
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json)
Hash identifier: 2nslMKj+AlU6EVs3nUCTKxKawn1d6LVzDJPHZQoYvFs=
Subject key identifier: 1D:EA:8D:55:01:A3:CE:50:AF:03:5B:BE:7D:3D:6B:FB:0B:5A:39:D6
Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
Manifest number: 01E5
Signing time: Tue 23 Jun 2026 03:35:54 +0000
Manifest this update: Tue 23 Jun 2026 03:35:53 +0000
Manifest next update: Tue 30 Jun 2026 03:35:53 +0000
Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: RtSlqgHG6OKbmJh2XGKF71ZBITO7vhAG0p5rNQQKdB8=)
2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: PkkKjxmP3oqdz8rOsnvlI4lixs/LLzNeT38IVCT5f2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl
rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Validity
Not Before: Jun 23 03:35:53 2026 GMT
Not After : Jun 30 03:35:53 2026 GMT
Subject: CN=6a39ff1a-0e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:f5:66:35:dc:20:35:19:91:3b:45:a8:1b:
06:90:d4:18:77:16:bc:4f:31:ae:8c:28:ff:97:78:
40:83:1f:5f:fb:fe:25:52:63:06:a8:3a:93:34:c7:
54:df:f8:d6:57:6a:3c:ad:3b:63:40:75:38:e6:24:
90:3a:0d:d3:dc:66:7d:6f:48:1b:f0:46:ff:4f:fc:
be:85:8f:06:22:87:f1:5b:b5:5c:9d:a2:8f:73:b0:
47:2c:79:bd:00:48:03:41:3b:05:72:f7:07:1f:b3:
79:e4:b5:24:e8:35:5e:86:66:b5:e0:d5:59:39:ab:
8f:bf:b7:c6:88:9d:28:a0:5e:8c:84:57:ec:91:76:
4e:f8:66:43:a4:71:55:2e:41:c9:24:f9:32:a2:81:
96:2c:58:94:8b:3e:23:f3:7c:9b:5a:da:42:21:6a:
ac:4b:f2:2a:77:e7:63:1a:30:44:3a:8a:c2:8e:61:
3b:90:4d:4b:71:84:5c:85:e5:e3:a7:4b:7d:6d:dc:
53:be:cc:7d:8e:bc:41:0c:68:48:78:48:40:82:a9:
67:59:57:3b:c8:fa:55:67:c1:cf:b1:ef:58:d4:a4:
d5:18:64:17:b1:e4:f2:20:8a:f3:4b:52:32:85:0d:
29:2e:37:8c:a4:d2:7d:79:c6:53:ca:ec:38:0b:dd:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:8D:55:01:A3:CE:50:AF:03:5B:BE:7D:3D:6B:FB:0B:5A:39:D6
X509v3 Authority Key Identifier:
keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:55:da:b9:e8:1c:38:0e:a1:8c:95:b4:13:be:8e:cf:85:a5:
e9:33:b2:3b:4d:05:82:17:a8:99:da:69:6c:6c:93:7a:7b:be:
3b:6e:37:70:1b:1d:61:bb:1a:25:fb:8c:24:a0:d0:c5:8e:20:
b7:97:96:bb:bd:13:88:26:9b:a6:e5:9f:37:48:b0:68:f9:da:
7d:58:9a:52:b6:4b:32:84:89:e7:f0:e2:45:02:4e:33:c2:7b:
52:27:4b:c3:97:6d:dd:a3:09:65:10:03:80:a6:ce:0e:8a:46:
44:47:5c:ca:31:4b:bf:d9:f4:d8:8e:97:69:5a:36:6a:b2:18:
5f:6a:5a:75:0f:b2:bd:2f:68:48:8f:0b:ed:72:c0:71:d6:7f:
df:9d:2a:86:7f:2e:83:5d:59:56:fe:f7:f1:2b:68:15:f2:79:
81:36:47:f5:f6:66:79:08:31:53:72:4a:19:da:7b:60:58:74:
3a:12:64:3d:43:7a:e3:85:a7:25:47:5f:af:20:c8:cc:db:a6:
06:9f:d4:60:c1:3c:8b:8a:d6:2a:9e:3f:7b:f5:93:fb:0a:ef:
0d:df:2b:a0:c0:89:a2:52:db:da:ed:3c:29:f0:c8:14:e5:db:
21:f8:6d:ee:42:b4:a4:69:f1:5a:66:a9:0c:2e:7a:10:94:70:
5f:16:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:24 2026 by rpki-client