
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File: ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier: KbRn+BvMLy2lYc1l3Cs8WhSTn5PfNLzARacO4z1RCSw=
Subject key identifier: 46:60:EA:59:6E:B0:9D:9A:2E:88:2A:E9:3D:90:C1:84:76:FC:64:60
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer: /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number: 7B
Signing time: Sun 05 Jul 2026 08:24:35 +0000
Manifest this update: Sun 05 Jul 2026 08:24:35 +0000
Manifest next update: Sun 12 Jul 2026 08:24:35 +0000
Files and hashes: 1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: 8B60KEOgwEpyJ28+c4+JnbQhJk5+crLIAueM7qW2gAo=)
2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Validity
Not Before: Jul 5 08:24:35 2026 GMT
Not After : Jul 12 08:24:35 2026 GMT
Subject: CN=6a4a14c3-abb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:44:45:b1:01:ce:bc:da:c0:46:0e:59:6d:
85:4e:dc:66:f0:e2:de:14:a0:54:9d:66:97:1b:43:
ac:f3:f9:6d:45:e0:3e:34:72:f3:ca:aa:2e:8b:7a:
d4:be:20:04:f1:1d:98:07:ee:cb:22:f4:f6:a3:50:
fd:79:f2:30:72:74:f1:bf:ee:6d:67:05:44:ea:f4:
63:81:80:0d:60:c1:6b:87:d3:e5:1b:2e:ff:b7:f1:
5f:5f:0d:0a:ca:77:e7:4a:03:62:39:82:4e:3a:fd:
6e:87:09:08:15:6e:f7:90:ee:77:8a:23:bb:ae:2d:
a2:26:bb:ea:1e:7c:27:94:00:63:af:6f:9c:05:0e:
17:fb:66:a2:63:09:01:a2:ba:72:b7:4d:f5:5c:08:
21:63:1d:bd:ce:da:32:a4:b5:95:c4:d2:c9:0d:56:
33:1e:e3:d7:e1:d5:8e:a0:cf:d4:40:6b:b7:67:46:
9d:5e:d9:78:14:ba:d1:77:96:ac:85:6c:4f:dc:9c:
f8:6a:02:1f:90:65:cd:97:a6:5b:d8:b6:69:a8:2f:
7d:91:76:47:81:41:a4:fc:f7:7c:71:7c:48:56:f7:
63:f5:49:1d:91:26:4a:83:e3:61:14:c9:03:46:73:
62:0d:67:49:87:f8:93:4f:cc:76:b5:e1:79:4c:ba:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:EA:59:6E:B0:9D:9A:2E:88:2A:E9:3D:90:C1:84:76:FC:64:60
X509v3 Authority Key Identifier:
keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ca:93:18:68:5b:8e:96:c3:5a:92:ed:79:a2:ea:2f:d4:7c:
88:05:1d:7c:6a:f0:46:ba:87:46:ce:9e:06:e0:26:99:ea:44:
4a:4f:66:7b:bf:2d:eb:d8:98:07:91:84:4d:64:88:1a:dd:60:
b7:e6:c9:4d:58:d2:e8:cf:0e:fa:c0:55:f4:d3:82:dc:72:4d:
12:c9:51:23:cf:70:0f:a9:2d:80:08:1f:4b:cc:ab:e9:55:cf:
e5:15:e8:96:60:3d:27:19:26:b3:3b:c8:ea:f4:16:fc:fe:4d:
0d:a4:64:34:37:51:d8:11:da:6c:98:02:53:3d:0c:4f:45:53:
d0:d6:e6:49:ec:28:63:53:b4:64:5f:cb:65:5e:07:58:7d:59:
87:d0:e5:88:9d:be:40:4d:7f:ef:58:04:8f:68:56:3f:c1:b3:
01:05:fb:38:ba:70:8a:79:f5:b3:18:f9:c6:df:45:06:88:12:
ca:da:2c:de:dd:ad:9f:27:43:a0:0d:96:09:04:c6:65:fc:f6:
9f:7a:ca:b8:df:9f:e6:d0:c1:85:ac:6f:4b:ed:23:05:f8:a6:
ec:10:88:4f:09:5c:77:a9:c4:6a:97:f4:89:21:a1:41:cf:9b:
34:aa:64:c7:df:54:27:99:01:8e:ff:18:b1:07:6e:36:de:ea:
d9:d8:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:34:37 2026 by rpki-client