
$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File: YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier: k4odZx4aF+Mt64DutoAQdHydRUEEQub4EkPQCxuIFgQ=
Subject key identifier: 18:87:1B:25:06:CC:8A:29:CA:D2:EB:76:FA:2E:E4:A4:02:A6:6F:AF
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number: 0CA0
Signing time: Mon 22 Jun 2026 20:03:10 +0000
Manifest this update: Mon 22 Jun 2026 20:03:10 +0000
Manifest next update: Mon 29 Jun 2026 20:03:10 +0000
Files and hashes: 1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: PrkqILDWsI6CN9GxPWi9Y+VSRSZivZa2pwRMdpgl8cs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Validity
Not Before: Jun 22 20:03:10 2026 GMT
Not After : Jun 29 20:03:10 2026 GMT
Subject: CN=6a3994fe-52d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:1b:db:fe:1d:59:97:de:12:55:57:56:d5:
fd:f1:6a:2a:60:42:cd:66:5d:16:07:76:0b:40:8b:
e3:86:05:fe:03:fd:9a:46:f6:b0:31:1a:3e:78:c2:
f0:cb:41:8c:44:fa:41:d7:b8:ec:b7:0c:3f:69:5a:
c8:a3:7b:3e:68:c1:b8:f9:67:f0:21:39:5e:ce:6a:
3c:5c:81:ba:07:15:e3:2c:e8:01:28:d9:a4:e6:c1:
d0:2e:f5:62:90:fa:a2:a3:0c:26:95:46:c5:f8:20:
60:9e:f8:93:e8:57:23:5e:a7:8e:fe:e5:64:e7:a7:
47:47:38:28:1d:56:5f:27:58:2c:8e:c5:57:d4:c9:
db:0f:a8:2e:89:fd:ac:1f:8c:7a:a6:b6:cc:d5:6d:
5a:ba:6a:1e:65:52:2c:55:cc:ce:df:45:9b:b4:b6:
1c:77:12:24:e0:e7:45:18:66:ac:f7:99:59:c1:74:
9a:de:e4:c9:05:b6:2e:26:36:df:24:68:a6:3f:b2:
f9:31:e3:95:f3:64:6d:6f:8e:aa:c1:d5:8c:c8:c8:
ed:fc:66:ab:0b:8a:e1:3e:67:a4:c4:84:2f:78:ad:
62:1e:86:c6:27:58:70:01:29:63:df:ac:7d:74:b2:
7c:ef:a3:fe:96:32:f1:ad:3b:68:17:1e:42:e1:31:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:87:1B:25:06:CC:8A:29:CA:D2:EB:76:FA:2E:E4:A4:02:A6:6F:AF
X509v3 Authority Key Identifier:
keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:09:32:08:da:8e:77:7d:5e:20:e6:08:1e:6f:c7:fe:db:73:
34:4a:e7:9f:0f:52:25:7e:23:37:13:ba:bd:7b:90:91:a0:96:
b5:ab:3b:56:a9:e5:b0:ee:44:aa:32:47:89:6a:5f:07:19:e6:
0f:de:97:58:60:e6:6a:b4:ec:69:54:9e:43:c6:09:21:0f:17:
9d:e4:61:ff:fc:da:b2:19:55:60:d1:46:a5:5b:4d:82:c6:f9:
83:42:94:c3:ac:fe:50:e3:a2:72:97:14:01:d6:a5:1e:9f:0a:
38:dc:d3:fc:98:16:d9:f8:eb:83:67:c7:36:2f:02:fb:ae:85:
59:e0:a0:d2:9b:d7:21:40:15:8b:b1:db:db:f7:d3:46:cb:2c:
b9:f6:44:a6:c9:04:07:d4:f1:52:7c:b2:c1:7c:4a:f8:09:b0:
57:87:f1:85:ec:71:9a:b4:05:15:aa:7c:6e:f4:54:fd:e9:59:
c9:c3:a8:85:9b:b8:5a:24:56:73:43:17:20:3f:78:37:32:76:
fb:8b:6c:eb:ce:99:89:97:20:14:2a:4f:22:98:b2:14:6f:68:
c6:de:0d:db:64:4f:90:86:b9:74:29:cd:1e:bf:e1:b4:81:38:
d6:1c:4b:72:82:6e:f2:2b:18:d2:c4:22:ba:f9:57:a9:8f:b2:
aa:ad:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:02 2026 by rpki-client