
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json)
Hash identifier: Rfle8u8z+QoaRXsTDzHUTMFdPjXPuUIcA39EO88caHQ=
Subject key identifier: 68:FB:9E:04:7D:35:4E:4C:8A:D4:B2:C9:74:07:16:B5:C4:84:73:42
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial: 3591
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
Manifest number: 356B
Signing time: Thu 04 Jun 2026 15:01:44 +0000
Manifest this update: Thu 04 Jun 2026 15:01:44 +0000
Manifest next update: Thu 11 Jun 2026 15:01:44 +0000
Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: aXgcccXvbk1eBnsUIMRUGU/DO+B41B0NzXEWGBKHQFQ=)
2: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: OqYW8F4250vX2cVPr/WKUGN/bLRsN60JeF92JnIapyY=)
3: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: m731XVB6b1xAGYHDb9IkvhodV8wFo5nHOoj74jQNmhY=)
4: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: hOPjAACYFIMnZpYQK50BQrHSZKRavg8kb8cFoUPdabA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13713 (0x3591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Validity
Not Before: Jun 4 15:01:44 2026 GMT
Not After : Jun 11 15:01:44 2026 GMT
Subject: CN=6a219358-4e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:91:7d:dd:b8:06:90:c3:61:38:80:f8:44:
90:dc:78:d5:e0:43:12:7d:d2:32:76:47:8f:3e:67:
4b:e3:06:87:a6:45:09:24:83:f7:1c:d3:8e:82:bf:
0c:e1:b4:97:d3:e2:a6:cb:27:cb:81:59:c4:57:3e:
e1:61:75:2a:13:4e:62:08:17:60:cc:d9:63:ba:8a:
ce:ea:3d:27:b8:87:df:89:88:f7:99:e4:e6:b0:70:
53:51:04:af:10:1a:a9:90:d7:90:82:04:8e:c4:77:
42:16:a7:3b:b8:71:3e:63:c1:5f:90:9c:ae:0f:3c:
3b:30:ec:1b:96:e4:95:91:9a:20:d1:8d:9d:18:74:
85:28:c5:97:06:40:ff:a1:fd:4f:62:be:ef:5a:b6:
c9:e4:18:19:7a:09:ae:f7:71:a1:cd:9c:d0:e2:7b:
d8:62:be:aa:f2:6e:24:a7:77:1d:a8:3f:31:a8:08:
22:b3:15:34:f4:88:e4:e5:71:47:19:f9:e9:f0:9f:
e5:2b:f9:61:70:6f:36:1b:df:31:0a:d7:03:e5:09:
66:ec:67:52:07:40:bc:09:88:e7:12:82:ed:40:ea:
0f:2a:42:d4:3d:fa:3c:a2:50:4c:53:63:1f:c2:8c:
3f:b4:cd:6b:25:35:20:75:2d:c6:b5:38:92:92:67:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FB:9E:04:7D:35:4E:4C:8A:D4:B2:C9:74:07:16:B5:C4:84:73:42
X509v3 Authority Key Identifier:
keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a4:14:ea:80:c5:c9:12:d3:7c:9e:c1:b7:f1:69:79:c7:1f:
fc:80:e8:1c:4e:29:c9:5c:3d:5c:7f:cd:9b:24:e4:da:12:e9:
a3:11:31:1f:69:8e:66:45:5d:33:fa:8d:23:a9:ec:07:30:85:
4b:31:d5:45:0c:de:1e:55:31:bb:a7:5b:df:0f:fc:4f:aa:c4:
e7:2c:4f:1c:21:1f:0a:79:22:3c:42:75:a1:58:e3:0c:19:cd:
44:0d:6d:f1:27:8d:5d:2f:5e:bd:84:de:03:94:33:9e:8f:07:
0a:cf:74:1f:92:9b:57:6f:22:4b:80:86:9c:a7:75:5f:c7:0e:
49:f1:c5:83:1c:6a:d2:e4:0f:ce:df:19:be:13:0b:dd:ec:60:
96:9c:06:ef:b2:7f:a6:d6:14:cb:13:5a:10:fd:3b:46:0d:b7:
4f:d8:fb:b9:8c:a0:f4:bb:b3:d2:92:ee:27:c8:7a:c7:29:96:
da:3c:7e:28:e4:e1:16:a1:24:7b:f9:94:0e:85:46:89:b7:b4:
91:ae:66:95:23:58:df:a5:7d:57:4a:99:b9:6e:d0:c3:db:cf:
8b:bd:1e:96:65:de:af:bc:80:c3:33:8b:a3:c3:84:38:10:2a:
ed:45:30:96:d0:f6:45:5c:ae:75:06:2f:f5:d1:11:b1:1c:2b:
af:11:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:31:17 2026 by rpki-client