
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
File: YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json)
Hash identifier: 82qVdd3T1jh2GEDOEFY96wwEGqRcocIwjyMsvuup9R4=
Subject key identifier: 95:30:6C:13:38:0B:7F:50:B7:A6:AE:FE:9B:D2:7D:48:5E:4D:4F:79
Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
Certificate issuer: /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
Manifest number: 013E
Signing time: Sun 05 Apr 2026 04:45:56 +0000
Manifest this update: Sun 05 Apr 2026 04:45:56 +0000
Manifest next update: Sun 12 Apr 2026 04:45:56 +0000
Files and hashes: 1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: ek7DxIcP/Z4WPCJl3dfTU2/pz7hJkgzH9OqBpaq9Y+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD1F9, serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Validity
Not Before: Apr 5 04:45:56 2026 GMT
Not After : Apr 12 04:45:56 2026 GMT
Subject: CN=69d1e904-d1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:22:f6:92:ef:04:d1:eb:69:41:0e:38:32:
d4:70:b3:7e:2e:31:fc:9b:0f:09:e1:7e:a2:75:15:
3a:2d:b1:56:a0:3d:0c:2c:0e:71:2a:9d:21:00:d8:
c6:45:cc:fa:19:9b:0e:11:08:d4:1b:9d:66:f6:4b:
6d:1b:39:7c:ac:b0:72:cf:d8:4b:fd:9b:5d:bf:72:
83:db:ac:71:b6:03:5d:66:ee:3b:ee:60:4c:52:63:
1f:a7:f6:9f:7b:26:47:ac:4d:43:76:98:8b:5c:3f:
27:03:f1:6d:1b:76:d8:b7:db:43:0b:97:86:54:e3:
37:1b:c4:f9:f5:bd:dd:3d:89:c9:b7:c3:5f:d3:a1:
a1:dd:c7:3b:74:b0:35:2f:c4:18:67:e4:d9:27:4e:
7a:79:c1:76:e6:da:da:cd:95:89:c8:ac:19:5d:69:
ce:1c:35:5b:30:2a:d9:94:0e:26:51:30:0e:42:8d:
b1:39:d4:bf:d3:b0:2c:36:bd:3f:00:d2:04:f6:54:
1f:77:ab:9f:c5:40:77:01:cc:56:80:e4:e5:7c:6a:
21:ca:0a:9d:4a:50:16:05:f8:52:ba:a5:05:9b:2a:
43:b4:4a:eb:06:be:22:b4:2c:9f:a8:e2:ec:7b:db:
ae:62:f2:54:85:cd:68:03:2d:cf:28:b8:74:66:34:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:6C:13:38:0B:7F:50:B7:A6:AE:FE:9B:D2:7D:48:5E:4D:4F:79
X509v3 Authority Key Identifier:
keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e0:1a:84:d9:3a:6c:fd:fd:80:a7:38:93:c1:bf:25:7a:99:
2b:f4:d3:27:5d:8f:37:5f:b3:f6:c9:31:5a:3e:3e:c0:78:6f:
4a:27:48:e2:76:c1:65:19:31:c8:b9:8c:a5:c2:2e:37:0e:fd:
e4:54:74:9d:c8:b3:e9:bc:83:73:85:c9:72:30:d1:01:fe:73:
84:03:0d:35:0f:37:37:5b:6f:73:38:21:b8:11:f1:ba:43:9b:
8f:41:aa:d5:42:d1:ab:b5:24:c3:97:08:4d:9d:76:79:86:78:
50:b5:a8:f5:49:41:18:0c:b7:02:4b:41:20:d7:cd:65:12:c4:
9c:6c:9b:7b:28:76:f2:70:93:4e:6f:5e:fc:db:b7:05:b4:26:
28:d1:fd:fb:19:9d:85:48:86:03:a2:0e:3a:a5:d1:f0:51:7a:
4e:ea:9f:e3:cc:d8:41:ac:b0:a1:83:2e:ce:7b:88:da:fa:6e:
6f:c8:ec:74:94:6f:99:48:45:b6:b9:e7:c2:49:ee:b9:c0:cd:
eb:02:f1:0b:63:0e:38:ec:d8:3d:c1:c9:f0:5a:39:50:5c:3f:
5f:d9:15:de:d2:ac:9c:26:6a:a4:f4:57:5d:c3:2a:6a:b8:c0:
47:6a:11:5f:8d:ae:24:32:36:d7:90:35:22:84:3d:90:45:04:
c1:71:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:34 2026 by rpki-client