
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier: hycAR3eSdHy7aL8DDHasxKubnff6/KNpaRf1xw5kvsc=
Subject key identifier: 89:B3:4D:59:7E:48:32:D6:54:91:CE:A1:C9:13:40:3F:4A:04:C2:E3
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial: 0EBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number: 0EB0
Signing time: Thu 14 May 2026 17:42:38 +0000
Manifest this update: Thu 14 May 2026 17:42:37 +0000
Manifest next update: Thu 21 May 2026 17:42:37 +0000
Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: gGxduPMrd741SV8J25L5dAarnc0wZWPBJkvzwXmocFU=)
2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: UPi+EXP3M++eU/SlCZMA1QlfPjsM5dTJBEKasdPEKHs=)
3: BA55D63C415311F1A8AAFB3BCA833773.roa (hash: 5c6lk8zZg9JDdCtbr0MwnxF7u7fQcm0RumOai6GNeD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 17:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3772 (0xebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Validity
Not Before: May 14 17:42:37 2026 GMT
Not After : May 21 17:42:37 2026 GMT
Subject: CN=6a06098e-2a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:30:26:f1:fa:f4:dd:de:d7:b0:74:fc:4e:
43:fc:db:91:28:26:a3:8c:b3:7c:c2:1f:2d:38:1f:
59:44:68:3e:21:41:0e:f5:2d:04:c5:06:06:f9:7d:
bf:01:49:2a:36:9d:ae:97:5f:31:a4:43:3e:9c:bb:
fb:21:28:85:b9:76:97:18:0f:f1:c0:fe:b1:2e:9c:
46:c4:82:15:93:79:52:b1:d8:17:d2:8d:de:c3:8a:
70:d1:f2:95:a4:0e:c5:02:3e:1c:88:ad:2b:8b:8d:
e7:17:85:11:f0:c9:21:c2:ec:fb:47:d3:a1:e5:e0:
0c:64:0b:15:25:2b:b6:cc:a7:da:19:26:38:4a:76:
bb:04:93:4c:02:a9:7d:43:cb:06:13:dd:eb:52:11:
b0:c8:76:9e:f0:ca:b6:eb:5a:66:5c:6d:d1:16:77:
e3:55:fa:06:87:b7:7a:27:de:39:46:11:07:aa:b0:
52:f8:8d:22:6f:c3:c2:d0:a4:b2:45:66:75:1d:0d:
71:37:d3:e1:b0:04:3c:8b:e3:aa:fd:30:38:31:5f:
d1:a2:0a:c3:a2:62:cc:78:50:76:23:fb:8b:db:60:
7c:03:35:98:9f:46:f2:f6:80:ac:c6:81:63:c6:07:
33:7a:78:5f:a8:58:f1:9e:d2:9b:76:c5:04:73:71:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:4D:59:7E:48:32:D6:54:91:CE:A1:C9:13:40:3F:4A:04:C2:E3
X509v3 Authority Key Identifier:
keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:92:a7:d2:0b:be:c2:75:33:a4:7d:99:a3:82:0c:8b:15:cb:
dc:19:21:17:35:68:cf:be:e2:eb:5f:32:1e:12:10:28:48:f1:
7f:22:8e:42:8c:d4:a8:f2:da:1a:1c:3e:ff:9b:ce:4b:bd:0a:
d1:50:91:40:7d:ae:3d:08:25:ea:71:4c:26:14:63:19:87:70:
5a:f3:a4:7d:f5:f0:4b:20:e4:5d:10:98:f9:c1:64:96:9f:07:
00:30:f7:2e:5b:88:0b:97:b4:e2:ee:78:9d:c4:26:0d:e9:b7:
6d:ef:6d:f2:18:d0:34:75:f9:dd:fc:44:c8:c1:58:8f:a5:8e:
fe:ba:20:0d:60:f6:72:0c:72:b5:04:90:c7:c4:ff:d1:41:40:
40:94:af:df:47:58:ee:06:27:49:38:ac:85:b6:34:f1:07:9b:
cf:b3:89:fc:18:d3:ce:62:b5:d7:c1:62:99:36:8a:e8:6c:50:
90:32:2e:50:dc:fe:3e:99:2f:59:7c:ae:3a:85:c1:fa:12:e4:
db:39:fd:5d:31:b3:e9:e3:cc:fa:da:45:d5:e5:04:38:93:d1:
e9:c1:a4:f5:3e:d9:27:a2:7d:eb:f1:90:ff:89:3d:f4:8e:ac:
fb:1a:3a:3f:fd:55:f3:ad:59:d2:32:3c:f7:a9:c8:b5:10:c5:
5e:84:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 05:08:54 2026 by rpki-client