
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json)
Hash identifier: prvViQ+h3+OLROaHrGFgiWeQzcuo6mXv7vGKE2uz63o=
Subject key identifier: 86:2D:8C:7F:85:C3:6A:85:08:98:A0:53:BC:DD:6C:34:30:BC:FA:B2
Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB
Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
Manifest number: 0801
Signing time: Thu 16 Apr 2026 21:05:26 +0000
Manifest this update: Thu 16 Apr 2026 21:05:26 +0000
Manifest next update: Thu 23 Apr 2026 21:05:26 +0000
Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: 2XqzOhx/SO7pwGqqUmgwVeTeg+BYOoS6YOM/LQQLUFY=)
2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: //kyIlIYFX3+08S3h9a7dEmLAcY3BX1jLjRJO0SJN6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl
rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
Validity
Not Before: Apr 16 21:05:26 2026 GMT
Not After : Apr 23 21:05:26 2026 GMT
Subject: CN=69e14f16-72db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:72:f8:aa:af:9c:b0:da:79:4e:7f:d9:f4:0f:
00:e6:bb:a2:d1:20:57:87:27:eb:f2:0f:75:7f:de:
9d:f6:21:d2:1d:bb:46:83:09:be:07:35:ab:d7:7f:
e4:8c:71:58:f2:49:5a:2d:50:fe:7b:1c:22:90:88:
15:7a:84:a0:54:17:a2:e4:34:ff:0e:63:b9:2f:18:
98:c9:89:1b:ac:b8:4d:c2:79:15:9b:4d:f1:4b:3e:
b8:4b:45:26:cd:66:8e:5e:95:95:b7:7a:8f:59:d3:
c8:08:e0:b6:ab:b6:31:aa:ec:d4:34:71:a5:3a:78:
51:ea:b1:87:3c:61:4c:60:46:df:46:ff:e9:3b:ec:
db:0f:c8:d3:98:77:3b:bc:e8:02:8f:fb:e4:a0:33:
3a:40:e8:06:4a:a2:75:57:56:44:ef:1b:e4:0d:dd:
c3:b9:f1:51:75:e4:8e:bc:47:bd:fd:66:f9:df:c5:
d6:1d:e2:c9:44:c3:84:11:8d:e1:07:8d:50:3c:83:
07:52:08:d3:e6:7e:b5:2a:11:3b:0c:e8:8d:fc:0a:
bc:57:9d:be:61:55:93:17:fa:e9:a3:9e:e7:2c:21:
d8:34:14:31:27:4e:8a:ec:73:d8:1e:3b:c5:e4:af:
8c:d5:42:9b:8a:ba:7f:62:42:dc:19:80:2c:9f:30:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2D:8C:7F:85:C3:6A:85:08:98:A0:53:BC:DD:6C:34:30:BC:FA:B2
X509v3 Authority Key Identifier:
keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:02:e0:fc:89:3f:e7:86:ef:50:b3:fc:80:bb:04:cc:26:fc:
2f:cb:68:fd:37:58:cd:30:01:1b:25:89:5c:66:64:31:bb:e1:
9b:91:6f:d4:7c:7a:2e:49:4a:d4:e2:1b:d3:a5:07:df:e6:fd:
82:2d:8f:bf:64:07:b2:b3:2a:1a:f9:f0:d1:12:9d:73:d7:6b:
4e:d7:e6:6b:c3:37:0e:d5:39:16:d3:e4:68:2e:3a:11:66:98:
62:aa:2e:c9:e0:f0:72:a5:9a:0d:11:ae:6c:da:27:ea:6b:04:
a6:6f:c1:14:56:1d:0b:56:a9:05:05:e5:ea:e4:c1:33:8f:6b:
74:ff:4b:c6:63:c8:d9:15:58:c4:fa:d3:53:c1:60:05:57:15:
52:ae:30:28:b0:1d:df:60:60:35:e2:fd:20:c5:77:96:b1:a6:
12:e1:9f:1a:35:fb:8e:5c:aa:96:20:47:e0:58:b5:8a:05:8f:
24:9d:17:83:6c:24:c9:67:9b:5f:1b:b9:bc:3b:6e:3c:7f:92:
c2:6e:0f:d9:de:89:8c:4a:02:5d:c1:74:ab:e8:69:f6:17:63:
9b:b2:26:c3:a4:a9:23:f0:b2:30:73:13:36:80:b1:02:d2:e0:
ae:f7:2b:78:35:2c:b9:8d:c1:ec:ae:96:6d:7b:da:18:a8:a5:
b0:ef:bc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:11 2026 by rpki-client