
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier: EwxPrOlG4WRoAbggjIblFLQxvS7U9ste0nIGuHX2yyI=
Subject key identifier: 17:F4:B6:92:83:3B:4C:ED:08:8D:10:BB:31:56:9F:42:DE:F2:F6:DB
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial: 0780
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number: 1791
Signing time: Wed 20 May 2026 17:26:42 +0000
Manifest this update: Wed 20 May 2026 17:26:41 +0000
Manifest next update: Wed 27 May 2026 17:26:41 +0000
Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: R34h5WZSB/g0zSjcOg3kfVB3ixBcVRe3zpqKpOfO62E=)
2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: 9Zoz24dEkJzt6FtyKQFuBZJoAm4QCrA8VXW1adYN8sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920 (0x780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Validity
Not Before: May 20 17:26:41 2026 GMT
Not After : May 27 17:26:41 2026 GMT
Subject: CN=6a0deed2-3eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:78:54:82:92:0f:7c:96:04:29:0b:dc:94:6e:
eb:db:26:42:d2:fd:7c:47:ee:ea:22:8b:95:44:90:
c6:47:86:25:56:70:2b:26:66:c4:a2:e5:82:e8:1f:
1f:76:e6:0d:2e:ff:47:31:64:cf:ad:c1:92:92:52:
e4:76:85:d5:b6:79:ed:ef:98:ec:ec:da:65:e0:c5:
fa:1a:45:74:a5:7a:5b:8e:eb:ab:19:50:e1:4d:18:
0b:42:96:6b:69:3e:79:a5:04:71:43:ff:d5:f7:f3:
cd:c1:26:be:c8:d7:e0:63:1a:6a:47:62:7c:bf:b7:
45:0c:b9:90:49:f1:3e:77:a7:87:19:c9:ed:4f:4f:
ce:b1:4e:1e:77:58:af:81:3b:b1:e3:c5:31:53:3e:
c2:e5:f3:b5:f5:09:9b:d1:46:2c:a1:9b:f4:d4:f5:
d1:85:c9:91:69:22:8a:44:80:1b:20:76:f1:95:4a:
1c:84:38:88:51:54:7e:0c:ee:de:53:e0:9b:14:ca:
eb:a3:95:9f:47:7c:93:e3:c7:2f:17:12:66:2f:6d:
b0:96:da:c2:c1:cd:31:cf:00:ee:16:91:0d:eb:86:
7a:2b:b4:4b:6a:db:ab:35:e2:3a:82:00:21:db:4c:
2e:41:b6:83:1d:c1:c7:f3:b7:ff:48:39:4d:2e:8d:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:B6:92:83:3B:4C:ED:08:8D:10:BB:31:56:9F:42:DE:F2:F6:DB
X509v3 Authority Key Identifier:
keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b4:9c:5b:ab:2a:d2:07:60:bf:09:33:fe:47:59:8b:7c:29:
4b:86:89:27:9c:09:48:4b:78:81:b8:d0:e0:58:c8:07:20:99:
fe:50:7a:f8:31:da:09:15:1f:2d:98:4a:4e:dc:58:2f:0e:d8:
c0:71:30:1d:b7:81:3e:8f:7e:1f:f4:f5:8e:36:07:f8:21:46:
d3:d7:e2:72:bb:2d:b2:4b:64:a4:6a:f2:4b:73:e0:2a:41:b5:
d1:6a:dd:34:19:0e:9c:40:be:39:9f:92:1a:e1:40:45:25:ea:
02:06:47:b6:d9:13:e8:79:93:32:26:30:02:0d:0c:8d:db:0b:
54:68:61:71:5d:e2:91:1f:89:59:5d:3a:2a:cb:59:89:16:e0:
f6:84:7a:15:62:13:22:3a:2c:10:6d:f4:52:cf:5e:5c:b6:9f:
70:e7:aa:bd:ab:c6:f8:5f:e3:8b:41:3b:6c:c9:76:b4:ef:6f:
9d:ea:1d:55:84:f9:18:17:53:37:b9:fe:e2:ed:6e:f4:3b:b6:
bd:93:99:69:78:dc:02:f2:08:ad:88:50:70:f8:e7:ce:f9:6d:
18:fa:f3:64:05:47:a3:64:48:4a:0a:4b:f2:4d:49:5a:e1:61:
11:32:cb:61:8e:a4:56:2d:d4:eb:d5:cd:fe:76:d0:f9:e4:aa:
9a:b9:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:09 2026 by rpki-client