
$ rpki-client -vvf rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
File: YhVbsAWcTchhU2ywUux1W6sWbD8.mft (raw, json)
Hash identifier: +u5ArFiSJW616+OBhe8J1Zw7QZ90+NbJfru2YstFBig=
Subject key identifier: 00:B7:31:A4:FC:24:1C:C1:EC:57:B2:AB:8F:AD:BA:36:5D:D4:F5:BF
Authority key identifier: 62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
Certificate issuer: /CN=A91978F7/serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
Manifest number: 85
Signing time: Thu 21 May 2026 07:42:28 +0000
Manifest this update: Thu 21 May 2026 07:42:27 +0000
Manifest next update: Thu 28 May 2026 07:42:27 +0000
Files and hashes: 1: YhVbsAWcTchhU2ywUux1W6sWbD8.crl (hash: e3ZCF/iNTTw1U6lMxPt2UWKQVIQqexl8rWqA2vZEtA0=)
2: 87C69A4E8DEE11F0A7999742C4F9AE02.roa (hash: qwmJMtInrC0IqGGbywIekTKX8KQ9rZiVhjJ+ax1NumM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91978F7, serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Validity
Not Before: May 21 07:42:27 2026 GMT
Not After : May 28 07:42:27 2026 GMT
Subject: CN=6a0eb764-78b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:29:b4:ca:6e:d7:06:a6:92:bb:72:f9:c4:
89:a4:3b:74:bb:34:ee:89:52:4f:59:6b:39:83:5f:
07:4c:c3:aa:1a:e5:9e:ba:2c:12:3c:d4:92:45:23:
45:d2:d4:df:be:0d:24:7b:3b:ee:de:99:53:ef:a6:
e9:51:46:1b:7e:c3:91:92:59:9b:ec:16:20:e3:f4:
1a:3c:f8:3e:9d:b2:be:98:2c:9c:ae:37:1a:9c:f9:
69:b8:d1:a1:c1:eb:55:7e:fc:7b:4c:b6:10:2a:a1:
d1:b3:a9:e5:28:d6:33:4b:90:a8:0a:53:97:c2:99:
31:0a:f5:73:5e:79:36:34:c4:df:bd:15:da:c6:50:
7f:7a:1e:0a:d7:b5:39:d8:41:9e:dd:95:d4:0c:1f:
86:2e:14:63:10:d1:e4:8d:e1:86:b6:fb:2f:3f:fb:
cf:13:26:a8:28:61:23:7e:15:e4:c8:c0:b6:1d:26:
49:56:ca:f6:21:66:8c:07:1f:75:0a:55:bb:7b:51:
73:38:e0:4d:8a:4b:4e:a9:0b:b6:f2:3f:a8:fe:b4:
f9:82:cd:39:0a:c5:04:8d:36:4f:f7:e5:11:14:78:
15:cf:33:93:a4:7a:ed:c6:44:b1:a4:77:3b:72:fb:
59:12:bf:20:a7:c9:5d:24:9c:2c:04:e7:c7:94:4d:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B7:31:A4:FC:24:1C:C1:EC:57:B2:AB:8F:AD:BA:36:5D:D4:F5:BF
X509v3 Authority Key Identifier:
keyid:62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5a:57:c3:fa:d6:ca:c4:18:4f:20:99:89:62:f7:dc:91:25:
68:d0:45:7d:40:42:f8:2b:8d:6e:d8:be:5c:06:e7:21:dc:70:
26:66:83:68:37:df:6c:f1:8c:56:d3:ff:37:f5:1c:18:da:c1:
b6:be:1c:8c:26:6d:26:74:52:b7:6a:5e:ee:23:3c:aa:b2:67:
d7:cf:02:85:3d:c9:06:5f:0c:7b:d4:9b:38:c3:b5:75:29:7d:
11:02:2c:7b:52:e4:a8:48:9a:82:47:56:f0:1b:54:6f:0a:f2:
9b:d9:c7:8b:dc:11:84:4e:27:ba:d6:27:1d:a1:1d:7d:25:22:
4e:a1:bd:06:ec:81:ce:85:8e:93:7f:8e:20:90:76:ab:4f:b1:
f8:ec:da:a6:a8:ec:71:65:6d:95:dd:bf:4e:6e:53:de:32:8c:
8c:89:6b:9b:4b:c7:0f:62:37:e3:0d:1c:9a:f9:3b:b0:67:58:
b4:81:38:00:e9:a8:8d:ce:93:92:59:08:db:09:6d:f8:a4:3e:
22:0c:5c:d0:a2:f3:fd:c7:fe:d2:73:43:34:4e:cb:d4:ce:e9:
30:98:ba:5d:7c:42:8e:0a:35:29:99:84:57:e6:31:52:1a:85:
af:bf:5b:f8:f7:66:4e:62:e4:fa:dc:b9:55:be:a8:1f:3d:eb:
e6:24:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:15 2026 by rpki-client