
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json)
Hash identifier: eUzXSnVwRH75hafvKjaH9VKPQaZShEhRIe97JWAFG/c=
Subject key identifier: BF:FB:D3:23:EF:49:D3:3C:2C:98:D7:D0:E7:AE:3F:2F:8A:0A:77:2E
Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Certificate serial: 06CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
Manifest number: 06BF
Signing time: Sat 04 Apr 2026 22:08:07 +0000
Manifest this update: Sat 04 Apr 2026 22:08:07 +0000
Manifest next update: Sat 11 Apr 2026 22:08:07 +0000
Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: tVBPzry0y7drgNaEaWK9LMZl9ObI2Bm1WIzz0wlUJVs=)
2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: crMuBoqElTDMkWwf4m/QaNXTW9zQWs2tJYADmx9RNs8=)
3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: Nfcn1fK1HwoYaeFVOcyd5nU5erIz84W+2IeeBYePHDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Validity
Not Before: Apr 4 22:08:07 2026 GMT
Not After : Apr 11 22:08:07 2026 GMT
Subject: CN=69d18bc7-ad85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:20:47:54:ab:7c:a2:0b:ad:8a:47:48:3e:
c7:74:1a:35:57:af:2a:cd:a7:ec:48:ed:b8:4b:32:
75:02:8e:29:55:3d:64:fc:2e:26:3e:70:8f:a9:7c:
5b:80:26:03:21:63:e3:95:fc:ba:6b:51:1b:3c:96:
a5:17:e6:3f:d3:d0:85:ff:ec:8c:89:b8:05:59:e0:
f9:8c:26:b0:9a:09:76:05:55:60:a6:97:96:84:72:
8b:70:e8:13:96:1d:fe:3e:37:a3:03:11:c9:4f:b5:
9c:59:bd:06:cc:3d:6b:9f:94:64:5d:dd:65:4b:d8:
b1:63:0a:e2:ce:e4:a2:b9:d9:98:e0:9f:4e:56:f3:
48:7d:d6:ad:de:15:c2:17:65:08:d1:3f:ca:d5:4a:
0a:12:cd:09:5a:28:27:15:7b:83:69:7d:35:57:68:
12:4d:79:fa:e5:cb:90:ef:bb:77:6f:b1:a5:f1:98:
1a:98:ec:75:c4:c7:9a:42:9e:05:c8:52:35:5c:b2:
d0:a6:12:e9:d5:62:62:16:44:47:f6:a7:39:61:ee:
9d:2e:12:96:ad:0c:a6:d1:06:a1:18:a1:64:b7:8f:
8c:d5:a6:1a:38:db:e8:b4:0d:f9:48:c3:e9:f0:69:
90:63:d0:5e:ac:b5:d5:2d:9f:ad:2b:35:8d:9d:d8:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FB:D3:23:EF:49:D3:3C:2C:98:D7:D0:E7:AE:3F:2F:8A:0A:77:2E
X509v3 Authority Key Identifier:
keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:66:cd:a3:51:7d:0f:19:5f:96:cd:5d:73:6d:93:41:de:96:
9b:a1:6e:41:9e:80:24:d6:c3:78:9c:d2:01:09:a6:5d:dc:ec:
23:ce:1e:c2:ba:d4:04:1b:dd:49:3f:38:4c:b3:56:b3:50:ff:
9b:91:27:f5:87:7f:56:b5:b1:e6:9e:5f:3a:af:d0:f5:38:3a:
2c:ef:35:cd:ab:e2:52:b3:98:41:59:a8:91:00:b9:bd:dc:e5:
89:e2:52:1c:b1:3d:09:20:a4:27:26:d1:01:dd:39:c0:b4:d1:
c9:d2:ad:8d:72:87:75:7b:71:dc:63:aa:e1:bc:68:5a:88:6b:
91:b5:2b:6b:9a:2e:c7:db:ff:4d:d0:a4:54:68:d2:f5:b1:08:
44:19:16:90:87:4e:a8:30:4b:e5:48:01:bf:66:dc:6e:0b:cb:
f7:b2:bd:16:fd:f1:53:29:48:a6:77:8a:e0:2b:37:ca:fc:63:
af:16:9c:37:c3:02:34:bd:b4:f4:88:61:7c:d3:6e:c2:9c:a3:
32:0d:cd:f6:07:39:ec:14:d0:02:f9:bb:a7:50:d5:81:4d:85:
05:29:14:cc:e6:40:9f:02:d0:55:f2:59:b0:b1:d3:ee:34:85:
23:79:b4:b6:3d:44:d8:bf:dc:4c:ea:97:f6:d9:94:be:25:3a:
d3:e9:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:37 2026 by rpki-client