
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
File: YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json)
Hash identifier: QpYiZVWtHjaq2zqdSVkdbDHQXqQQpSKswSDlIN26Lug=
Subject key identifier: E4:1F:92:CD:00:8A:35:15:90:3B:B8:B8:38:B5:78:B1:C5:7A:0D:D0
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Certificate issuer: /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial: 0663
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
Manifest number: 0652
Signing time: Wed 20 May 2026 22:42:59 +0000
Manifest this update: Wed 20 May 2026 22:42:59 +0000
Manifest next update: Wed 27 May 2026 22:42:59 +0000
Files and hashes: 1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: L6EkjWJoKMtLgraO8LAno6CavJbaByGHCKEezdrhLM4=)
2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: z3K78kKecVQMmJ50EY3GJXcrFCdRmrLxw9yA8ww2hMY=)
3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: 1uRa9qCZnC1NyVtsdBrtA6UVUVTLZi1rR+2Ai/+6L3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Validity
Not Before: May 20 22:42:59 2026 GMT
Not After : May 27 22:42:59 2026 GMT
Subject: CN=6a0e38f3-b6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:79:f1:76:e7:a8:1d:d9:f9:5b:24:cd:dc:
db:24:37:17:e0:fd:b5:ce:d9:3a:11:92:7d:76:46:
c7:c9:f1:5f:0e:44:5a:ee:76:4c:3a:32:f1:db:97:
ff:07:0a:be:02:11:c8:9d:ae:a1:3d:ec:ef:ac:0a:
78:fe:c6:92:e3:fb:bd:76:62:64:9f:d5:2e:26:93:
e8:e8:7c:72:cf:17:9a:32:ba:6f:15:a0:7e:df:cc:
ef:7e:13:2b:8a:d0:94:4d:3e:7e:a4:a2:1b:49:a3:
e5:e5:1f:53:65:c2:fb:db:b3:6e:8b:53:f2:29:cc:
7f:76:ec:c9:36:d6:fb:53:49:52:48:6e:61:15:64:
e4:8b:4e:97:08:f8:c9:4b:d7:09:9b:28:67:4a:5a:
e9:b1:4f:fe:63:f5:44:2e:da:47:d9:19:5d:7c:ea:
70:6d:39:ea:79:ab:5d:42:46:df:f6:29:a1:63:58:
33:c3:43:dc:1f:55:3e:25:87:9d:f4:68:6e:01:9e:
50:fe:72:ae:89:ce:3e:0d:2d:84:c8:b4:36:83:ac:
64:16:d7:ab:b6:b4:d8:59:55:ed:5b:f9:cc:82:53:
60:4d:fa:ad:09:cb:e7:19:6e:59:2d:bb:65:dd:06:
55:1d:0b:22:3f:b3:da:77:a5:f1:08:5b:aa:fc:34:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1F:92:CD:00:8A:35:15:90:3B:B8:B8:38:B5:78:B1:C5:7A:0D:D0
X509v3 Authority Key Identifier:
keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:62:8f:e1:06:3e:bb:2a:94:ec:2d:58:fb:d8:c2:04:04:66:
1b:52:f8:8e:01:8c:16:72:48:f8:92:ee:9a:aa:b9:24:c1:20:
ba:ea:e5:6d:43:59:8d:71:bd:2c:71:92:1f:ec:f5:9e:29:ad:
59:12:bf:f0:81:19:0e:24:c8:72:72:c5:53:bc:5e:2a:fa:c7:
a3:f6:77:17:6e:33:4b:ef:8e:7a:d4:10:ec:88:f5:be:4c:1c:
e6:32:3a:7a:4d:05:6a:f0:67:19:3f:2e:b8:ca:13:13:51:6e:
6e:80:69:90:dc:da:4a:e8:c1:8f:5a:6d:6d:e3:77:33:d6:db:
7e:db:9c:2e:67:b6:84:cb:02:3b:d8:c1:a0:94:a1:ad:e0:43:
b2:4a:a4:f1:f5:4f:d2:8d:9c:7b:e6:11:b4:47:f2:0a:d8:94:
6f:99:ed:46:40:53:fc:9f:b9:48:38:75:1a:3f:b2:33:e2:4d:
a5:a6:ee:47:d7:47:9e:9f:25:1f:b3:c5:2c:7d:c5:58:1c:c3:
5b:d9:95:6a:57:d9:b4:8b:e7:c7:d7:98:43:60:55:4b:0d:2d:
b8:bb:30:ca:dd:46:97:19:14:c3:6c:22:cc:0c:5c:e5:65:c5:
3b:05:48:49:8d:14:cf:b1:c4:e1:c3:f7:3c:eb:93:df:a7:65:
14:71:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:44:03 2026 by rpki-client