
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier: RjFIGmi+WC771ln8VogHzDXRlvPH9c1qs1K6jamDNFU=
Subject key identifier: F6:22:CA:0E:C8:16:11:74:50:78:0A:A8:4C:96:F1:9C:F6:0C:69:CE
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial: 0ED5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number: 0EC9
Signing time: Thu 02 Jul 2026 17:48:18 +0000
Manifest this update: Thu 02 Jul 2026 17:48:17 +0000
Manifest next update: Thu 09 Jul 2026 17:48:17 +0000
Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: ESybqvNY3hrXlMoYhRt81pKn5Swb6XcxH1JDrxzYQjo=)
2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: UPi+EXP3M++eU/SlCZMA1QlfPjsM5dTJBEKasdPEKHs=)
3: BA55D63C415311F1A8AAFB3BCA833773.roa (hash: 5c6lk8zZg9JDdCtbr0MwnxF7u7fQcm0RumOai6GNeD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 17:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3797 (0xed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Validity
Not Before: Jul 2 17:48:17 2026 GMT
Not After : Jul 9 17:48:17 2026 GMT
Subject: CN=6a46a461-5732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:d7:1c:99:5c:09:af:5b:3e:ec:81:8a:aa:
d0:77:e9:05:28:77:2c:b3:47:d4:0e:99:77:8b:25:
bb:a4:9d:89:c1:2a:b4:00:1f:b5:be:42:a1:f0:7f:
b2:eb:28:53:35:c7:59:24:6a:11:ef:06:6c:b4:9f:
e7:0e:33:b4:10:9b:ec:3d:da:50:e4:5e:72:ae:af:
24:d3:cf:41:ce:fb:2c:17:58:68:75:40:92:fe:c4:
f0:1c:cd:23:d2:39:f3:86:a4:f3:3d:98:c6:fe:b4:
09:b4:68:b6:d4:53:a1:50:06:e1:38:1d:2a:5a:fe:
55:04:59:5f:df:c2:ba:5f:2f:96:fc:53:ed:49:c6:
ef:14:5b:8d:00:fb:01:8d:08:9b:91:27:b1:2b:c7:
37:0a:93:26:1b:8f:03:f1:06:ba:f3:fe:d6:b7:78:
81:17:e8:ab:0b:45:50:c0:11:05:95:95:f0:5d:7f:
18:7b:51:51:d9:e5:dc:a9:20:91:50:b6:a8:67:f1:
a8:d9:30:06:b2:05:7e:9a:6f:85:cf:19:bc:49:b6:
17:a5:37:cc:ad:1a:49:f4:50:31:df:55:60:2b:9d:
8d:e7:f5:bf:fa:ac:b0:19:76:09:55:77:0b:93:83:
d4:cd:22:1a:50:63:c9:af:c0:4f:bb:fb:e2:21:be:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:22:CA:0E:C8:16:11:74:50:78:0A:A8:4C:96:F1:9C:F6:0C:69:CE
X509v3 Authority Key Identifier:
keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cc:e7:ef:f0:8d:b1:16:a0:ee:fa:3f:4f:45:17:cf:93:82:
6c:99:7e:a4:74:73:55:56:99:c3:24:ab:64:4f:d0:55:1d:3d:
61:2d:96:86:73:04:89:88:3d:14:41:cb:cd:7d:d7:70:45:f2:
e4:60:9c:89:a7:18:f2:d1:4c:2d:79:d5:6c:8d:be:67:b0:ae:
8b:e4:12:98:69:49:5b:9e:58:8f:3c:6f:cc:05:a0:1d:5d:85:
12:50:63:d8:d5:8b:97:78:a8:7a:c2:bd:f8:80:2f:07:12:79:
16:91:1d:f5:df:7e:69:36:51:34:6c:83:44:e8:8a:6e:86:74:
09:d7:d6:b5:e0:7c:e7:16:7c:bf:84:1c:5f:fc:a0:37:29:f4:
53:2a:72:cd:57:63:73:68:52:b9:aa:a4:c7:bc:f7:0a:d6:fd:
2b:e7:1f:fd:53:02:72:fa:93:40:fa:81:93:08:72:81:4f:aa:
6b:1c:ac:3d:21:17:09:95:1b:8b:7e:35:c5:e6:d1:a0:b6:d4:
30:ee:88:34:9f:b1:28:e3:d8:23:f1:a8:27:f4:6b:5a:b6:ad:
f6:9c:12:94:64:b2:a9:71:29:ea:ab:16:09:71:9e:4a:32:e7:
0a:a0:13:26:1a:56:0b:c5:ee:6e:4f:07:70:6f:1d:66:ea:65:
88:e1:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 16:09:44 2026 by rpki-client