
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
File: Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft (raw, json)
Hash identifier: yWGUKy9vK087AlIYzj4f06x4VrxTlJ7tiHBp3JprqpM=
Subject key identifier: 1F:5F:AC:28:46:41:17:EA:05:D2:63:99:D1:EB:D9:05:71:37:25:05
Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
Certificate issuer: /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
Manifest number: 0164
Signing time: Mon 01 Jun 2026 05:42:33 +0000
Manifest this update: Mon 01 Jun 2026 05:42:33 +0000
Manifest next update: Mon 08 Jun 2026 05:42:33 +0000
Files and hashes: 1: Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl (hash: mi5iBO0mAwHCRODo+INf8blGu0W9XI9x1Z25IuoJvr4=)
2: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (hash: y32dMEUN6YUCKolUe/uVA0r0aXZ6vWR2Ez2nh841QQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl
rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
Validity
Not Before: Jun 1 05:42:33 2026 GMT
Not After : Jun 8 05:42:33 2026 GMT
Subject: CN=6a1d1bc9-595c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:92:99:41:46:0a:50:b9:a0:d2:80:af:fd:
3e:0b:e9:1b:26:fc:89:00:6f:43:72:2a:ff:95:5f:
19:25:eb:4f:10:28:86:ff:b0:14:3c:ad:ee:1d:c2:
79:d2:85:fa:6d:f7:05:e5:4f:f5:b8:00:96:9e:23:
c9:72:aa:08:8d:bd:f2:7c:a8:65:43:98:13:19:e6:
14:3d:2f:7e:8a:f2:0d:e5:b0:f6:07:48:29:58:95:
41:47:01:e8:7e:3c:88:82:04:a3:9d:e0:80:5a:b8:
f2:33:2e:b3:43:cf:0b:79:42:22:d7:7f:a8:f5:bc:
65:a2:3c:5d:62:f4:a7:0f:29:88:0a:af:91:af:8f:
97:aa:8f:59:83:d8:ec:af:72:29:2d:21:f4:0e:84:
83:95:90:68:f3:b0:a7:44:bd:ca:16:6e:2a:36:50:
25:09:11:3c:88:3a:6b:27:2a:62:6b:32:ee:6b:b7:
b6:df:b5:cd:dc:68:f3:b5:f2:7c:a8:78:69:c3:de:
f0:4a:ac:41:b2:51:10:d9:5b:72:ad:ed:ab:02:11:
d0:b9:84:11:58:ed:91:24:ba:69:c6:8b:11:c8:88:
e7:c3:9b:43:a4:80:34:b9:d6:e7:6a:ac:25:0a:96:
fb:a3:7f:cd:a1:ca:0b:b0:1a:72:9b:ea:b4:da:d8:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5F:AC:28:46:41:17:EA:05:D2:63:99:D1:EB:D9:05:71:37:25:05
X509v3 Authority Key Identifier:
keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:c0:0d:e1:c4:78:a0:5e:c2:ad:d4:ed:4a:32:e4:55:1b:fd:
9f:0d:76:31:86:83:6e:25:de:49:7f:e8:02:e9:df:33:03:ea:
d1:0b:32:30:d4:11:e2:c5:db:c3:12:6e:b9:08:3d:2e:08:8e:
fc:c8:12:59:ad:54:c7:dc:d3:fd:4c:64:ec:36:24:29:e9:70:
62:bc:95:ca:9d:72:9f:53:52:74:c8:45:5a:be:ba:cf:ca:4c:
1e:12:0c:3a:35:61:26:db:a6:c3:3d:18:1f:52:af:f9:7e:3a:
66:52:6d:54:eb:ad:aa:92:9a:40:6b:12:ee:c0:9f:4d:1a:7f:
c7:e3:ef:54:45:71:99:21:88:61:1c:64:67:6b:13:78:c6:85:
0a:91:2b:e9:05:7c:b8:35:7e:9d:1d:89:75:ce:61:d4:99:d5:
be:11:94:b1:10:9f:64:be:1b:86:f9:65:fe:1a:76:a3:a4:b9:
f5:96:33:c0:7e:8d:c7:c0:fb:ae:0a:0a:36:b8:30:cf:14:1f:
6d:07:0e:9c:c1:72:a2:28:90:37:41:5e:a0:05:92:e7:50:e9:
bc:7c:56:84:c0:5e:e3:c2:30:6c:dc:a1:46:66:40:66:ca:4a:
f1:bc:73:77:4c:88:df:90:36:a3:ce:73:10:19:d8:74:6a:55:
15:4c:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:42 2026 by rpki-client