
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
File: ycIPtAaIDHHcvabGs_umov85Kks.mft (raw, json)
Hash identifier: iCAN52idxN78S/OeRH3EPWFaBZUvjkEL7VIOKw5J21s=
Subject key identifier: EA:79:9F:A6:37:42:98:B2:B8:B6:44:12:66:9F:CF:6C:6E:8C:14:31
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Certificate issuer: /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
Manifest number: 3C
Signing time: Sun 05 Apr 2026 07:51:39 +0000
Manifest this update: Sun 05 Apr 2026 07:51:39 +0000
Manifest next update: Sun 12 Apr 2026 07:51:39 +0000
Files and hashes: 1: ycIPtAaIDHHcvabGs_umov85Kks.crl (hash: DnufutdRc6dEbpVzLSluQmES+8uDdOqnAUJVd2Pv2aM=)
2: 41E03246DA3E11F0A9D9994C8ED3641D.roa (hash: RSEIybSMpRGlyt7iVSAaODWDkzpxlz37Tk1zS8mwuzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Validity
Not Before: Apr 5 07:51:39 2026 GMT
Not After : Apr 12 07:51:39 2026 GMT
Subject: CN=69d2148b-d363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:14:9a:23:ba:e7:ab:17:18:77:4a:36:5d:
5f:fc:92:e5:90:70:ce:f9:dc:24:db:7a:62:c2:1c:
e0:13:ea:d6:74:a1:6e:7c:ed:9c:6f:45:22:6c:8f:
f1:98:c0:fc:5e:c4:10:06:e2:f0:2b:41:2b:c5:e4:
c5:ef:7e:6a:05:0b:f4:bd:33:77:28:c8:38:f6:7a:
7c:a4:e0:84:a9:83:91:d7:7a:33:11:f5:f2:75:22:
9c:be:5b:96:4b:02:1a:59:b2:22:b4:56:29:c1:77:
c6:54:13:25:25:e3:e2:37:d8:35:cc:71:2e:ad:cb:
1e:ea:6e:b6:af:e6:7f:53:b1:31:15:55:7b:42:6f:
33:c1:75:be:53:c7:cb:d2:78:15:52:20:68:a9:05:
98:57:0c:31:40:49:92:2d:d3:7c:41:90:02:2c:d0:
08:87:f1:cc:7e:25:a8:96:0b:30:63:44:b4:a2:57:
e9:90:93:15:76:0c:80:28:e7:7f:4d:42:96:dd:e9:
5f:60:4b:3c:96:46:aa:ef:ac:f0:61:7a:31:1a:23:
dd:90:14:7a:4d:8b:12:c5:8a:7c:0c:b6:61:2d:66:
24:be:53:75:30:3f:f4:8c:1b:b5:38:16:77:41:35:
fa:23:d9:d1:2c:7d:cc:18:b4:cb:bf:b7:a3:38:31:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:79:9F:A6:37:42:98:B2:B8:B6:44:12:66:9F:CF:6C:6E:8C:14:31
X509v3 Authority Key Identifier:
keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:f0:c5:98:93:28:d2:26:fa:dc:eb:74:31:ac:9a:18:e8:18:
ea:09:4c:8e:6c:2c:94:ed:2f:e3:13:a7:31:cd:8d:6e:bc:ac:
ac:d2:85:81:06:45:f7:b3:94:11:bb:28:19:10:86:a9:06:9e:
34:3f:c2:33:97:0c:d6:fc:98:11:02:34:5c:48:88:39:a5:17:
66:23:c7:a4:c0:5a:ae:10:0b:a9:5b:13:ae:a6:4a:46:6b:2f:
bd:05:c3:f0:0d:37:0c:d2:ea:19:e6:33:5c:18:9c:43:36:cc:
2e:1b:eb:02:c4:6e:85:1f:52:df:1b:25:6c:fa:00:e5:8f:17:
14:ff:73:73:e6:f3:b7:e9:58:95:c4:ce:ac:fd:30:7f:be:6c:
b3:a0:72:1f:c5:f5:2e:3a:67:a3:12:23:8f:a5:a0:9b:00:06:
b2:ee:81:61:7a:3f:4c:c1:2e:fc:7f:69:33:a1:99:2c:75:f1:
68:1d:bf:64:c0:da:24:2e:d0:64:d4:d0:e9:1b:96:72:10:66:
98:de:8e:49:1d:dd:44:1a:f6:f8:61:ed:82:59:23:e7:c8:5d:
9f:e6:73:c4:a8:6d:76:7f:e7:bf:56:1e:3c:b2:d7:5e:72:a1:
03:47:cc:45:94:82:73:34:ec:0d:f0:cd:96:fe:91:52:d3:88:
4c:70:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:26 2026 by rpki-client