
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json)
Hash identifier: gjKyskbQHA6qe30BNSaKXh+5HsNgKj1F9rPZH2JBiTk=
Subject key identifier: 33:BE:0E:9A:88:81:2F:9B:96:0D:ED:10:19:57:B3:3B:F0:4C:23:4D
Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
Manifest number: 0136
Signing time: Sat 25 Jul 2026 07:10:57 +0000
Manifest this update: Sat 25 Jul 2026 07:10:56 +0000
Manifest next update: Sat 01 Aug 2026 07:10:56 +0000
Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: AUjAT6/YtnOKv4KUyHPutIMFN5+jWgEqY2OtmXva9e0=)
2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: LtWESLVsvI4cNUF6OZCvjLFJt5pmDgMGBGDr6mSpX1o=)
3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ffvc9baQUhPBkEPNM+Vs7ZdfNHNVe+g2HNSMjZukS2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 07:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Validity
Not Before: Jul 25 07:10:56 2026 GMT
Not After : Aug 1 07:10:56 2026 GMT
Subject: CN=6a646181-0492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:d4:24:e4:16:64:24:ea:36:8b:76:f9:c2:
df:21:ab:10:4f:72:c8:a2:21:76:94:92:39:b7:63:
26:dc:9f:11:17:b0:ee:f7:a9:84:ed:08:c1:01:23:
f8:04:2e:c3:bf:34:fc:23:4b:d8:bd:81:f3:a1:86:
92:12:05:72:b4:f8:25:67:4f:8b:c5:f2:f0:3d:7e:
15:59:2d:07:be:6c:35:eb:35:4d:32:c5:44:af:86:
4a:d2:b8:19:2d:5e:0e:07:ac:31:2a:26:d6:64:1d:
3b:3c:b9:fe:0f:41:26:bc:66:a6:6f:a9:91:16:8b:
fc:1e:23:26:79:c1:27:62:8e:5b:fa:f2:eb:d0:5b:
54:ab:54:1d:1d:66:d5:a8:2b:86:d8:46:c3:24:e0:
2e:3e:14:ee:74:53:b1:c0:42:a9:4e:f2:3c:b1:ae:
96:7d:92:83:74:44:4b:c8:6b:0b:52:0e:11:de:0e:
22:c9:6b:b8:b3:ce:8c:2b:08:a8:7c:8c:62:2e:1d:
c2:aa:00:d2:b8:d8:27:f2:d3:bd:eb:41:b6:ba:75:
dc:1b:2a:0b:ba:0e:5c:c6:a3:5c:03:61:81:17:dc:
c1:e2:87:ae:55:4f:5d:51:c9:99:0e:e2:97:5c:0f:
8f:c4:f0:f5:8e:32:7c:a3:f0:7e:68:76:9a:d6:18:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BE:0E:9A:88:81:2F:9B:96:0D:ED:10:19:57:B3:3B:F0:4C:23:4D
X509v3 Authority Key Identifier:
keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d4:c0:70:e3:33:d7:11:8c:35:a7:1b:a8:2e:ff:7d:2e:fa:
34:ab:de:5a:ba:17:9d:a6:b7:bf:42:75:26:8b:68:e2:22:03:
ff:cf:a4:db:a1:f0:2a:27:e0:bb:a8:e0:dc:46:1c:1c:4b:b5:
c3:52:5b:a0:7c:2e:dc:41:6b:d3:bf:55:fc:52:c4:a2:af:6d:
1e:14:4a:23:e1:7d:0c:b1:0f:c7:1f:eb:26:43:ba:41:ed:be:
61:6a:3c:64:0f:ba:8a:44:69:4a:8d:0b:6e:9f:db:52:5a:f4:
e2:27:c0:48:93:22:5e:12:14:fa:86:be:20:ed:90:61:c9:e7:
05:46:ba:e2:62:59:70:8f:34:03:ee:a2:a6:58:b6:b8:eb:e4:
50:de:b6:55:d2:40:d5:e0:2c:19:bc:b6:fa:8b:cb:eb:0b:4d:
cf:59:fe:cb:fa:80:b1:b7:d9:8e:ea:bf:94:c2:97:29:8d:ec:
55:dd:df:f2:ff:03:22:42:b3:f8:cf:47:26:f5:dd:bf:5f:62:
79:19:41:34:eb:11:06:4c:b7:41:16:18:77:8b:ca:a4:08:b2:
61:8d:c5:a0:7b:e0:ed:01:d8:6a:62:d4:21:56:e9:54:73:e0:
9b:6b:4a:b3:f3:7e:0c:86:63:d2:73:50:13:f1:27:26:a8:f8:
8b:8a:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:09:37 2026 by rpki-client