
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json)
Hash identifier: 0fwVetaAKPhPpIfHN8jRa9SclOvVnFy/XxOy0J71PN8=
Subject key identifier: E3:F1:CD:80:58:2E:94:E8:03:EC:5D:1F:A2:DF:30:97:DB:AB:F1:75
Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Certificate serial: 3565
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
Manifest number: 355E
Signing time: Thu 16 Jul 2026 15:05:31 +0000
Manifest this update: Thu 16 Jul 2026 15:05:30 +0000
Manifest next update: Thu 23 Jul 2026 15:05:30 +0000
Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: FlJ9b3xFcCwlOAwLzHZXiDrTOmfDxFS936H+e91JmLs=)
2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: oxiDTJi92uEmvEoDjgv/y1DqmarljGA90TImE98cgWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13669 (0x3565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Validity
Not Before: Jul 16 15:05:30 2026 GMT
Not After : Jul 23 15:05:30 2026 GMT
Subject: CN=6a58f33a-9237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:51:23:f2:65:a7:81:f3:e3:3d:65:19:bf:
e0:8e:c8:89:ae:72:c8:3d:f6:f4:07:df:35:95:b8:
6c:e3:a3:78:79:03:b6:cd:86:de:30:ad:82:3b:ea:
c5:53:7d:67:97:0e:94:68:25:a8:c6:29:f0:29:e1:
79:91:9c:1e:bc:7e:27:b3:0c:ff:bc:7c:aa:1b:3e:
29:30:8d:97:3a:a8:24:82:40:8b:ba:7d:3f:a8:14:
c7:39:13:59:75:f6:31:45:20:1c:f5:52:c2:ff:e1:
97:51:16:7d:74:9b:14:90:df:14:13:48:c7:86:dc:
b7:81:67:a7:ec:31:53:55:92:da:12:b9:f7:bf:63:
4b:a0:08:08:5a:a8:55:a8:4e:75:c8:f9:11:b7:6f:
63:58:ba:d0:57:17:f0:ce:f4:18:aa:20:8b:29:a0:
d9:1a:e1:92:df:0f:6c:0f:35:c8:2f:bc:c3:0a:06:
e2:fb:59:1a:a3:28:9c:95:b4:75:ac:1b:c7:e5:ee:
dd:9e:ad:da:05:45:ad:e2:4c:11:49:e8:19:7c:2a:
f3:76:2f:9b:e1:f2:10:94:61:d5:b7:9f:8a:df:67:
4d:6c:f2:e5:36:a5:10:54:3d:14:45:f6:94:70:7e:
20:96:64:9f:4b:08:dd:48:04:a1:46:43:16:d2:0d:
fd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:CD:80:58:2E:94:E8:03:EC:5D:1F:A2:DF:30:97:DB:AB:F1:75
X509v3 Authority Key Identifier:
keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:39:65:a4:52:6a:66:31:b9:1a:bc:fe:8d:a0:12:d5:03:71:
30:97:8c:8b:74:96:63:ea:07:b0:00:b5:2c:66:2f:04:14:5a:
83:f1:42:69:81:af:ff:83:6e:7c:5d:db:bf:9b:c4:f4:a3:ce:
90:29:26:7c:ae:8c:60:64:cd:03:6d:e9:d6:40:25:70:8f:e3:
38:07:e9:f8:a6:b1:1a:05:6a:60:39:79:d0:37:49:2b:64:e8:
9e:98:c1:16:eb:51:d3:fc:7f:fa:e0:f0:9f:b3:fd:85:1f:56:
64:4e:88:69:5e:e8:64:07:3d:b7:74:d5:a9:dc:e2:ec:62:22:
f9:70:82:e5:e8:bb:e3:88:d1:69:e3:40:25:e8:fd:39:c0:99:
b3:b9:d7:b2:e2:38:9e:87:02:2f:8f:a5:b2:de:fd:4c:f3:d0:
f1:38:25:a7:8a:0e:7f:70:77:6e:f0:a8:38:00:2b:26:74:ef:
4f:59:ec:25:2f:13:d7:b6:cf:ea:8e:80:d1:bc:63:d9:80:f1:
4b:4c:15:f9:a2:23:00:6a:7c:11:6d:ae:ad:dd:8f:6c:60:b8:
78:6d:0d:17:57:4d:04:ed:e9:b4:10:c6:2d:74:1e:af:49:64:
b3:92:d3:52:60:e2:57:ca:db:fb:07:1a:ac:dc:86:87:e6:97:
26:88:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:23 2026 by rpki-client