
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json)
Hash identifier: s3OtlsFbp/WMH7gIsjiZbSDRNwhQxXGU7VCXynQgv4c=
Subject key identifier: 12:9A:7F:75:94:6C:E8:CC:0D:AD:14:60:B5:C5:83:55:30:B5:31:D3
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
Manifest number: 0205
Signing time: Sun 03 May 2026 03:22:03 +0000
Manifest this update: Sun 03 May 2026 03:22:03 +0000
Manifest next update: Sun 10 May 2026 03:22:03 +0000
Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: xDcWpXZio9jjl4kA+2nwKaQgrEGFxmdezXCk1T0gT7o=)
2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=)
3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=)
4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: May 3 03:22:03 2026 GMT
Not After : May 10 03:22:03 2026 GMT
Subject: CN=69f6bf5b-c5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:53:bc:7e:77:f3:1c:e4:27:ee:5b:b5:5a:
5f:9c:37:34:25:69:85:17:74:7e:13:47:14:66:e5:
9b:33:fd:28:c3:60:ff:90:29:97:b5:43:6e:04:41:
78:79:6c:ad:a9:f0:64:3b:4b:b7:ab:89:aa:19:25:
a4:c0:2b:45:ef:92:19:10:fa:9a:b1:89:34:d3:52:
54:b5:5e:d7:b6:6f:21:37:1c:35:a6:13:63:fe:fc:
26:01:05:51:6d:a0:0a:85:19:6b:2e:c7:b4:e6:0b:
59:ba:af:f0:9a:6b:8d:bb:93:c2:bd:bd:c8:33:76:
0b:9f:44:ca:1f:0b:06:a4:fa:4f:92:b3:1b:4c:5f:
eb:cf:fc:50:c9:67:24:7a:ca:10:a2:e6:a6:16:ac:
f1:82:5a:1b:f5:9c:b4:27:7c:28:4c:c0:56:ee:fb:
c8:ae:af:ff:07:8d:5e:23:2f:ea:3b:e8:a1:f7:2e:
f4:b8:88:6e:e4:fe:58:da:43:a8:92:e1:ca:35:5b:
c3:1a:a8:ef:c1:8d:4e:17:98:1c:5c:04:d6:8f:21:
3c:c7:53:3f:83:f7:d0:f9:7e:b2:cb:13:3f:2d:0e:
67:78:a0:26:aa:9a:ea:32:e0:34:e4:63:f9:b0:76:
44:0d:df:98:f4:39:e3:ad:c6:77:7a:05:d4:27:58:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9A:7F:75:94:6C:E8:CC:0D:AD:14:60:B5:C5:83:55:30:B5:31:D3
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b2:c7:52:5b:55:f5:36:5b:79:0c:ca:41:18:17:63:20:fb:
0a:30:51:f8:a5:7a:d8:1d:5c:3f:64:d4:a1:ff:a8:63:9a:a3:
b3:2c:d4:c4:8e:7f:9b:10:13:90:28:16:ff:1d:06:f2:62:27:
17:78:57:2d:e5:33:49:9d:17:35:76:e8:92:5c:19:78:50:26:
1c:d6:b8:4c:14:e7:76:fd:bf:fb:68:3e:a8:38:fc:0f:5e:7a:
2b:5d:e5:1c:76:b2:18:0e:92:42:7e:b6:25:a9:d7:e2:56:30:
99:e9:18:fe:3d:c5:4f:d0:c1:90:46:c8:2d:9a:47:6c:1e:3a:
d9:6a:76:68:8b:5e:60:df:70:b5:ad:6a:ff:3c:be:3c:b1:7c:
ec:eb:7b:74:dd:b6:4c:1a:fe:2e:f7:f6:e4:c7:2d:f4:d8:30:
f7:a1:8b:97:f3:b8:0c:8a:de:6a:d5:92:13:f3:1e:67:86:90:
a4:13:0c:60:c6:13:57:ba:f1:b3:10:1c:c3:21:bc:96:be:7a:
0f:82:b8:1e:86:6b:8a:78:3b:5e:d7:1b:07:66:55:47:24:c7:
1c:83:fb:e9:59:4c:30:48:b2:06:d1:fc:2d:88:6d:47:87:d0:
cf:1a:a1:d1:af:b0:87:e4:73:50:2a:17:83:d0:6b:53:72:58:
98:27:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 05:24:09 2026 by rpki-client