
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json)
Hash identifier: hlUEpYPll1YY9Jj01eZt6qinUqaqyO+AMG+ZBtXPO60=
Subject key identifier: 47:B2:63:14:BE:49:47:91:96:EF:F7:A5:02:B2:62:79:26:83:82:82
Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Certificate serial: 0EFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
Manifest number: 0EE2
Signing time: Sat 18 Apr 2026 17:34:58 +0000
Manifest this update: Sat 18 Apr 2026 17:34:58 +0000
Manifest next update: Sat 25 Apr 2026 17:34:58 +0000
Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: 2bHZaBDgxrhP5B6TaEh1cuPm1oqEuwFOcru1mB22pKA=)
2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: JURe/kWLxWBBPujRNutDT5hH/C63Ar6PS7XUiquehOE=)
3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: 9PzmGNvK7SqmPlPyXHrhBcEPkqCMbrFtsm/C/q55ytk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 17:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3836 (0xefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Validity
Not Before: Apr 18 17:34:58 2026 GMT
Not After : Apr 25 17:34:58 2026 GMT
Subject: CN=69e3c0c2-87e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:23:7d:cb:68:ad:78:d5:12:68:41:de:e8:
36:bc:21:ad:6f:23:c7:68:cb:2d:15:50:dd:c6:9a:
fb:97:80:54:a5:94:2a:ba:68:4b:5b:53:c2:f1:c3:
dc:3d:03:20:20:7a:9f:dd:24:78:72:10:63:c6:19:
37:2d:79:ef:a4:1c:77:3b:60:7f:cb:4d:4c:9c:33:
7e:b3:46:71:21:90:be:5a:ca:48:6f:56:c3:87:d5:
74:8f:ec:cc:07:35:f3:f1:df:72:c2:ad:c0:84:a9:
cc:0c:0d:50:89:64:c2:34:e0:e3:a0:44:0a:59:69:
af:53:01:3c:35:7d:6c:f4:ef:51:67:fb:e2:20:57:
2e:dc:49:88:70:63:2f:ca:e6:2f:de:17:74:d3:72:
7e:8b:f6:4d:df:e8:65:3a:63:f1:0b:67:7e:be:66:
e4:8a:56:1c:83:b0:67:a1:22:b3:89:ef:be:86:b5:
14:b0:52:f8:a1:47:bb:11:1b:7c:12:ed:5f:c6:1b:
6c:03:0c:a5:3a:a0:45:26:b6:37:53:37:f5:c1:0e:
0d:2d:56:c1:6e:1c:c2:0c:70:2c:59:08:cc:48:a3:
2c:6b:4d:55:15:74:48:b9:3c:a8:a1:ed:0e:c3:28:
b3:3f:dc:3f:47:a6:c9:19:19:bf:e9:77:05:2e:47:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:63:14:BE:49:47:91:96:EF:F7:A5:02:B2:62:79:26:83:82:82
X509v3 Authority Key Identifier:
keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f2:64:4b:32:20:fc:33:44:25:e9:49:96:db:eb:40:53:b4:
f6:3a:90:3c:2f:cb:bd:0f:30:8c:a0:c2:a0:d6:c1:97:52:24:
dc:47:1a:cf:f4:a6:04:d0:14:47:d8:12:d0:f3:d7:b2:f3:56:
e0:b2:a2:86:4a:7e:19:da:1d:af:5e:b2:45:d6:dc:27:31:7a:
b1:1a:e2:9a:50:72:b7:34:df:24:22:4d:da:92:94:37:c7:33:
36:0f:fa:0b:90:c5:25:65:5c:6d:4f:04:ca:be:49:a5:45:8a:
89:ca:7f:7a:58:fe:83:a9:c1:97:62:dc:35:eb:81:c4:dc:f7:
77:d6:e1:32:1b:bf:3d:94:61:f6:48:5d:50:55:9b:84:94:1c:
e9:77:86:58:e1:cc:75:66:39:ab:a0:a9:40:f7:1b:24:54:bf:
f4:b5:37:b6:2e:0c:5a:1b:92:a2:eb:e7:fc:f8:c9:ce:38:f3:
09:83:25:bb:9d:c9:49:61:06:52:b2:51:7f:10:7d:aa:89:35:
8a:5f:80:9c:16:66:3a:f8:34:f2:b4:6e:b2:de:40:c0:b2:34:
4b:bb:a3:f6:28:27:a3:5b:d1:98:be:82:8e:1c:ce:28:77:20:
a7:68:e9:42:53:9b:76:6e:52:65:23:5c:36:19:5b:00:bf:a6:
17:9e:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:22:38 2026 by rpki-client