
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
File: YGHkRpDveLCtqNg1DRHKngGUnBQ.mft (raw, json)
Hash identifier: u4HRgO4y+JULgMyddIig2zj3zczdwxEfvyuF2fNyuis=
Subject key identifier: 7E:AF:96:83:07:10:C8:F9:99:CA:E4:7E:FF:47:3B:8F:17:23:E7:39
Authority key identifier: 60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14
Certificate issuer: /CN=A91BFE76/serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
Manifest number: 78
Signing time: Tue 23 Jun 2026 07:57:45 +0000
Manifest this update: Tue 23 Jun 2026 07:57:44 +0000
Manifest next update: Tue 30 Jun 2026 07:57:44 +0000
Files and hashes: 1: YGHkRpDveLCtqNg1DRHKngGUnBQ.crl (hash: bePn73leBelu1l7CyLIsUj8zAQx4CiEqv6Cg0xG/hEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl
rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 07:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE76, serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14
Validity
Not Before: Jun 23 07:57:44 2026 GMT
Not After : Jun 30 07:57:44 2026 GMT
Subject: CN=6a3a3c79-24bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f4:7e:77:dd:33:0f:fe:95:46:d4:b4:f4:06:
ed:2d:fd:ac:bd:a8:57:b2:cb:c2:f5:05:35:1c:65:
65:87:00:dc:74:c0:9f:68:d9:f5:8f:10:cb:e2:c9:
b8:87:37:f8:fa:11:62:26:23:49:5a:b7:37:1e:fa:
7e:92:dd:3c:43:80:cf:b6:c4:21:a0:32:6a:af:fa:
80:60:e6:78:89:48:45:6d:90:43:ac:df:8d:2d:15:
4c:ea:e5:79:b4:6d:72:18:d1:bb:81:f3:17:95:f2:
86:bc:6f:4a:68:a7:52:49:f6:a6:50:08:4e:ee:e2:
ce:82:7d:f3:e5:1a:c7:40:2f:01:1c:cf:4a:f6:67:
9e:65:c1:36:11:cb:8f:38:ec:9f:28:29:97:e2:7d:
00:ec:cb:8b:3f:b1:85:54:84:e8:56:ae:a2:fe:42:
b5:af:03:c4:96:9e:e6:1c:3c:21:b6:be:82:92:a2:
97:ed:e6:5d:2e:6f:9c:13:9e:34:73:e7:6d:5a:ec:
79:0e:86:04:27:fb:72:c6:1b:5d:f5:2b:53:22:6c:
bc:84:0e:d9:24:18:a0:84:f8:97:70:22:ed:6d:f0:
2a:ef:7a:1c:cc:d4:3b:80:34:05:0d:0d:ba:01:7d:
50:b0:91:2d:ea:c5:02:b6:b8:e5:b0:a5:f4:b6:28:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AF:96:83:07:10:C8:F9:99:CA:E4:7E:FF:47:3B:8F:17:23:E7:39
X509v3 Authority Key Identifier:
keyid:60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:b9:64:55:a9:d3:79:80:00:d5:42:37:0d:0d:b2:20:b3:6f:
1a:60:46:ee:d9:d0:d3:37:49:8d:4f:00:cc:26:a6:be:ec:b8:
d5:54:c0:cf:f6:3b:f7:7f:3b:75:16:eb:7f:34:71:99:cf:4c:
70:6b:0f:b5:9d:7b:61:43:c3:b2:eb:a0:fd:1b:2e:31:45:57:
13:40:1d:18:5e:31:ce:e4:17:9e:18:aa:99:c5:35:5b:65:4f:
29:c7:d6:2a:14:14:8d:ef:d7:9a:ab:65:93:d5:42:25:11:b9:
cf:6b:f5:0d:31:d2:12:bc:e7:7c:58:11:a6:44:59:86:b6:99:
7b:fa:7a:61:2a:63:5e:c5:4f:df:44:e8:d0:59:19:6c:72:27:
f6:2e:8f:7e:d7:6b:6b:80:da:33:1c:28:a7:9a:67:46:14:e7:
65:cd:5c:2e:fa:b2:b4:0f:e7:13:7d:03:08:48:43:bc:fa:a3:
e4:1d:f4:94:18:cd:0d:3c:e9:54:dc:3d:3f:1d:26:5f:fc:4a:
d0:ca:ec:b5:a1:cd:25:4e:37:d4:46:f9:3f:a8:76:c7:f8:52:
75:2a:26:b5:a0:58:6c:6c:07:1f:4e:40:70:55:b2:39:4f:a3:
07:86:7b:52:48:99:b6:e9:bd:df:e5:3e:93:1b:4e:d5:32:ce:
15:06:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:46 2026 by rpki-client