
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File: ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier: 1AuGeZlJNj0/FuwmyQO8JBpa+peJoFvtvvuufvT2QDw=
Subject key identifier: 34:FE:12:17:ED:F8:7F:5F:A0:86:B5:E5:6A:31:1D:AB:18:42:72:44
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer: /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number: 92
Signing time: Wed 19 Aug 2026 08:07:58 +0000
Manifest this update: Wed 19 Aug 2026 08:07:57 +0000
Manifest next update: Wed 26 Aug 2026 08:07:57 +0000
Files and hashes: 1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: 9MUc57LYVGp5OZKARsYUzkEa9dZs38Qlr5LrINlSIVk=)
2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Validity
Not Before: Aug 19 08:07:57 2026 GMT
Not After : Aug 26 08:07:57 2026 GMT
Subject: CN=6a85645e-cdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:77:b4:2c:fb:3b:48:35:3f:38:ec:b4:e7:
27:fa:91:be:e4:ef:1b:f4:75:50:55:a6:f9:a2:02:
ac:81:14:cb:85:09:ad:c7:12:f3:38:05:3e:f8:24:
b8:0b:bc:67:ed:b0:26:6d:35:a2:6e:64:55:ce:d8:
7f:44:2e:7f:53:36:04:34:aa:55:fe:fa:14:60:ec:
c3:22:29:d6:23:e7:ed:45:90:83:f8:6e:51:68:e5:
14:0b:bb:1b:f2:78:f3:72:a8:04:0f:57:bb:db:da:
63:4f:91:b2:4f:40:96:4e:74:16:76:dc:3f:b4:e6:
31:26:61:44:80:9c:48:17:bc:f9:7b:8c:5d:16:70:
4b:93:e8:59:2d:73:cb:b2:15:3b:cf:44:30:9a:17:
98:02:15:af:d9:85:ec:dd:57:db:a7:9b:55:68:81:
29:14:05:a9:69:5d:25:41:b9:07:6e:55:12:b7:5b:
cf:e2:19:43:f4:1f:4c:90:53:7b:a2:2b:01:e8:20:
2e:a5:44:5e:90:18:d4:bb:38:c0:f2:83:48:42:14:
08:6a:26:84:55:99:c5:1b:65:c4:b0:3d:84:91:6b:
4a:e6:46:b5:e4:5c:1c:f1:72:15:f0:1b:93:03:bb:
a5:3b:a7:bb:d1:26:d7:32:9c:49:7c:da:cb:93:c2:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FE:12:17:ED:F8:7F:5F:A0:86:B5:E5:6A:31:1D:AB:18:42:72:44
X509v3 Authority Key Identifier:
keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:a3:1a:da:7c:4b:25:44:fc:43:f3:42:15:23:95:8b:c6:80:
e6:54:ed:a7:54:9b:29:06:15:31:1b:35:05:bd:b5:a5:df:03:
4e:0b:c4:17:f4:bf:5d:8b:eb:7c:53:27:b2:ca:17:54:fe:90:
7d:02:00:fe:ec:b6:00:c0:dd:fe:f1:82:6c:7d:d4:97:28:f8:
b4:1e:5d:89:ab:a3:d7:84:c9:ab:8d:1d:e9:8e:36:b9:b8:36:
b6:c9:50:c8:32:45:74:3b:c0:62:0c:f1:15:96:88:da:f8:a2:
9e:ff:55:3f:83:a3:a9:26:7e:03:70:c4:a5:44:01:74:c6:38:
f3:01:d0:d7:7c:28:9d:7d:b3:7f:12:e4:9a:87:12:ed:e8:b8:
b8:f4:0d:40:d8:52:f5:09:34:f6:b9:fd:ec:96:76:33:bb:9f:
a5:ae:45:b2:38:30:00:cd:b1:02:c6:5d:e6:d8:be:7b:c4:69:
48:e9:cc:5f:4f:b0:5d:cf:d9:d1:cf:08:8a:36:b5:3c:60:e0:
4e:52:aa:61:44:d6:9d:4e:c6:34:80:a7:2c:d9:01:a8:33:9f:
b3:5f:6d:9c:bb:eb:dc:eb:b8:95:63:79:7a:21:6b:ca:31:e9:
8c:a0:76:9f:18:69:d7:1c:46:75:2b:5f:be:90:cb:c0:a1:d2:
5b:e8:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:27 2026 by rpki-client