
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier: pDYc2Q8OSjbh5+icsMzUUklZkmdZyVdEY2S5hgVXztY=
Subject key identifier: 99:6F:1D:83:82:CA:9D:80:8C:D9:B1:1E:55:25:35:BF:AA:B2:8F:CC
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number: 0156
Signing time: Tue 21 Apr 2026 04:55:26 +0000
Manifest this update: Tue 21 Apr 2026 04:55:25 +0000
Manifest next update: Tue 28 Apr 2026 04:55:25 +0000
Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: /xQsdYMisSqHv0fSebCMCrGZrjWVlNEc1BlFWNopbv4=)
2: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: QjR9A/HMp05od+zO3VCnyHZYpiHXbBVwXb61oJSOZeY=)
3: 09F2AE3EF36811F0BB995E0C666F56BC.roa (hash: 3qyXQf9X9ypzRtr6ed01ZGzQMiK+H459JYw687uWAE4=)
4: 09799D96F36811F0BB995E0C666F56BC.roa (hash: k3tbTsuNd/0VaZo35U6WBx+uMYBIhVnOPOnYzqjLUfs=)
5: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: iZo2C57Z9aeJt224wtweP1I+ZMSYFsBAndFJeCnjn1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 04:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Apr 21 04:55:25 2026 GMT
Not After : Apr 28 04:55:25 2026 GMT
Subject: CN=69e7033d-b7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:c0:09:c7:8e:2f:49:0f:3e:88:0e:f3:43:
50:fc:87:dd:ba:e1:6c:04:9b:77:3b:bf:40:15:62:
49:67:be:0f:d2:ee:cf:a4:ff:ae:ca:f4:45:f4:bc:
61:89:c7:75:a9:34:17:97:7c:7c:f3:d0:a7:e4:b3:
57:38:45:5c:27:30:66:56:c5:fc:40:93:11:9c:16:
00:d3:79:95:00:1e:3b:03:74:f6:04:2d:36:c2:f0:
2c:31:66:17:0e:c2:80:87:db:f6:cd:d5:90:27:ec:
a4:17:87:be:39:63:88:f3:0e:bc:c5:9d:c2:17:dd:
5d:5b:41:4f:a1:16:a0:6d:ac:20:e0:a1:f3:d2:89:
fd:06:96:fa:4a:9e:b3:f1:c8:8a:52:1b:d0:8d:7e:
67:88:59:4e:7b:ab:1f:68:23:6c:52:d0:34:b9:78:
18:68:43:54:41:66:d1:87:97:c4:6b:8f:ab:2f:91:
39:c5:ed:e6:57:50:e3:8e:b4:a5:a9:43:85:ca:98:
6a:70:fa:58:55:86:22:b5:7b:6a:db:b9:6f:03:b5:
ec:60:b7:56:d7:8e:35:25:f2:cb:ed:f6:89:33:f5:
84:1e:bc:45:25:c7:3f:75:46:15:76:cb:fd:25:ad:
60:e0:73:f0:4b:80:70:5c:cd:ed:a3:8b:a6:f4:d1:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6F:1D:83:82:CA:9D:80:8C:D9:B1:1E:55:25:35:BF:AA:B2:8F:CC
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ee:8b:a8:97:88:01:c1:02:69:87:51:98:94:a8:77:de:4a:
fb:a1:de:bd:bf:67:e9:72:86:7f:c1:9b:aa:cf:bc:00:70:db:
3e:39:65:fd:d3:0f:dd:60:b8:38:1d:a5:8b:69:95:cd:5d:0d:
c6:62:c0:31:f7:f8:d9:cc:76:17:fe:e6:8b:e8:6c:dc:9d:21:
8c:35:7c:f6:aa:d7:28:bd:c5:a9:c6:dd:9b:68:a7:db:95:d3:
ab:d1:e1:b8:84:eb:3f:71:15:89:3e:91:73:f5:57:80:da:35:
54:96:6f:eb:89:37:8f:98:51:7b:77:e7:b0:66:3b:20:25:40:
a0:87:52:eb:09:e5:80:42:75:cb:1f:49:c8:2c:96:41:5a:80:
72:0f:12:34:ac:6b:bc:40:9a:f2:42:b2:17:41:54:09:27:b7:
d1:e7:76:7d:2d:34:0f:fe:a1:a5:cd:de:1b:2d:c5:6e:2f:47:
bb:f0:30:1e:28:1b:ea:69:23:67:32:1a:ca:1a:a3:48:0a:67:
a1:86:35:7c:0e:4c:3e:e5:de:41:f6:7b:30:d8:f6:d7:29:cc:
87:6a:e5:82:a4:ed:94:8f:f2:a7:a0:1d:7e:a0:a1:71:36:ae:
81:f9:74:be:59:90:7a:68:41:ca:63:be:54:5b:f3:e4:83:d5:
e9:16:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:30 2026 by rpki-client