
$ rpki-client -vvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
File: yAlz0WzMyeGME6aIAz3E0PDmHEo.mft (raw, json)
Hash identifier: U7ahZUV0lk6L8qBhBLE8htqws233KWvRzmh7n27kj/U=
Subject key identifier: 13:1B:2B:C4:23:4B:AC:E2:56:34:F4:E5:00:5F:C7:9E:46:BD:F6:9C
Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
Manifest number: 9E
Signing time: Fri 17 Apr 2026 07:04:15 +0000
Manifest this update: Fri 17 Apr 2026 07:04:15 +0000
Manifest next update: Fri 24 Apr 2026 07:04:15 +0000
Files and hashes: 1: yAlz0WzMyeGME6aIAz3E0PDmHEo.crl (hash: 96DEbykLtP+ezEnv2n5YNrcGjXdQOT6EdzAWpDGuLgE=)
2: BFEE74284D9811F0930F6465C4F9AE02.roa (hash: PFioeT3RfNJMN0Aadh4UJbKdM8FYKBkK30gvJCKnlcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Validity
Not Before: Apr 17 07:04:15 2026 GMT
Not After : Apr 24 07:04:15 2026 GMT
Subject: CN=69e1db6f-a40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:52:12:d7:86:45:37:30:01:5f:33:72:a1:
34:d2:f5:69:39:f4:80:d8:98:84:0e:3e:5c:79:b0:
cd:ca:63:3f:3e:35:27:04:24:7b:cf:e2:6b:e2:85:
cd:9a:3c:ee:3d:cd:cd:8b:22:d0:7d:c7:83:6e:0d:
40:52:cf:fe:56:8f:70:14:e6:a0:f7:71:1d:89:84:
00:6c:85:35:db:26:74:61:85:3d:26:07:b3:40:f0:
2a:6a:ab:8a:76:df:e3:11:77:ba:c2:8a:8e:9e:d0:
3f:d2:ca:27:c2:b7:ff:e4:6b:e2:ad:89:72:d2:a5:
a9:84:9b:c0:26:9a:25:45:5b:4c:ba:67:8a:3e:a3:
9e:60:b3:1c:84:14:a3:bc:e1:26:ea:67:cc:2d:c5:
40:5f:b5:d3:5e:6d:a8:13:87:9a:2a:04:0d:04:ec:
fc:66:03:e6:7b:6e:97:b0:ce:20:ab:d5:71:e4:9a:
0f:94:ce:79:ba:4c:d1:f3:2a:8c:9e:0e:84:2e:bb:
c0:c8:4a:5e:62:1d:0f:ce:1a:6e:a9:f4:70:18:c3:
46:cf:6b:f8:37:65:85:de:51:c7:68:c7:9d:7d:64:
98:ca:54:88:05:fe:e1:f6:08:60:2f:2d:8f:84:6a:
6b:90:44:ad:fa:d0:39:43:72:88:f1:64:d2:0e:99:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1B:2B:C4:23:4B:AC:E2:56:34:F4:E5:00:5F:C7:9E:46:BD:F6:9C
X509v3 Authority Key Identifier:
keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:f4:82:cb:b9:88:42:11:25:a8:96:4e:ae:c8:2e:4e:f0:34:
c0:b1:5d:c2:6b:38:a6:57:ba:8a:1e:c8:23:4a:bc:13:b0:52:
84:71:a5:b1:a8:a0:74:9a:aa:4b:a7:2f:32:91:05:5e:dd:6e:
49:7b:15:15:75:b3:43:0e:f0:68:11:a1:c7:b3:b7:ae:1c:fc:
92:9f:ad:95:38:a1:00:39:33:2e:2c:2f:41:3c:13:c8:7c:b9:
df:bc:3d:14:de:d0:d7:73:08:e3:5f:ea:69:58:7d:47:4d:d2:
56:7c:bd:97:b0:60:ef:3e:48:e1:6e:e1:ce:33:33:7c:0a:f3:
e6:39:95:87:98:0d:39:08:83:3f:25:db:6b:f6:50:37:85:bd:
ca:92:c9:75:20:11:59:38:74:a7:6a:f4:34:41:9a:da:eb:d3:
f4:e6:b5:53:e0:bb:98:56:82:76:87:52:fe:64:b4:0b:06:4b:
25:ee:18:07:0e:a3:da:63:ba:05:c1:0d:d8:2c:92:ae:fd:75:
ae:b1:5a:7b:ed:f0:11:a5:53:cb:08:2c:1d:74:d9:07:6a:03:
a5:cd:a7:66:07:30:ab:5f:57:86:bc:64:a3:00:f5:68:1b:f7:
d7:25:8c:ed:e7:56:07:dc:1b:82:7d:b4:68:b6:48:b9:d9:f8:
94:00:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:06 2026 by rpki-client