
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File: Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier: /SRPcJ8WxlbmdemUpgxJ2FynfctxKkQlCamTXlOcDzA=
Subject key identifier: 55:A8:15:A4:DB:CD:76:0A:8F:83:8C:3E:AC:47:1B:7A:CA:D4:14:40
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer: /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number: 025B
Signing time: Mon 27 Apr 2026 02:06:48 +0000
Manifest this update: Mon 27 Apr 2026 02:06:47 +0000
Manifest next update: Mon 04 May 2026 02:06:47 +0000
Files and hashes: 1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: pp5MglMa7fqwRTNi9r9vfxYWZ8hj8c5Gb89sRCbMo6M=)
2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: IMnX87QNvHpbvo82n1RR69kUclsVgTYA0yTOvxNI1Gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 02:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Validity
Not Before: Apr 27 02:06:47 2026 GMT
Not After : May 4 02:06:47 2026 GMT
Subject: CN=69eec4b8-2dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:f6:8a:9b:6b:ef:77:09:c7:64:61:9f:a8:
e1:36:e5:46:35:2e:1c:0a:84:f3:70:c8:45:e5:2b:
72:d1:ac:60:e1:69:2d:fd:fb:6f:2f:93:a7:47:44:
cd:3c:3a:8f:46:bc:65:67:dc:23:21:6d:50:1e:36:
16:19:3b:be:35:58:89:1c:f0:aa:14:f3:4a:f2:fe:
c9:a2:2d:26:45:15:14:36:96:49:26:79:39:65:a7:
74:0d:4b:e3:d9:7b:c6:39:6a:d8:26:be:e5:10:7d:
df:a2:b9:aa:3b:24:7f:39:17:a9:52:5d:cf:58:8d:
71:d3:48:52:94:7c:8d:49:c4:e5:cc:94:ec:bb:bc:
fb:5c:da:ce:5e:45:48:83:8a:c5:0c:93:6a:74:dc:
20:14:87:86:d6:14:83:9e:52:8f:7c:89:5c:b6:ec:
a0:49:a3:8e:ab:0f:40:dd:30:9a:1d:4a:ee:82:a7:
03:a6:2d:a5:5d:39:24:84:18:8e:33:48:98:a9:60:
8b:55:75:59:15:2e:9e:33:76:f8:f5:44:49:59:e0:
80:20:eb:5c:fe:12:e6:6b:54:b5:61:98:f7:16:87:
5e:00:43:89:07:39:19:42:39:3f:38:8f:44:85:1c:
6e:c3:96:d9:d6:1a:3a:2e:41:ad:e5:a8:f0:08:33:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A8:15:A4:DB:CD:76:0A:8F:83:8C:3E:AC:47:1B:7A:CA:D4:14:40
X509v3 Authority Key Identifier:
keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:02:dc:4f:15:c5:02:90:8a:29:11:25:98:80:4f:43:69:53:
c1:ac:0f:68:96:fa:bc:90:78:48:0e:dd:73:9e:62:18:11:c2:
b2:a5:0f:44:11:bd:78:b5:81:71:cc:72:0d:16:ae:59:e4:5b:
f2:1c:5b:cd:b9:94:a1:7d:ec:e5:f1:70:84:fe:ce:39:11:ed:
d3:60:0a:90:33:1d:cf:b1:98:59:fb:49:83:0f:92:36:6b:98:
6b:63:a0:ce:29:db:f4:61:33:3f:a7:cd:97:67:29:68:8b:5f:
03:db:db:70:69:5c:7d:63:ca:ae:a8:65:01:35:7b:c8:86:2a:
da:02:af:ab:85:66:4c:83:81:7b:e1:1f:95:94:14:55:f3:68:
a8:5c:20:df:2a:9f:33:59:fc:0b:ce:c6:fd:48:3b:8c:eb:44:
fe:b2:ce:93:de:e7:ed:30:4c:c2:64:33:09:51:a0:30:d6:1d:
ed:62:98:99:39:09:e1:22:d3:49:0e:7a:67:01:75:f1:44:c2:
d6:71:5a:d7:f4:7a:f1:df:4c:4e:b4:35:fd:6c:43:44:c2:8c:
b7:5e:07:88:f5:5b:22:c5:53:a1:63:df:e2:f9:33:87:c0:7f:
8a:a7:20:cc:81:4e:7f:e7:26:21:90:64:a4:9f:e1:f2:fa:b0:
c4:85:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:22:36 2026 by rpki-client