
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier: yXhdyKwvZn5Qxbpb9OlKmZYqG2iG3AmIqzLYUK/NVVU=
Subject key identifier: AC:D3:DD:82:F4:53:59:DD:85:B0:72:1F:3D:9A:FF:76:75:D6:4E:AC
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 04F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number: 04F1
Signing time: Sun 01 Mar 2026 00:19:55 +0000
Manifest this update: Sun 01 Mar 2026 00:19:55 +0000
Manifest next update: Sun 08 Mar 2026 00:19:55 +0000
Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: rsOViKscFoBF70PFyaHH9BGrCxOD4Ikw6uIrTPNH2nY=)
2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: aRUayRfr0vMR7tS5Y4z3m5ZDFVHmg6WwIEoeJRznQ08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Validity
Not Before: Mar 1 00:19:55 2026 GMT
Not After : Mar 8 00:19:55 2026 GMT
Subject: CN=69a3862b-cdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:56:be:82:88:78:35:3c:f2:b5:10:75:c7:d7:
2f:60:2c:22:26:1b:b0:0f:01:c2:06:be:8b:67:a4:
44:0c:17:da:d9:b3:3b:e5:0b:47:3f:f0:e9:ae:51:
3a:be:56:4f:9b:b7:bc:c7:91:11:2d:13:f0:24:8d:
6e:e7:7b:99:03:d4:3e:5e:2c:e8:8e:09:18:22:06:
85:4b:4d:37:86:fe:14:de:fe:b7:9d:21:94:2b:f9:
2e:a7:27:af:70:c8:f5:92:44:8d:08:7e:f8:f2:81:
a9:26:30:6a:bb:01:d9:e8:35:0e:f4:3e:c6:5e:c7:
25:c8:77:2e:8e:83:3b:eb:92:8b:a6:ce:ac:f4:72:
00:1a:19:80:6a:1c:a5:e0:a1:db:04:b0:be:36:20:
99:9d:ad:f7:5f:78:6b:83:3a:e7:41:0b:b1:04:1a:
a7:cd:36:bd:51:57:1f:f1:c1:95:fc:51:61:77:97:
4e:e2:47:f2:6f:e1:d9:ac:3a:24:41:0e:a9:40:d3:
0b:46:c0:ee:c0:82:ae:b9:29:56:35:1e:23:ab:f2:
23:9e:72:f8:b8:7d:45:8c:91:5c:0c:a5:83:85:7a:
ca:b3:37:ad:ab:83:f3:1d:a4:8f:80:9c:c4:11:a3:
04:e1:80:da:78:b5:73:6a:17:4f:fb:96:3e:c3:11:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:DD:82:F4:53:59:DD:85:B0:72:1F:3D:9A:FF:76:75:D6:4E:AC
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:5d:5c:74:64:15:4c:c9:3b:24:c9:d2:03:ea:b1:7c:7e:3a:
6a:f8:30:05:24:3f:6e:18:6d:6b:b5:74:3e:c2:71:eb:59:98:
bc:0f:f6:de:17:ff:04:e3:03:36:b8:28:85:7a:cc:ca:ca:98:
e1:d9:92:d1:4c:a1:e2:26:9e:19:c0:a6:b4:3f:6f:e0:7e:ca:
ec:0f:fe:03:09:74:0f:da:3f:86:f9:21:8d:15:da:85:96:d3:
6c:bd:dd:27:6e:9b:30:00:36:b6:0f:0c:30:00:33:26:60:df:
49:34:fd:91:98:8b:ef:da:ce:15:69:67:00:03:fa:64:3a:b8:
73:c7:30:63:0f:1d:8c:8e:f7:e2:66:ce:f6:9f:35:fd:1c:cb:
4b:ec:ca:d4:60:6c:e4:15:8b:ff:dd:3b:db:b5:ea:4e:e0:2e:
47:58:8b:51:3e:3e:48:d6:9a:5a:b8:13:ae:cb:51:d3:ad:9c:
d9:b1:c3:7b:e9:1d:e6:a3:be:ee:a1:fd:b6:21:0b:70:bf:3c:
6d:9f:ea:0b:c4:48:1a:33:cc:b0:cc:69:15:1f:95:ce:32:cf:
ef:5b:42:b0:06:2c:0c:fe:5e:09:e4:0b:bb:6f:5f:94:86:0a:
a1:9a:4c:84:bb:b4:5c:d6:75:79:08:66:26:ef:6f:34:e8:8a:
a9:48:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:26 2026 by rpki-client