
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json)
Hash identifier: rHAxu9lcurt4QlQj0x3+mk/hnr/hdRPes9LQb7aexD4=
Subject key identifier: 6B:27:DD:04:93:AA:74:03:3F:76:DE:AC:F1:42:3E:E9:FF:08:DE:BD
Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
Manifest number: 0192
Signing time: Fri 15 May 2026 04:31:20 +0000
Manifest this update: Fri 15 May 2026 04:31:20 +0000
Manifest next update: Fri 22 May 2026 04:31:20 +0000
Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: dVImFviIpAOntvwpBs7L2QeC+7o5NtqGiGh42aq1IKo=)
2: 1B7430784BD411F1A6EB1F4394833773.roa (hash: DQuyMeCRm4a8iG98XqAoF7qWLf73xYDbUnQ5Pzno1lA=)
3: DAF8A746E01B11F097920A16646F56BC.roa (hash: LGOwTBglBUqnmp1uBsE0bwegkvn6MaHVF43SRoKPz84=)
4: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nFIjLEFtVNOTTMiweqb0gcEFYFfR+U3yovX2UqgW1o4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 04:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Validity
Not Before: May 15 04:31:20 2026 GMT
Not After : May 22 04:31:20 2026 GMT
Subject: CN=6a06a198-7e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:4a:66:b5:77:81:50:b8:71:7b:c5:6a:a7:
35:75:bf:61:8d:0c:e6:47:2b:36:9c:59:3b:8d:90:
3b:6b:0b:59:58:a2:07:91:1c:45:a6:90:52:49:41:
f8:d4:30:06:41:62:a8:d8:e9:ab:e0:bf:2f:5f:e3:
99:dc:97:e8:2c:08:2f:ea:cd:ad:86:26:b1:57:19:
f1:07:ed:54:d4:21:b7:e3:2f:72:39:64:05:52:22:
d1:ec:44:06:5e:d8:75:49:ec:b1:a0:af:a8:d8:1b:
eb:06:20:b5:8f:e1:09:68:0f:4d:07:02:9e:be:0a:
1c:82:15:d7:2e:89:de:13:d0:ff:cf:ae:10:0a:b2:
6f:5d:d7:de:ef:c8:b5:aa:6e:b5:e7:90:7d:c1:50:
96:73:0b:24:83:71:8b:8e:1f:26:52:b7:14:22:60:
b0:94:ba:b0:92:c4:a0:fc:ea:83:66:7e:a3:1f:af:
92:c1:f3:47:ec:6e:fb:b7:38:0a:d8:d3:23:4d:71:
ad:36:51:60:b6:b8:50:05:ab:22:77:bb:94:69:ae:
d6:49:a1:ac:50:9f:07:ff:b7:60:e2:cc:ee:a1:86:
f3:2a:c0:eb:9e:18:51:9e:4f:ba:42:2e:0a:26:82:
96:d1:39:d6:a8:68:0c:77:53:50:ca:f4:08:81:60:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:27:DD:04:93:AA:74:03:3F:76:DE:AC:F1:42:3E:E9:FF:08:DE:BD
X509v3 Authority Key Identifier:
keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:ed:5b:dc:54:45:43:28:05:a5:46:5e:e2:a6:36:7e:e0:
52:46:52:53:ae:ee:69:c8:db:2b:ab:a1:6d:df:9d:c4:2b:9f:
87:e0:7a:6d:d4:13:56:e2:3e:be:07:41:cb:de:72:de:f1:f6:
ee:9d:a3:8d:e1:64:78:d9:bb:12:05:61:93:33:0d:90:47:03:
45:43:08:de:84:5a:0e:6f:a3:6b:d4:8d:64:c0:1f:77:d7:67:
4d:46:c2:9a:4e:fe:f6:f2:56:ff:08:24:f5:8f:05:35:79:50:
9e:b0:bd:f4:56:3a:02:49:83:68:be:95:c3:5e:14:d8:51:35:
81:65:da:22:0b:45:e7:11:28:bc:74:ce:bc:21:fb:b5:00:52:
a8:3d:8d:3d:a1:68:41:20:f2:5b:5a:88:78:09:aa:87:bc:07:
1f:91:90:ed:e9:13:0a:56:25:d8:8f:a7:cd:42:f2:e9:c0:42:
0d:d4:9c:01:95:0f:72:81:d2:93:36:36:57:5f:5a:57:2b:ac:
7b:fe:3c:de:61:e3:83:e1:91:74:c8:7e:2c:fd:8e:e6:e5:73:
13:f8:b1:fa:6c:39:c8:66:02:33:92:60:33:28:bc:c2:bd:d2:
28:ab:d0:52:07:37:7f:46:40:56:3a:64:ff:9a:0c:5d:62:9c:
49:df:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 23:44:34 2026 by rpki-client