
$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File: YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier: +rjnUD3HUndOS+Q+5Nd/Fuyys4P9HLXTJ9jxoAB9ORU=
Subject key identifier: F3:7A:3F:F9:98:BA:8B:A8:E8:45:F8:7B:FB:22:8C:F4:36:3F:62:59
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number: 0CF7
Signing time: Tue 18 Aug 2026 20:16:46 +0000
Manifest this update: Tue 18 Aug 2026 20:16:46 +0000
Manifest next update: Tue 25 Aug 2026 20:16:46 +0000
Files and hashes: 1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: KXtcS5ZC/2XJjBt140L7brcy/8eeamkDOqsUY0FZMVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Validity
Not Before: Aug 18 20:16:46 2026 GMT
Not After : Aug 25 20:16:46 2026 GMT
Subject: CN=6a84bdae-3d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:9d:61:94:68:84:c7:f8:8f:4d:b8:30:0f:
c5:a4:4d:a2:c8:b5:3f:f2:d7:1c:24:9c:fb:50:96:
db:f7:5f:10:cf:ff:8e:0f:0f:cd:a9:ed:ff:78:85:
5f:86:ab:c3:a1:0b:57:d3:8e:78:41:27:cd:ad:ab:
db:6e:ea:52:16:34:e5:eb:58:f2:ab:74:d1:d2:35:
bb:05:da:d9:a8:9e:b3:75:73:95:a7:ed:e5:05:d2:
0d:bf:af:2d:81:ed:17:14:40:f8:7a:de:11:c0:8d:
2b:b4:05:8e:32:89:cf:8c:73:84:1b:58:09:0c:c7:
85:e8:6d:36:50:d3:44:bc:6c:6f:91:cf:9f:90:98:
36:a1:88:ff:2a:3a:59:0f:f2:49:41:e3:a6:2a:09:
83:70:30:b0:f0:6e:aa:27:a0:f2:62:71:8f:8b:30:
a2:80:09:53:b1:5e:e0:c7:7a:f7:f0:ff:d0:c6:4e:
e6:f1:93:20:57:9a:d8:72:d3:dd:96:13:7b:3e:64:
04:67:5b:ed:95:ac:27:4a:3e:f8:bb:c6:37:1e:3f:
05:7e:44:b3:a8:e7:23:1c:bb:93:bb:65:f8:f4:d1:
02:0a:24:10:e2:44:e6:08:0e:a2:c9:30:74:d8:ab:
ac:28:15:4c:9a:d8:a8:92:0c:f6:16:5a:88:9a:ed:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7A:3F:F9:98:BA:8B:A8:E8:45:F8:7B:FB:22:8C:F4:36:3F:62:59
X509v3 Authority Key Identifier:
keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:5b:8b:34:c8:36:c6:ff:79:a7:17:47:6a:23:1d:a2:e2:ca:
32:84:f7:67:49:47:5d:fe:ba:c1:eb:1c:6f:18:64:de:55:73:
b7:87:84:12:18:24:01:2a:a5:d1:42:4f:a5:15:40:40:d6:6e:
f0:49:6d:0c:9a:bf:31:99:22:ae:f9:06:cb:0e:83:48:ff:6e:
7b:f6:a4:8e:cf:ac:2a:0b:a4:31:4a:14:4d:8c:62:a6:c4:50:
b2:4f:48:84:8c:5f:2d:97:c8:23:01:f8:3d:b1:10:99:6a:37:
9e:b8:1d:44:fc:3a:4f:56:3e:fb:79:5e:36:b1:d8:d4:7f:5a:
86:34:a6:0d:31:a7:a8:f4:a5:b8:bb:f0:bd:1b:ca:59:08:fc:
74:49:89:0f:47:c8:27:74:43:7c:dc:e1:8c:1b:a1:7f:c9:eb:
6b:d5:f0:48:5f:95:af:3d:37:a4:1e:77:26:5c:ff:91:06:b1:
96:e7:01:b9:f7:c2:c2:7f:25:b5:3e:c6:45:c2:10:75:2f:29:
9f:ea:2c:b7:90:3f:81:64:c1:da:55:96:6b:60:3a:aa:64:13:
87:7e:48:e1:48:d0:83:7f:8e:14:7b:84:d9:93:97:85:3b:b9:
bd:e4:e3:67:e6:18:33:3a:f6:6e:d7:20:1d:ac:92:7c:14:9d:
4e:2d:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:14 2026 by rpki-client