
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
File: YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json)
Hash identifier: fXDjH2oWlHc5smqLOmTMTPeW/iuJOdjwKe/LpO7oo2M=
Subject key identifier: BC:9F:20:EE:C5:AA:0E:5A:37:C6:43:FE:3F:82:B8:CC:4F:00:E0:72
Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D
Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
Certificate serial: 03E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
Manifest number: 03DC
Signing time: Tue 23 Jun 2026 00:39:09 +0000
Manifest this update: Tue 23 Jun 2026 00:39:08 +0000
Manifest next update: Tue 30 Jun 2026 00:39:08 +0000
Files and hashes: 1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: 2vpkcmQAtZuOIfU4HpP5Is+8cLEQdxjW5b1eIbRemRU=)
2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: Cjy/SWLQH86e7gQzB7H8gnQKLtLg5bLdlkR56jFW4Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl
rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
Validity
Not Before: Jun 23 00:39:08 2026 GMT
Not After : Jun 30 00:39:08 2026 GMT
Subject: CN=6a39d5ad-1c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:b3:b7:96:be:34:e8:72:94:0c:a2:d1:69:
4f:1d:aa:71:e0:f6:f6:86:e2:58:66:c7:2a:93:22:
d3:e7:b3:0a:de:57:89:07:83:fe:2e:7c:fe:22:82:
0a:db:d5:64:d1:8e:b1:e0:11:d5:d7:71:c4:65:46:
03:2c:99:41:e0:53:61:d8:ba:c6:21:10:f1:74:52:
b9:ab:17:88:41:b3:53:89:99:33:64:6e:12:7a:1e:
d0:eb:d4:0f:b9:e7:40:5c:82:3f:f9:83:ca:ac:12:
2f:0e:ef:2d:b1:be:d1:3a:0c:3a:af:13:a9:04:f9:
15:58:02:1e:57:ba:91:aa:ec:b8:4c:d7:a1:eb:32:
3a:fb:32:41:a9:7b:ed:91:47:43:1c:06:99:c5:ee:
bf:4b:97:a4:8c:42:51:b4:bc:5f:be:6b:44:2c:21:
da:6b:b0:d4:3a:8d:06:a3:5e:8d:36:17:90:9b:3c:
ba:a0:48:e0:a8:09:b7:db:b5:bb:aa:bd:13:a2:69:
ef:c2:bd:e2:6d:b9:e6:f5:f0:e3:b1:ac:f5:74:c7:
a0:fa:8a:ec:10:a1:5a:26:17:38:2e:86:76:da:fa:
e4:0a:34:c2:dd:b9:55:58:67:87:a7:be:c5:69:25:
5d:4f:ee:8d:fa:3e:64:0e:c1:51:a2:48:e4:1b:ec:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:20:EE:C5:AA:0E:5A:37:C6:43:FE:3F:82:B8:CC:4F:00:E0:72
X509v3 Authority Key Identifier:
keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:bd:e9:cd:45:4f:80:df:37:a6:08:10:06:98:c9:72:e3:46:
dc:30:12:10:59:ed:a9:a2:66:17:4d:e1:22:e0:23:ba:b5:c2:
39:c9:92:c8:63:bf:3a:7a:19:2c:75:25:da:42:db:d4:7b:67:
78:40:9b:2f:29:28:7d:cb:0d:41:de:2a:d8:15:7a:b5:82:be:
0e:fd:1f:c6:a9:18:a8:e1:c9:4d:01:65:ab:3a:10:a5:46:87:
b6:c1:00:c5:a3:46:b1:37:82:00:df:94:40:ae:60:f1:98:2f:
1f:b0:14:cb:77:6a:47:cc:b5:6d:fd:39:8f:e9:4b:b9:9a:30:
bc:86:d1:d2:5d:ac:18:4f:77:12:a4:59:0c:be:ae:26:b9:cd:
8e:f5:92:4f:a9:18:31:34:a6:89:cc:9b:70:71:90:18:32:cc:
7c:a3:8c:45:46:f5:8a:83:4e:aa:a3:b0:11:d3:cb:1a:d1:20:
a2:3e:2e:16:49:1f:b5:c1:2d:da:1b:7e:0d:eb:60:9d:33:da:
d8:15:02:02:be:a1:a1:a2:c9:90:8b:21:ab:08:42:bd:25:64:
ab:c1:e8:43:28:d8:ac:aa:6f:78:68:9a:d2:d0:24:27:f0:fb:
c5:b5:58:ef:84:22:9c:39:1f:05:d5:ed:f4:e0:3c:43:21:3b:
37:a4:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:23:35 2026 by rpki-client