
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
File: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json)
Hash identifier: 2kwpag+Yn8oRAvIJsCUP0JmbPsJ6L98VXBv+JRov3hs=
Subject key identifier: F2:80:A4:63:D4:08:16:FC:45:3E:F5:EE:65:4F:8B:B3:C8:A5:7C:04
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
Manifest number: 8C
Signing time: Tue 19 May 2026 07:23:48 +0000
Manifest this update: Tue 19 May 2026 07:23:47 +0000
Manifest next update: Tue 26 May 2026 07:23:47 +0000
Files and hashes: 1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: OXUFQZC/1Db4ze6GexNCumTjN0VCEzCKolFYDO/PBCk=)
2: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: gKh2lmx6ZZYyw96B7i0NN7NG7ZPJA6ncWMPAGGPkE84=)
3: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: gAF8NOxTri4lmRnjfw1NrjD/U5F8xAKVG+vonQB71no=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 07:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Validity
Not Before: May 19 07:23:47 2026 GMT
Not After : May 26 07:23:47 2026 GMT
Subject: CN=6a0c1004-5896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:10:49:7f:46:80:a9:87:01:fb:c9:15:68:
8b:a5:a1:1e:60:b9:a3:22:8c:ce:fa:09:fd:8c:2c:
04:25:86:fc:a7:66:f9:3a:10:98:5f:98:2e:dc:9e:
1d:27:19:9f:fe:3a:a7:23:07:7b:6c:f1:d8:c1:46:
dc:5c:d4:87:1c:a2:ea:74:a3:17:c3:70:9d:4e:8c:
b6:d9:ea:66:17:ed:f6:5e:7d:1f:88:a7:ed:62:42:
09:5d:96:08:d4:03:3f:55:f6:10:da:10:0b:75:b2:
cf:56:f6:f8:12:84:b1:ca:41:6d:1d:db:02:0d:1b:
2a:bd:b8:b3:3f:4b:da:74:c8:9e:59:39:09:2b:23:
79:78:2c:07:a7:5b:7a:3d:0c:0f:c2:ea:68:9b:70:
8b:cf:a4:9f:31:8e:7c:8a:82:aa:db:5a:81:98:4c:
5e:9e:15:ac:18:ff:5c:61:db:c4:41:2b:24:4e:15:
ba:9c:97:7f:d6:0a:00:24:8f:e9:b6:dd:dc:3d:ba:
bf:d9:22:97:21:ac:8a:54:30:3d:d1:9d:cb:ee:2d:
4e:49:0f:b6:f9:7d:97:dd:f3:a6:2d:7a:7e:fc:c1:
ca:71:56:d6:52:6d:e2:89:d3:d1:de:2c:4a:e1:69:
ea:b5:30:3f:8f:af:23:8f:53:bd:94:84:c7:a5:27:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:A4:63:D4:08:16:FC:45:3E:F5:EE:65:4F:8B:B3:C8:A5:7C:04
X509v3 Authority Key Identifier:
keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:02:a4:30:a7:09:00:a5:13:1a:36:72:5d:4f:6f:01:90:f0:
2c:87:b4:62:4f:75:2f:2f:3e:c6:2c:3f:3c:31:34:75:25:9c:
8b:97:f6:90:44:fe:ed:6e:f5:21:e5:a0:2e:fd:04:f8:d3:f8:
37:a7:e6:74:02:88:70:f8:a7:e4:24:cb:f5:dd:74:2a:a1:31:
09:24:6b:42:2f:8b:b7:30:f7:b8:b9:ed:07:69:ce:be:38:3d:
a7:9b:df:26:82:1c:34:9f:61:52:29:37:74:92:31:cf:80:52:
ae:4a:9d:ee:af:3b:24:69:5f:e7:5c:16:8d:23:fe:4e:61:e4:
0d:18:c1:48:b3:ea:89:4f:6f:15:7e:bd:22:73:f0:db:39:b9:
9d:23:9f:ce:7c:23:55:53:03:b5:22:cf:f0:3d:84:f4:f6:f0:
d4:c5:26:52:89:a7:89:c1:5f:ee:13:7e:cf:21:e4:55:6b:8b:
de:c6:ee:48:a3:af:c1:92:ce:01:1d:fd:cc:dd:19:7e:6c:31:
74:86:6c:52:b1:b9:c4:b1:1e:34:81:e5:ea:4c:d9:3b:2f:bc:
40:d5:70:a7:60:56:ff:0d:0c:d2:b6:bb:82:89:fe:06:9f:5a:
69:4d:2c:a6:1e:8e:9f:bf:1f:c0:7f:2f:e6:5c:09:58:db:3c:
de:a0:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:44 2026 by rpki-client