
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json)
Hash identifier: RVWWRfUC9qhtwJMP92e45cerqh6x72juq9Z9DfZHmEY=
Subject key identifier: 85:7A:22:4A:00:B3:2F:31:65:CE:57:82:C7:58:6E:C3:CC:7D:59:95
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 0382
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
Manifest number: 0356
Signing time: Mon 27 Jul 2026 02:13:09 +0000
Manifest this update: Mon 27 Jul 2026 02:13:09 +0000
Manifest next update: Mon 03 Aug 2026 02:13:09 +0000
Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: naih8IOV1C+QGMcG7HUarUvz4XOmmdRNUyYdB76/zeo=)
2: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: UazZSGRsaobkFh+uwdDtJ065Ep6bEbys8yH2m9dsJpw=)
3: 35AB985C68B511F18E116D7B7F47A888.roa (hash: zJzm+IxndwR1rSvg7Wy91Pwrmnj3T3uEe3l4l9/HMCw=)
4: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: PPilQKcKXmCzfDra94ptz+UOBe/ruKL5vBBrgys75yQ=)
5: 69046BD0ECFE11F0B05C9076386F56BC.roa (hash: YCe2AE1AYEPbcU1s9LwUlVk97WjIwXee65C9XOQSVi0=)
6: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: U6gY9KKT7NSCpx8jpV/iJKW5bvGforRTQeZvJLFkBWs=)
7: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ayI2v9zEaoadhkrRa+ZcLsyQwGLPommiSdSXuXbqNDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Jul 27 02:13:09 2026 GMT
Not After : Aug 3 02:13:09 2026 GMT
Subject: CN=6a66beb5-bc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:8c:90:2d:e5:c0:65:25:ad:6d:df:c1:06:
2c:01:0c:1d:05:63:15:e7:46:37:4b:a9:a5:34:c4:
3c:52:dd:36:15:73:38:9c:5e:a9:da:e3:df:18:2e:
d6:d5:b1:96:b2:94:51:99:9d:a0:e5:d1:dd:1d:e4:
91:c7:ee:21:54:75:a0:8d:8f:5d:96:5e:09:7d:fd:
8f:40:2a:c7:79:a7:a2:3c:11:74:3d:d0:b0:73:ac:
3a:8d:45:49:37:1f:f6:ff:25:e1:a3:ef:6b:1e:80:
52:b2:e6:6b:d8:a3:e7:48:d0:9c:ae:86:3b:2a:d5:
09:c1:69:15:da:46:e8:49:ff:26:8f:8c:37:de:e6:
69:36:83:61:ef:75:f6:5d:87:71:d6:50:66:a1:44:
61:c9:dc:0c:ec:58:dc:c9:76:90:9b:cd:70:db:f4:
6e:0e:c1:5b:86:da:89:78:86:ca:16:4d:0c:29:44:
d4:62:63:15:01:99:23:0a:f2:26:e3:3f:01:56:a6:
b0:d4:07:80:0c:57:f1:26:11:1e:86:aa:0a:19:d7:
af:34:a5:8c:09:50:0c:c7:0a:61:e6:98:13:9d:0d:
eb:c1:72:0d:82:0b:9a:5f:3d:b2:19:63:55:d8:29:
39:a8:7f:54:0d:84:37:ad:07:01:7c:4c:33:a8:91:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:22:4A:00:B3:2F:31:65:CE:57:82:C7:58:6E:C3:CC:7D:59:95
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2f:e7:ee:94:77:68:16:f2:9e:05:74:30:6e:24:a1:95:36:
f0:e0:b1:e6:78:50:7b:5a:8e:1f:29:83:c0:dc:cc:f5:a6:2b:
43:c3:39:61:52:6c:68:9d:14:b3:ab:5c:59:33:a4:26:79:e3:
8c:2b:42:e0:6c:da:1c:56:7a:41:94:1f:aa:9d:c5:65:83:9d:
bc:fb:8f:28:27:15:90:c9:6b:e7:c9:78:12:58:25:b5:fa:5b:
ea:4d:0d:f8:22:50:b8:7d:ec:77:13:24:7f:1a:bb:d0:bc:2b:
67:83:41:aa:75:0e:cb:7d:f3:03:7c:91:e0:1c:45:36:ab:1f:
e6:e6:7b:8e:51:da:ca:94:be:fb:0e:88:6f:e7:c9:da:91:0e:
4d:12:6d:2a:b5:70:3f:ed:06:97:91:6f:11:2c:01:ad:eb:06:
07:17:20:a8:0e:78:3c:ac:4e:d0:11:87:fe:5a:1c:35:ab:a0:
eb:3d:06:ee:63:f0:89:30:86:01:aa:6a:20:a6:a6:b5:c9:6b:
d3:0a:e9:a5:f3:a7:bc:28:3e:7f:28:a4:3d:d6:6d:6b:c2:f9:
c8:d0:5c:34:1b:2d:6b:86:5f:44:f6:8b:df:01:dc:20:66:78:
3b:a5:68:3b:1b:a3:26:a3:c9:a8:6d:0e:ee:65:de:96:42:6f:
16:93:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:43 2026 by rpki-client