
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json)
Hash identifier: /Tt4KlnVRtShYJcP8Ky4iCVwueDpB4EGyp4sqWDnU+c=
Subject key identifier: D8:79:48:B5:67:6D:3B:6B:C3:13:EE:45:FD:65:28:54:AA:E9:98:F9
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
Manifest number: 6F
Signing time: Sun 05 Apr 2026 07:16:59 +0000
Manifest this update: Sun 05 Apr 2026 07:16:58 +0000
Manifest next update: Sun 12 Apr 2026 07:16:58 +0000
Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: aQ5PLsp16FHpk9rdQSLFAY/fBwZ1+UpADzV0w7zA9V4=)
2: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: Cadr/xUb1+0gVtL0k3xW6zkBh+JLJ5ZTxdWq64WB59k=)
3: 11CCFCD8DB0B11F0BC36350982D3641D.roa (hash: iqoDOOCu/fngDkkSni/oqHyjislrgnbGvgYBpgWoetA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Validity
Not Before: Apr 5 07:16:58 2026 GMT
Not After : Apr 12 07:16:58 2026 GMT
Subject: CN=69d20c6a-e052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:d4:77:8b:9c:f4:4d:cb:60:6e:12:0b:d5:
b0:28:c5:0e:87:1f:11:ad:f2:d9:b7:f5:7d:2b:6e:
43:b4:b4:57:76:02:81:fe:6e:43:f2:2e:4d:be:99:
63:e3:29:50:02:72:6a:5d:ac:da:5d:13:8f:6b:78:
fe:4a:a3:b5:d1:ce:7f:c0:bd:d5:77:5e:a3:15:fc:
01:b3:8e:f9:da:7a:42:32:57:0b:07:8f:88:fb:75:
26:04:1d:8c:5b:e3:f8:89:b9:c7:15:09:c5:e8:95:
12:f4:d9:33:49:98:ad:42:fc:7e:f4:bd:ea:36:cd:
3e:29:b6:20:27:c0:dc:25:ee:90:70:d1:27:0d:0e:
a2:5f:94:15:e8:b1:0b:cb:3a:c2:b9:e3:a9:81:2e:
2b:50:54:f6:cc:57:d2:61:e6:e9:37:4a:0c:e6:c0:
dd:29:eb:ee:1f:04:96:33:33:68:4f:30:e1:45:14:
f5:64:72:7a:5b:3f:c8:32:7d:4f:3e:66:67:d5:0e:
cd:92:da:aa:cd:d6:a5:06:98:51:57:fd:4e:c1:a7:
c4:0d:16:d8:5b:70:b7:e2:d7:d9:08:7a:d3:5f:c4:
d8:7b:b0:15:49:e0:18:1e:b6:70:c7:fb:00:44:a2:
d3:95:e2:37:6e:88:60:68:90:dc:fe:30:c5:39:93:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:79:48:B5:67:6D:3B:6B:C3:13:EE:45:FD:65:28:54:AA:E9:98:F9
X509v3 Authority Key Identifier:
keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:2f:3b:b0:2f:49:6e:5e:35:f3:65:9e:43:71:6c:74:00:ea:
63:ab:d1:36:a4:49:16:ef:e8:c1:64:5e:f7:d1:6b:8d:96:07:
63:fb:c7:59:99:17:09:1c:99:c0:4b:b6:8f:d7:93:ee:85:26:
91:0c:4f:f9:1c:c1:04:cf:8a:e9:f7:4d:20:48:15:d4:4e:6c:
2d:a9:07:88:54:88:95:00:0e:d6:c6:71:6b:95:fe:65:21:73:
f9:50:dd:08:9a:40:f2:51:b7:85:5e:4b:8a:be:ac:a1:ae:24:
40:1f:7e:b4:f0:f0:cc:43:9c:88:d3:7f:b5:31:62:df:da:b3:
c3:9c:e8:1f:a0:bc:11:41:32:61:90:c9:0b:5b:6d:7c:61:d0:
49:e6:24:19:17:0e:18:e7:6a:02:b1:9a:c4:65:ad:e1:ba:5c:
17:fb:0d:7b:6f:5e:61:65:81:c8:b2:84:e8:9c:3c:1c:bb:74:
f2:ae:f2:a3:a9:62:de:f3:58:2a:5b:52:65:42:37:89:0d:44:
8f:54:cb:1e:9b:3a:14:5f:20:41:4c:02:52:67:a3:20:87:eb:
88:d5:0f:6f:88:80:1b:ac:84:bd:2e:d8:f0:c1:82:5a:7d:eb:
c8:ef:df:d8:49:90:74:ec:6a:01:c5:42:a7:6f:c7:54:29:96:
3b:d3:7d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:58 2026 by rpki-client