7:
72:d7:74:81:37:f6:4f:7f:d5:c3:c1:60:04:d6:e7:
87:92:fe:3b:7f:16:34:1b:c8:93:b5:93:21:61:a2:
b2:3f:f5:06:df:8b:3c:e7:fb:e0:5d:f1:63:c4:c6:
f1:9e:2e:5d:fc:3f:e2:48:4a:95:ad:51:be:1a:c4:
f4:00:1a:95:90:f8:2f:ba:a3:de:fd:a3:1d:70:cc:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1C:7E:0A:FC:37:7D:D3:98:3F:94:06:40:C6:9E:EC:9E:B4:69:69
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:58:04:9f:e1:a9:d2:ad:bd:63:ba:51:68:df:d5:9b:06:f9:
49:8e:44:ca:0e:dc:53:80:74:f7:12:61:00:44:6d:0a:ae:19:
31:ec:43:15:3f:41:11:09:10:a8:ee:d1:4d:1f:2d:2c:0b:21:
b3:6c:fd:c5:78:28:33:6a:f0:d8:99:1f:d4:2b:66:83:d9:02:
ef:8c:21:f6:89:30:bd:b1:86:a0:af:6f:e0:de:e6:fb:af:28:
43:1b:49:14:05:f9:4f:93:15:ba:48:47:f4:2a:21:48:6e:42:
c7:9f:28:4b:73:ba:5b:fb:11:00:7a:88:b5:39:2c:d4:67:c1:
65:ec:de:ce:f4:2a:9a:92:55:88:cc:9a:0d:58:0a:b8:c7:98:
cc:25:8c:5a:ce:3f:5b:ba:c2:78:63:62:89:0c:63:fe:be:5e:
5d:77:fd:c0:23:ae:d3:08:ad:ad:04:f7:e1:da:96:96:ff:83:
cd:e4:2e:e7:49:15:55:dc:6d:ce:b5:44:91:5c:c8:df:d2:97:
da:1b:ae:f9:ec:61:a2:92:62:89:59:85:3a:2a:57:d7:bb:27:
68:76:b0:25:07:8e:aa:7d:3c:9a:a3:fc:00:11:e1:91:7d:1e:
3a:c1:c6:8e:67:10:4e:9a:98:01:4d:af:d0:4e:5e:24:a5:1a:
3d:51:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:20:22 2026 by rpki-client