
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json)
Hash identifier: x4QQa+tifwFXMDwJ66dojzPiPejrXNeigtWQgvoziD4=
Subject key identifier: 03:D9:30:F3:3F:09:66:F5:8F:44:D4:A3:AD:4C:89:28:64:3B:19:B4
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 051B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
Manifest number: 04F3
Signing time: Mon 22 Jun 2026 23:52:07 +0000
Manifest this update: Mon 22 Jun 2026 23:52:06 +0000
Manifest next update: Mon 29 Jun 2026 23:52:06 +0000
Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: /O48Babmp/6kjjOEiUjQv7MiYK2IUcfqtU/7s1/NmSA=)
2: BC148566D22B11EE9443A443C4F9AE02.roa (hash: cfcf5ZIlJUYMjr0+qHEumL0rToA0BJQdmmF24Iwecxg=)
3: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: 39C+hq9yHLOlvpEI0BBXna/9+vYl0n36FnAzYDNDqZ0=)
4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: e8gT8HqV1esire/8xcI7iv1N+KlJ6UFqhxx1NHbDo3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1307 (0x51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Jun 22 23:52:06 2026 GMT
Not After : Jun 29 23:52:06 2026 GMT
Subject: CN=6a39caa6-8452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:c1:d6:79:d6:05:d8:6e:55:5b:ee:8a:c5:
ec:cc:74:18:cc:a6:bb:c5:81:4e:b9:5a:2e:0c:dd:
5f:b3:50:29:01:56:2b:e3:dd:e7:b5:1a:49:23:38:
43:f4:4e:85:1d:35:2c:79:70:db:89:df:c3:9c:94:
1a:c6:e6:50:e0:ad:63:ad:8f:da:ad:7c:42:2a:b8:
74:a8:9c:04:26:42:20:78:7a:12:f5:b8:a4:6a:89:
6a:09:d7:50:08:1e:ae:05:4d:3e:38:32:0d:2d:21:
d9:3b:58:4d:2b:38:cb:e2:59:dd:cb:ee:a7:96:c1:
7f:ad:6d:63:c4:fd:47:3d:8c:b3:4f:f0:1c:16:df:
31:45:d7:91:d8:23:c8:12:24:c4:d4:9f:15:1f:83:
9b:7b:5e:6c:98:d5:30:e6:81:8e:16:38:80:2c:f2:
90:62:10:0b:19:06:9f:8a:04:43:61:b2:ab:f0:1a:
b3:4f:f1:d3:a8:2d:3d:09:4b:98:d6:dc:d2:8a:28:
9e:f0:3e:74:d5:63:a1:e6:a2:3f:fb:04:e8:c0:7f:
03:fc:f5:73:55:2d:a1:a2:42:c8:45:e2:36:d9:83:
2e:3d:24:78:38:27:99:82:ee:5c:a5:45:f7:13:65:
55:36:af:be:70:0f:60:b5:cd:41:89:9b:17:7c:a5:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:30:F3:3F:09:66:F5:8F:44:D4:A3:AD:4C:89:28:64:3B:19:B4
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:2e:02:45:41:7a:89:7f:4e:2e:9b:23:38:52:66:51:e1:e9:
46:33:5a:16:e8:47:1e:16:19:b6:09:fe:73:2d:ed:53:38:25:
09:45:83:a1:50:bd:3f:8e:d2:80:91:86:56:99:1d:1c:8e:6e:
d0:23:c1:33:aa:0a:49:24:76:ed:c6:8e:43:61:6c:47:42:8f:
5e:b8:94:ba:2d:80:2b:18:fd:49:cb:e7:c6:f6:13:36:93:7c:
c5:7d:d4:3c:a6:95:8a:96:74:b0:b7:70:23:8f:55:ad:1b:d7:
9c:29:05:5f:bf:13:ae:b7:a4:e5:b4:ea:c4:5f:3f:35:ba:47:
4d:a8:5f:ce:5c:bd:4c:ff:39:41:70:df:3d:1f:e3:20:68:b6:
8f:24:b8:e4:62:e1:44:78:d5:5b:54:5d:3c:d4:7a:c1:93:40:
e9:bb:44:f8:e3:7f:4a:63:57:f2:b7:26:20:b6:7f:ef:4d:78:
69:f9:c8:88:27:05:2b:87:78:bd:d2:38:71:fa:0a:ff:70:d4:
78:3c:9a:5c:2e:83:4f:d8:71:24:e8:ce:6e:33:12:12:70:24:
b9:d5:0d:60:ef:aa:ea:cb:3e:28:0e:f0:0b:88:8a:7d:08:49:
e4:38:37:17:fb:d1:7f:41:46:91:1c:cc:7e:e1:4b:02:65:d5:
7e:c5:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:43 2026 by rpki-client