
$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier: qH+7lpCL8GCtYruRzrDfgQNIL0IE4Doqqc5YpIJm0Es=
Subject key identifier: 37:27:CE:08:42:2F:50:FD:A0:1B:25:DB:7E:FB:E2:64:F2:32:EA:14
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number: 016E
Signing time: Mon 01 Jun 2026 05:28:46 +0000
Manifest this update: Mon 01 Jun 2026 05:28:45 +0000
Manifest next update: Mon 08 Jun 2026 05:28:45 +0000
Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: ARrRVtbFvcLhyPOt0gyLjcw+RAppTQm1+tQCvyC+M/4=)
2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: SKhqrlepkMrk6BddxM6G2PMvfO6t8Ob/zKNcmmPpDSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Validity
Not Before: Jun 1 05:28:45 2026 GMT
Not After : Jun 8 05:28:45 2026 GMT
Subject: CN=6a1d188d-f6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:65:86:6e:bf:da:3f:4d:e2:f7:ce:d6:d9:
b9:1c:fd:08:14:7a:9e:df:a8:8b:5c:6d:61:22:60:
cb:a0:5f:f4:1c:ed:1f:db:88:29:47:63:3b:7e:05:
e6:d7:a6:68:9a:3c:1a:6a:e5:11:1c:f6:d1:9c:a0:
95:f2:31:cf:ee:9f:73:7b:39:15:00:94:4e:b0:d2:
3b:e1:62:72:83:1b:95:c9:0c:c2:74:87:79:b2:a9:
f4:5d:f9:78:5e:29:19:e9:82:f7:12:5d:68:0f:89:
e8:00:09:4d:f0:b5:55:72:0d:a9:a9:19:cb:b2:5f:
74:9f:a8:27:f8:9d:b5:8d:c3:61:a5:0e:96:59:41:
c3:35:e5:ef:4c:98:39:c5:a9:f7:31:ea:a5:c7:19:
a5:62:f7:a4:67:cd:9d:ea:61:e6:fd:3f:42:47:90:
17:20:df:19:17:c2:02:80:1d:74:52:2e:f4:fe:2b:
25:c9:f2:2a:44:15:60:69:42:ad:94:5f:4e:63:70:
19:8e:5b:83:9b:6d:5d:35:86:f4:9d:83:22:97:9d:
4d:72:fa:4e:2f:37:61:83:cc:1e:e7:fe:9a:7e:65:
62:64:03:a5:73:2a:3f:d9:7d:f3:7f:8c:87:7c:35:
7a:20:77:d5:ab:25:3f:dd:11:4c:65:39:67:8d:aa:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:27:CE:08:42:2F:50:FD:A0:1B:25:DB:7E:FB:E2:64:F2:32:EA:14
X509v3 Authority Key Identifier:
keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:60:2f:70:e5:d6:3b:54:52:10:e9:44:47:15:f0:03:c9:74:
58:96:ea:aa:4e:83:df:51:11:45:1e:da:bd:a1:b7:58:c4:76:
3f:9b:19:64:25:b0:b3:55:ad:7a:45:1a:58:ea:59:3b:31:ee:
c7:e0:e5:08:41:08:3d:ec:76:e6:92:0f:1d:8b:44:9a:2c:70:
30:08:7e:da:4b:92:cc:10:35:ed:c9:87:f4:8c:29:e8:a5:2e:
77:4c:a0:be:a0:fb:08:fc:df:95:a8:24:b4:73:a3:66:99:35:
6f:b7:07:fb:12:45:41:2d:de:2a:2f:88:32:e6:09:1a:d2:cf:
13:2f:4a:75:8d:8e:e8:10:b4:e5:37:3c:eb:2d:c5:7e:10:a8:
3e:f8:ce:4e:32:26:b2:e7:cf:be:e8:cf:3c:17:d6:7a:c3:ed:
a3:d2:44:17:ec:99:cb:85:7d:26:02:65:88:49:8c:65:61:ad:
4e:be:92:e2:02:1e:8b:3d:99:63:25:6e:67:ef:bc:33:ee:22:
28:d2:a8:87:3e:c5:d4:ad:6f:f7:bd:99:3f:5a:68:3d:fd:54:
f3:82:c5:82:41:34:22:b2:6c:1e:81:26:4f:2d:4d:2e:37:0f:
f8:35:d1:0f:55:f4:9e:c5:f3:58:ed:ae:49:04:f1:a5:a5:18:
f4:53:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:58 2026 by rpki-client