
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json)
Hash identifier: kbT+rJUM+E2xFwymSoJxCJlwONyliol3QEpPW1et0OM=
Subject key identifier: 83:F0:14:91:2B:3E:55:6C:0C:B5:B2:98:DF:27:6C:D7:CF:FF:B1:88
Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Certificate serial: 0C35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
Manifest number: 0C16
Signing time: Fri 12 Jun 2026 18:53:07 +0000
Manifest this update: Fri 12 Jun 2026 18:53:06 +0000
Manifest next update: Fri 19 Jun 2026 18:53:06 +0000
Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: jOq0j1WribG37igxpvwh9dVKCQufk2hplpbcTS2nRo0=)
2: 6AC5AB5CEAB811F088FEC0005D6F56BC.roa (hash: GCpn4gmc0QpPSz7cXybRJq63rDVbixPSMbZl0hH07Xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3125 (0xc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Validity
Not Before: Jun 12 18:53:06 2026 GMT
Not After : Jun 19 18:53:06 2026 GMT
Subject: CN=6a2c5593-347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:1e:f9:c0:1f:44:be:1c:e8:1a:7b:5a:7a:
a9:64:ea:3d:06:2e:e4:b4:08:fe:d7:6e:8b:50:7e:
fa:91:ea:47:8f:7c:f0:68:fb:69:78:c9:e2:cd:4d:
c4:58:9a:57:a2:3b:18:f3:36:20:9b:71:17:fc:a6:
23:c9:eb:34:96:b7:82:94:b8:0a:7d:55:85:6b:58:
d4:60:28:a9:5b:1d:f8:12:f4:f6:48:35:23:f2:13:
70:d9:23:65:5c:0b:66:9d:2f:2a:2c:cd:3e:eb:fd:
f4:30:66:26:6c:70:2b:a2:7d:1c:6e:6c:6c:66:75:
92:82:82:a0:5c:16:ed:eb:9c:e7:08:38:25:60:e2:
da:e1:af:d9:1a:e0:4c:ce:74:9b:4b:1d:46:91:1e:
79:c2:6d:c7:10:40:b7:d8:52:ed:ce:ab:d9:e3:91:
3c:86:d6:2d:4d:61:da:0f:3d:6e:69:eb:ea:4f:a3:
3a:5a:eb:62:e2:4e:de:75:24:17:ac:49:8f:48:75:
2b:51:0c:33:95:d8:e7:94:25:19:14:8b:ec:d0:5f:
32:4d:9e:39:c2:88:e9:5c:38:87:c7:3d:8f:27:5b:
ca:74:b4:bb:dd:5e:d5:3a:e3:66:2d:e2:7c:57:26:
81:06:f0:c4:71:c0:17:5d:76:ab:1c:36:94:73:85:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F0:14:91:2B:3E:55:6C:0C:B5:B2:98:DF:27:6C:D7:CF:FF:B1:88
X509v3 Authority Key Identifier:
keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:30:c1:07:a0:3a:90:23:e7:d1:cf:7d:8f:e4:64:94:5d:25:
85:cc:8b:d6:3e:c8:f7:fc:5c:70:9c:29:09:70:3d:94:ab:ea:
d7:40:59:f7:c8:25:8b:2d:6a:c1:99:ec:6d:b2:ab:bd:22:f3:
04:27:f8:bd:89:ec:85:9f:6d:6d:a9:66:38:3a:fa:7b:3e:1e:
6b:ac:61:41:8b:55:86:16:a1:cf:55:85:41:bc:2d:a9:0d:1c:
13:a0:bc:b8:f0:2a:8e:8e:9e:5d:0a:d4:bc:1c:c9:31:30:2f:
94:d9:a5:b3:a7:e1:d9:e6:e0:5c:cc:e4:65:48:f0:11:ab:47:
e3:2b:ee:b6:f9:a4:e6:b1:b1:15:6e:60:24:31:e1:61:62:a4:
b4:57:c5:8c:6b:28:a7:8e:bc:91:ab:8b:cd:1e:ac:57:22:d0:
f3:a2:86:ae:a4:e4:ec:32:1f:d4:85:70:dc:6f:28:ff:6b:df:
68:f6:48:a1:cc:29:bf:15:37:d2:a2:2c:97:24:e4:1c:f1:9a:
80:1d:69:5a:e6:9f:14:6a:cb:d0:da:43:e1:60:08:b1:8a:ab:
eb:07:40:cc:a8:cc:9a:ae:ca:60:70:4a:f9:cd:6f:71:9c:12:
1d:21:e6:7a:42:e7:e4:df:02:7c:9c:b8:e1:14:13:1e:3d:46:
22:ac:ef:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:16:08 2026 by rpki-client