
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier: MjxighDO0vniZk3JEz8BbpRf4nmi+JogXYMvhJY/18U=
Subject key identifier: EF:93:42:8E:01:A5:45:B7:06:A1:19:65:7D:2F:F7:DE:09:16:21:24
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number: 011B
Signing time: Fri 17 Apr 2026 05:38:52 +0000
Manifest this update: Fri 17 Apr 2026 05:38:51 +0000
Manifest next update: Fri 24 Apr 2026 05:38:51 +0000
Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: qPIQTGTmyj2MOJvkJG2u5lxya+GC/VCmgy9JyOTH95g=)
2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: 5oMhHK5GexMn6Fihs/+IOJ93dC15hw4lCqu3Gtv/Uc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Validity
Not Before: Apr 17 05:38:51 2026 GMT
Not After : Apr 24 05:38:51 2026 GMT
Subject: CN=69e1c76c-298f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:2d:52:6b:3b:5f:37:c4:da:63:18:f9:a2:
fc:a7:92:07:cf:7a:9e:9d:c2:9f:91:b8:50:c5:eb:
02:5e:43:53:03:7b:b5:71:97:d8:b2:71:19:71:b0:
d4:7c:38:78:34:64:11:c1:a7:bb:11:de:c9:dd:f6:
d8:73:0e:7d:04:99:1f:fe:1d:65:7b:95:e3:35:bd:
fb:b4:6e:bb:13:9a:a3:83:02:61:57:d6:0b:a4:8e:
29:10:79:e7:ca:45:21:4f:c1:fb:0b:6f:24:09:b2:
55:28:aa:42:b9:db:f2:07:e6:e1:86:d9:a4:b2:3b:
16:3d:e3:aa:e7:3b:5b:92:c4:6e:27:a9:d1:4c:2b:
a8:68:be:c9:7c:5f:b1:2a:8a:95:53:41:f3:90:66:
6f:8c:d8:91:bf:f0:7a:b0:7a:a5:f3:be:fe:89:ed:
48:4a:3d:3c:de:a3:45:93:a3:be:70:55:f3:26:cb:
ab:0c:17:5f:f6:18:a9:f5:49:67:54:00:2e:68:08:
df:d2:88:90:b1:96:3f:6c:86:79:ee:51:55:0a:dd:
cc:ee:fa:2d:0d:8e:b0:8b:64:d0:3e:7c:1f:df:40:
69:c0:ec:a1:8b:5d:eb:aa:81:46:0e:d7:de:a0:a2:
f2:0d:97:5d:32:d1:92:f5:b6:6e:7d:24:ad:96:a4:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:93:42:8E:01:A5:45:B7:06:A1:19:65:7D:2F:F7:DE:09:16:21:24
X509v3 Authority Key Identifier:
keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:28:b4:4a:71:29:8b:29:72:03:2c:7d:04:3d:ab:21:a9:2c:
8b:79:a3:50:a9:3e:95:25:27:15:ad:cd:3f:a0:f8:f9:04:ea:
f8:d5:68:7a:88:62:d1:82:c7:48:22:8c:73:c3:a4:8e:a6:5e:
17:5f:7a:ee:df:22:2b:de:ae:c9:5f:70:19:a3:38:71:63:c2:
93:57:d7:b6:1b:6d:e2:ff:3d:ce:85:ae:37:76:2b:29:7c:d2:
13:df:75:e2:ee:14:41:45:18:1f:65:c1:df:e3:60:8e:ab:1a:
e6:ca:40:c7:0d:69:5c:9c:24:47:f9:dd:29:c9:40:a8:eb:13:
ab:b0:63:76:4d:dd:1f:84:a6:a3:a2:38:65:d9:ff:df:4a:9c:
94:dd:78:b5:d4:5a:c1:b8:a9:4a:cb:f8:de:3d:95:b9:03:c1:
8d:87:5d:b9:f5:3e:82:c9:38:c4:67:90:f8:98:a2:e3:43:f6:
d9:c1:19:b1:1e:ef:ba:28:53:4d:fc:be:e6:c7:56:10:ae:ad:
f2:73:25:05:8e:50:6b:d9:e2:82:79:c5:97:67:7b:f0:d9:b9:
4c:63:16:6d:3f:ed:f7:22:aa:5b:e2:f0:a9:4f:4a:08:11:f6:
c0:8a:70:d3:26:32:d4:12:af:76:11:60:28:ad:f8:d9:1a:b9:
b9:ef:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:36 2026 by rpki-client