
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
File: YQihMheWwWwmFLdc14tfV5DNrQE.mft (raw, json)
Hash identifier: Z2tsX3oL4QA88+6Nz0KO1Uq8mL8cVmvdyy9vtIWOsBY=
Subject key identifier: DA:3C:A3:C7:6C:8F:7E:5D:B8:FC:67:CB:C7:62:19:A8:16:22:F0:26
Authority key identifier: 61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
Certificate issuer: /CN=A914ACC8/serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
Manifest number: 41
Signing time: Mon 21 Sep 2026 08:28:01 +0000
Manifest this update: Mon 21 Sep 2026 08:28:01 +0000
Manifest next update: Mon 28 Sep 2026 08:28:01 +0000
Files and hashes: 1: YQihMheWwWwmFLdc14tfV5DNrQE.crl (hash: MgxXv9cxPXkh/DN8hXfSnEZm5RoHM8ze5z42++4MrG8=)
2: D5B3126E534B11F1B99ADA8D94833773.roa (hash: sXd+41/gn4hIOq0ToYPsxHfLlqQrww+estsIf7WIWOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ACC8, serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Validity
Not Before: Sep 21 08:28:01 2026 GMT
Not After : Sep 28 08:28:01 2026 GMT
Subject: CN=6ab0ea91-d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:83:e0:4c:cc:cd:17:75:25:03:e2:52:0c:
50:78:8d:09:20:1d:02:61:0a:3c:3a:ac:3f:91:58:
9f:58:ed:a2:0d:d6:a9:db:e3:fe:8a:c5:c2:ad:66:
f2:c6:d5:e7:c7:4b:9e:cb:24:0f:34:c6:ea:15:5b:
64:78:c5:51:d1:17:0b:ef:6d:73:03:7c:db:fb:31:
9a:3d:21:79:a4:d5:5d:0b:aa:ab:35:83:08:f5:6a:
6c:49:44:26:e7:e8:a7:5c:f8:b2:47:b2:83:f1:ef:
a1:41:11:b8:9f:eb:1b:f2:bd:bb:ef:44:e6:ea:88:
fe:d5:42:ff:9c:16:31:0b:c5:ce:ac:50:a6:26:e3:
64:20:07:f8:e6:bb:08:00:89:2f:5e:81:ba:d2:55:
d4:00:53:05:13:a4:22:31:6b:3e:e4:81:92:3b:29:
25:05:c6:4e:7a:e2:16:fe:3d:5c:41:85:44:37:2b:
b1:37:03:65:3b:68:d4:33:3d:e8:42:30:2c:b6:b5:
ca:0e:d5:0d:f9:61:b2:b4:5b:fd:9d:b9:ac:ea:51:
4d:9a:dc:df:93:d5:f9:6a:d4:d7:0c:97:6c:d2:07:
1e:29:99:e5:d9:4f:ec:39:bf:3d:ce:df:e2:08:e4:
e9:97:17:51:d9:6c:ae:9e:6a:1f:bc:6b:30:0b:c2:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3C:A3:C7:6C:8F:7E:5D:B8:FC:67:CB:C7:62:19:A8:16:22:F0:26
X509v3 Authority Key Identifier:
keyid:61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:5a:25:81:ff:c4:a4:c1:ff:ba:46:e7:6d:ee:5f:3e:00:ef:
d5:9c:f9:1c:87:5c:1a:68:5f:c7:62:1d:ba:89:ea:f2:ad:01:
e2:10:cd:e9:f5:26:8e:5f:45:0f:63:7a:6b:33:b4:4c:25:2a:
b2:f1:35:ce:48:51:14:b8:3d:98:ba:71:ac:2d:48:7b:67:68:
b7:84:cf:49:64:26:0b:57:75:e1:db:45:2e:f6:82:c6:f8:0b:
ab:3f:69:57:5a:8f:e5:fc:3f:b8:59:8a:52:5e:6a:30:b9:0c:
d3:67:2f:b4:b6:34:5d:ec:3d:1c:ad:c8:b2:66:59:4d:32:38:
80:27:2e:91:b4:25:c4:54:b4:19:45:5e:63:b7:7a:d4:e1:1f:
35:68:65:f2:cb:a5:61:c1:72:05:ff:f4:c8:3f:33:08:b2:ef:
3b:c0:9b:5d:6f:b2:d5:d5:23:00:a0:5d:ac:a7:31:2c:6b:76:
af:5d:a8:39:e5:90:cc:28:0d:45:eb:bf:17:75:2d:fe:c5:72:
87:6d:18:c6:57:7c:e5:64:61:02:e5:d8:a7:8e:57:3c:27:7f:
7d:f1:46:cf:e7:08:00:96:7c:50:e2:1e:85:d7:31:e4:c4:7d:
6f:31:59:96:96:56:a2:80:28:d4:5c:47:9f:e8:bc:72:f2:6f:
cb:e0:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:38:05 2026 by rpki-client