
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
File: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json)
Hash identifier: 6YnIh7ZPZiOC2fqYocJlDSnd6oY35LDRK4RWUsFxyXg=
Subject key identifier: 02:BD:71:58:E4:54:F5:5C:E2:2E:35:1A:34:9D:73:78:F8:44:AC:D1
Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Certificate serial: 06D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
Manifest number: 06C3
Signing time: Sat 04 Apr 2026 22:05:32 +0000
Manifest this update: Sat 04 Apr 2026 22:05:31 +0000
Manifest next update: Sat 11 Apr 2026 22:05:31 +0000
Files and hashes: 1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: EDNcL6EbmpJixGNTc4vNz+18YSzU7+YDj+VvvPFo1Qs=)
2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: llFW+WRST7APyQa0YdaQfyP/e3DEFxsT1jj1YpwFLnQ=)
3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: rLlQIkqX6i6uF1WhXyQfGL611IaLuncbJA4wjowGJl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749 (0x6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Validity
Not Before: Apr 4 22:05:31 2026 GMT
Not After : Apr 11 22:05:31 2026 GMT
Subject: CN=69d18b2b-01ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:76:63:61:e5:d0:d8:be:02:1a:84:9f:34:
1c:c0:8f:20:be:91:45:d6:7f:c1:39:16:e0:cc:e1:
8f:54:04:12:29:be:56:9f:e2:41:2d:35:2e:5d:a4:
c2:8d:e7:93:8a:06:a7:00:4e:ff:ee:9b:d8:ae:40:
97:e5:1b:14:ba:f8:b0:26:e2:c2:c9:16:e4:94:83:
28:c6:22:99:2a:9b:14:cd:66:e3:31:5d:84:83:5b:
ea:8b:a8:79:7d:dd:7e:f3:90:21:83:fe:27:ab:b6:
41:f6:81:76:20:5c:83:4c:8b:70:54:78:16:b5:49:
50:d2:fe:2f:e3:58:43:10:30:ac:f7:fc:a7:b0:94:
f6:62:2b:75:1a:44:d7:d4:f9:3c:12:43:3b:e3:8d:
a0:b8:eb:a9:9b:bf:44:e8:f3:b2:ce:9b:ec:04:ce:
08:5d:41:64:3b:0f:eb:2e:40:12:c8:e5:73:a3:3c:
24:02:e6:a1:3e:1f:44:02:71:47:28:f9:be:9a:f5:
ed:c3:aa:2b:b5:9e:b7:7a:08:0f:56:0b:18:11:ca:
3c:24:c9:03:c6:22:24:68:f1:c0:a4:22:5f:6d:b2:
4c:0f:b5:e4:3e:0a:a2:76:5a:95:be:59:5c:7e:64:
8a:9c:35:19:28:03:1f:ad:44:60:f5:08:d1:27:3b:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BD:71:58:E4:54:F5:5C:E2:2E:35:1A:34:9D:73:78:F8:44:AC:D1
X509v3 Authority Key Identifier:
keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:83:24:aa:e2:fc:20:ee:2e:b6:49:12:0b:8a:09:5f:1d:a3:
db:be:5d:15:ff:4e:0e:2c:5c:64:92:a3:3a:0f:9b:bd:69:88:
e5:0c:40:c8:98:62:8d:a2:41:aa:67:a0:77:69:a7:d7:7f:ce:
3f:b0:e8:02:ea:61:1b:93:3f:67:22:ab:02:36:ec:b4:3c:cf:
60:06:9c:0d:f4:eb:eb:4f:8d:ba:71:fb:2b:d5:f6:5c:4e:a1:
da:02:f2:d0:c0:c6:16:01:0a:45:ba:48:53:5d:3e:77:33:67:
5f:f9:cf:c1:e9:81:a4:6a:c6:70:80:5c:14:0d:98:19:ef:ef:
b5:3a:da:d3:28:a1:f5:a5:fc:36:4f:71:7b:96:57:48:b3:d8:
08:d4:21:03:67:50:c6:80:f7:e5:2f:17:9d:08:b0:56:73:1b:
7a:00:10:a9:35:01:66:0d:25:20:18:dc:3d:5b:79:75:a6:ae:
29:10:7d:47:ee:ab:cf:61:d7:ae:e3:90:10:81:dd:35:e4:16:
66:00:4a:20:89:ee:2c:72:ad:31:36:f4:e7:36:55:c6:31:61:
0b:56:f9:2f:1d:7a:ed:69:c2:dd:d3:eb:8d:e7:61:46:41:04:
41:04:00:0b:06:54:3b:3f:db:79:e6:0d:95:66:ee:fa:b9:ca:
02:ce:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:11 2026 by rpki-client