
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json)
Hash identifier: FSvcMA4gAz3RkiVz6KooBiJDAMZEus5NTGyL/T4DCwY=
Subject key identifier: 1E:9B:B3:F7:FF:14:7E:21:2D:BF:2C:54:E3:36:AF:5E:79:E8:37:2B
Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Certificate serial: 0D55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
Manifest number: 0D43
Signing time: Sun 26 Jul 2026 18:22:44 +0000
Manifest this update: Sun 26 Jul 2026 18:22:44 +0000
Manifest next update: Sun 02 Aug 2026 18:22:44 +0000
Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: ffydpWQxuYZ/ve5dS8HN0VBca7eG7JgqUBMr5pGNJEM=)
2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: r6NMGYsxb0CTrW+33MllDccXL4xyxMC+FjKpakw8GUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Validity
Not Before: Jul 26 18:22:44 2026 GMT
Not After : Aug 2 18:22:44 2026 GMT
Subject: CN=6a665074-d8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:68:fe:95:17:8f:7b:99:db:77:a8:ba:35:
65:a1:61:cd:47:b9:f7:c7:7e:64:54:d4:c6:e8:e6:
1b:6f:39:23:d6:3d:8d:c6:c7:65:42:e9:f5:ac:fd:
d0:94:f6:58:02:9b:4a:7c:e9:ca:00:3f:38:5d:b0:
02:c1:9d:81:50:4d:14:00:e8:01:1b:13:24:1f:dd:
48:f3:d2:9d:2f:71:34:4e:44:58:89:2a:d3:20:d0:
83:8d:b3:6f:8e:9e:7a:f3:59:17:9b:16:83:c7:15:
3a:fd:45:c0:48:d2:81:db:40:49:65:ee:af:d8:09:
51:49:c0:be:27:76:fa:f3:c1:7d:22:2f:a2:20:d3:
ae:dc:30:b2:9e:2f:5e:a0:31:14:0f:95:0b:9e:be:
4f:05:ca:fc:77:7b:82:33:92:4c:07:d5:28:c3:73:
34:24:3b:e0:55:97:8b:10:f6:62:f5:23:ae:a4:be:
7d:6d:9a:cd:19:01:0b:97:28:eb:f3:56:f9:b0:5c:
38:86:0f:44:e9:b7:83:57:83:8c:bb:46:a0:eb:87:
97:d6:79:12:5f:93:22:af:5c:5d:a7:7e:0f:5f:8a:
ce:20:36:82:e0:d0:63:5a:7b:fa:1b:a6:e9:65:5e:
7d:f4:2f:50:e4:85:25:ea:bc:06:45:e6:c7:f2:02:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:B3:F7:FF:14:7E:21:2D:BF:2C:54:E3:36:AF:5E:79:E8:37:2B
X509v3 Authority Key Identifier:
keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e1:09:c8:1b:2b:d9:5c:5d:9d:48:3e:c1:8a:e7:62:c6:a3:
73:47:bb:ee:35:1a:10:82:ea:63:ef:f1:0c:64:4d:2a:86:61:
48:a5:2f:e3:ca:e5:84:88:93:0f:14:3d:46:d3:0d:f1:19:81:
f2:a7:d7:62:43:89:ca:7b:6b:7e:27:f1:69:23:05:03:63:a7:
45:a8:d1:14:91:64:15:5d:38:8e:f3:a5:89:52:45:2a:ed:50:
97:7d:0d:34:a4:df:72:39:6b:95:a6:67:0a:c3:2f:95:a5:0d:
75:77:26:71:36:e0:6b:0b:67:83:a4:d2:c7:3a:02:b5:3b:1b:
5f:4f:b7:20:2f:35:a9:f1:d5:82:ac:f8:79:1c:59:1d:1e:c2:
cf:f3:c1:54:47:0e:f9:39:f8:cb:db:14:fc:27:15:42:44:d4:
c9:ec:39:c1:27:a7:f2:4b:23:f0:7f:48:ec:42:f5:15:14:d6:
90:1c:9c:8c:cf:2f:35:ff:fc:8d:0a:d7:33:ff:d8:9c:9d:bf:
04:88:29:58:69:3c:da:27:dc:1c:5a:59:3c:ec:2d:7f:ab:b1:
b6:a0:bc:4d:49:23:e0:20:e9:a8:9b:ae:8a:41:27:d4:d6:43:
d0:7b:41:94:76:d9:72:da:a7:c2:43:9d:57:24:e6:e0:fd:68:
4d:83:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:33:24 2026 by rpki-client