
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json)
Hash identifier: Vm2nWtIchC6eAq4bH3PTJnlNpdaPp8uKzAtG+copLEQ=
Subject key identifier: 78:08:3A:5F:52:29:BE:55:40:F9:48:CB:E5:52:2B:33:61:38:42:32
Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Certificate serial: 0C12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
Manifest number: 1525
Signing time: Wed 20 May 2026 18:50:15 +0000
Manifest this update: Wed 20 May 2026 18:50:15 +0000
Manifest next update: Wed 27 May 2026 18:50:15 +0000
Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: kBg7wWnVdL7rr3laVj5uMC4YZ/VZJjHFBRq+VOn1RBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Validity
Not Before: May 20 18:50:15 2026 GMT
Not After : May 27 18:50:15 2026 GMT
Subject: CN=6a0e0267-d1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:45:5e:1b:ed:14:3c:2a:b8:8b:24:74:60:
4d:c4:62:13:39:15:5b:9b:57:33:51:f4:26:7c:01:
f5:cb:22:38:d3:a8:a4:1a:05:30:10:d1:37:62:15:
69:69:c8:e4:52:be:90:00:d4:03:9e:da:50:ce:11:
26:a5:be:6b:e8:02:76:a6:0d:3d:64:d6:27:94:85:
23:42:2b:9b:93:59:58:6b:e5:42:b1:b8:f2:3d:f9:
2e:e2:b0:c3:d0:62:d3:ae:08:07:24:53:05:9c:d8:
44:0f:00:2c:5a:b4:7c:73:ae:2f:b0:34:f7:5d:b6:
f1:da:5d:dc:26:a6:b6:ee:f6:ec:78:cd:03:9d:53:
75:cb:27:a9:96:2d:6b:0f:1f:09:81:8c:b7:42:fc:
b8:80:4c:d9:74:78:9f:a7:a5:d0:e3:97:7f:20:cc:
94:47:eb:af:7d:bf:10:7d:72:e7:93:85:9e:69:4a:
f5:55:26:5f:32:c2:3c:78:53:56:89:68:60:8e:ca:
df:7e:b9:44:8f:02:c9:64:af:31:2d:ba:ca:20:e3:
7f:6f:6b:fd:f9:df:24:a8:6f:8f:2e:c1:c3:86:28:
d9:e0:9f:cd:d4:0c:44:22:d4:e9:05:6c:be:71:1b:
24:13:cf:65:d4:d0:e6:a4:8a:c1:3c:cf:b0:fb:5d:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:3A:5F:52:29:BE:55:40:F9:48:CB:E5:52:2B:33:61:38:42:32
X509v3 Authority Key Identifier:
keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:8a:63:34:12:82:bb:e8:7c:f3:54:e6:b7:8a:ef:39:f1:33:
24:56:c4:48:cd:84:cf:c8:b4:8d:11:24:00:e4:8b:bc:00:47:
d6:90:6f:1f:6b:a9:1c:b1:47:29:6f:88:03:6e:cb:5f:da:12:
48:41:e9:4d:82:00:f2:e0:58:8d:a7:14:55:c6:42:9d:0e:1c:
10:8f:28:e7:c4:8a:d5:87:9c:54:9c:1b:82:69:15:0f:14:7d:
a7:ed:27:2d:6e:da:5c:ee:2b:01:a0:43:89:9f:af:5f:e8:9f:
8a:2f:59:93:74:7a:ac:15:e1:de:a5:07:cc:8c:e8:bd:a6:ab:
90:7d:a7:f4:bd:69:b9:a1:b3:10:01:b9:8f:ea:d7:c8:aa:2e:
c1:e0:4b:34:0f:dd:25:37:83:43:45:75:b4:06:e7:a9:00:53:
80:20:62:f4:5a:48:2b:66:dc:c8:45:d8:22:23:fd:32:f4:59:
90:9b:d3:d4:73:fa:2c:85:0d:e3:8d:57:3a:58:9b:5d:d0:c5:
18:d7:73:ce:4a:bf:39:04:51:26:a3:b5:85:36:75:aa:ae:b7:
55:0d:c1:ac:e1:63:02:52:32:30:77:cb:af:40:af:8a:47:44:
73:b2:95:77:6e:64:f6:b2:10:48:10:10:eb:3d:f3:5a:3a:1a:
c3:1b:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:05 2026 by rpki-client