
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json)
Hash identifier: hVXbuvWlR/4ZSkGjDrBpO3uVjzZXtma5RussaETDgGY=
Subject key identifier: 4A:DC:4E:FE:E6:C1:D8:71:47:10:AB:4C:9F:A0:CE:62:42:16:4D:67
Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Certificate serial: 085C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
Manifest number: 085C
Signing time: Thu 16 Jul 2026 21:10:04 +0000
Manifest this update: Thu 16 Jul 2026 21:10:03 +0000
Manifest next update: Thu 23 Jul 2026 21:10:03 +0000
Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: lm944lPjZtRtkJIRpT7/XbF9uO48+ObYABfBesvsY7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 21:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Validity
Not Before: Jul 16 21:10:03 2026 GMT
Not After : Jul 23 21:10:03 2026 GMT
Subject: CN=6a5948ab-fd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:7a:34:fd:ec:b4:9f:68:b9:24:95:ea:23:
9e:34:cd:90:2a:08:ab:c3:45:d4:75:92:ec:55:c3:
eb:3f:60:a7:a3:7e:04:5c:d1:37:70:e2:d7:5d:b6:
b1:12:23:23:34:5b:4a:c0:a4:5a:00:72:b5:e8:53:
f8:97:23:89:b9:a1:15:f1:1f:d9:41:b7:bc:8b:cd:
67:dd:32:f1:b4:d8:e5:8b:3f:54:e1:0e:8a:0f:45:
71:52:e0:79:2d:f3:61:08:7c:55:3a:91:bf:c0:3c:
56:59:ce:bc:b9:a9:d6:cb:62:97:ae:a9:2c:db:ca:
0d:34:16:6b:ad:5a:fb:6f:8a:cc:84:2f:9b:c8:61:
17:d7:37:4e:46:ad:ff:34:e0:70:20:14:01:3c:93:
5a:cc:7f:3e:c9:85:6b:1a:d5:c1:4c:3e:be:a3:31:
dd:35:94:e1:dd:b1:c6:ad:19:5d:69:e5:f9:93:ba:
d0:3d:2c:1d:7c:f9:68:7f:8d:e9:ff:de:65:06:47:
d9:85:65:5e:f1:e8:73:e3:97:9c:37:b6:70:23:bd:
33:4b:41:6d:25:d9:5c:e7:2f:32:8b:68:fe:6e:c6:
f8:b0:5c:da:92:11:08:d7:7b:25:32:df:01:92:9a:
2e:fe:bc:98:60:30:a0:30:4f:48:ff:12:e9:94:9f:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DC:4E:FE:E6:C1:D8:71:47:10:AB:4C:9F:A0:CE:62:42:16:4D:67
X509v3 Authority Key Identifier:
keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:94:b8:10:20:03:15:df:84:a6:27:9f:0c:a0:6a:9c:cd:be:
93:04:cf:c6:20:3d:b5:60:59:e4:f8:68:cf:1c:65:11:e6:62:
50:52:27:16:02:3b:60:70:8f:3c:10:84:b7:8b:c1:43:f6:42:
dc:14:0c:87:e0:fc:da:56:97:1f:28:d0:58:0f:a2:8b:fa:07:
73:68:e7:21:2e:81:e6:69:57:50:7b:e1:71:dc:50:5f:7e:2a:
aa:fd:9c:51:1a:6f:2f:8d:f1:f8:47:d5:85:1f:33:a8:15:87:
4d:57:a5:c9:a5:4f:61:e5:27:4a:dd:4c:dc:f1:ca:26:c7:42:
61:06:bb:53:5a:2f:eb:29:48:6f:4c:1c:de:43:4c:4d:a2:87:
a7:1f:59:6a:4a:65:3f:7a:a8:73:d4:d8:18:d0:26:fe:bd:c7:
e3:4b:7b:8a:70:bf:a5:e1:a6:22:8b:cd:49:61:1d:8e:23:17:
73:29:61:f1:4b:90:5f:54:da:4c:75:23:ca:14:79:ad:0c:a5:
7c:42:c9:13:17:7b:6a:ff:ea:89:fe:97:0d:2c:58:60:32:ae:
30:3e:6c:6e:17:c4:0a:0e:a2:b4:50:5b:18:f0:7b:7e:1e:70:
6b:6c:f7:50:8a:1c:c0:29:45:6f:ee:2a:c7:59:2d:9d:4c:6e:
b2:ff:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:14 2026 by rpki-client