
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json)
Hash identifier: cSDMoDmH5GV3kMNMrTj8xmOmeC2ro8DCs/DjdUWuoWY=
Subject key identifier: 1F:2D:01:D8:AF:99:B9:30:CE:61:B7:A7:E3:4C:A8:B6:98:F0:97:F6
Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
Manifest number: 026C
Signing time: Mon 27 Jul 2026 03:33:50 +0000
Manifest this update: Mon 27 Jul 2026 03:33:50 +0000
Manifest next update: Mon 03 Aug 2026 03:33:50 +0000
Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: BfqGdhyIHdHBjToGr54FRItBAKr0Bv3JbzZ95EcW5CE=)
2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: 4Ttg6a+Izn8a70sY4W6bAM3oSgGKBOsCI9uHmrpaOfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Validity
Not Before: Jul 27 03:33:50 2026 GMT
Not After : Aug 3 03:33:50 2026 GMT
Subject: CN=6a66d19e-96dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:8a:2f:43:1f:d9:10:4d:17:e3:d4:81:e2:
96:3d:2f:75:d0:4f:18:ec:37:ac:85:56:4e:da:66:
84:7e:7e:eb:1a:83:09:4b:cb:f4:83:4e:c9:f1:db:
86:bc:03:f2:8e:b9:aa:50:a0:d0:bb:5f:ba:c0:77:
06:c0:22:e8:39:13:af:cf:2b:fe:d7:47:22:34:86:
9e:5c:5e:fb:0b:73:0c:95:94:f8:d0:50:cf:89:08:
a5:ca:af:a3:dd:dc:4f:4e:27:6c:2d:aa:28:28:5e:
68:54:81:7d:13:00:fb:db:8a:20:28:7d:0b:73:70:
b3:00:01:51:16:80:21:b2:c9:d9:15:2f:2c:ab:5c:
32:5c:38:d8:b0:a7:41:61:5c:fb:27:83:e4:79:11:
7e:75:2e:04:ee:02:e4:32:bb:46:01:d0:c2:5a:0c:
9f:c0:61:c2:90:ff:57:d1:3a:aa:b1:6f:ba:0e:94:
e8:08:08:08:6c:8d:08:5d:4a:1a:37:b5:62:2c:bf:
6b:f3:84:79:c5:f2:54:26:b8:6c:1c:ef:d7:53:60:
95:d4:4e:71:e7:af:fa:48:8e:26:bc:60:f3:ce:4d:
36:86:b2:d1:12:02:5f:7b:0a:19:3b:68:86:02:f0:
24:6b:8e:6a:8e:fa:7e:8d:b5:22:86:7f:ff:1b:9b:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2D:01:D8:AF:99:B9:30:CE:61:B7:A7:E3:4C:A8:B6:98:F0:97:F6
X509v3 Authority Key Identifier:
keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:85:02:72:06:0b:96:4b:c8:73:40:8f:b2:6e:e2:fa:67:ed:
97:f2:d3:27:17:7d:72:ec:72:8a:a8:6b:3e:9d:a4:40:ce:b7:
a7:b2:51:cc:d4:11:f2:31:21:d7:96:aa:b8:92:69:5e:d6:ba:
33:7c:2a:5c:b2:13:ad:74:20:cc:cc:60:35:c3:59:f9:78:64:
2c:92:01:8b:2c:7f:dd:a7:73:79:4b:0b:ae:e8:36:56:13:6d:
5a:b7:90:1f:1e:de:9a:e3:77:ab:d0:8c:d1:a0:d4:72:22:36:
6b:3b:e7:65:a2:72:4f:a4:c9:d4:ea:2a:4d:ca:02:54:29:3c:
ea:ed:5d:00:4a:b5:67:4f:5c:87:2f:9f:e0:44:a0:94:2a:47:
50:28:19:e6:3f:35:e4:78:af:58:07:55:9d:f8:63:24:b4:f9:
6b:4b:76:67:55:e3:b3:ec:98:b9:90:9c:f6:e6:11:60:d5:f7:
f3:e4:89:43:bb:c5:08:3e:9d:81:a0:98:f6:9f:74:a7:f1:c1:
53:11:f7:8d:7f:1f:c4:55:7a:3d:53:1b:91:6c:5e:ff:c0:f2:
b5:47:bb:ee:4b:09:21:e9:6c:e7:93:cc:13:67:61:c6:21:4a:
ed:73:cb:4c:9c:70:f9:08:c4:3c:75:b3:2b:c3:38:91:6e:22:
53:8e:f6:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy
QkM5QzQ0OEIwHhcNMjYwNzI3MDMzMzUwWhcNMjYwODAzMDMzMzUwWjAYMRYwFAYD
VQQDEw02YTY2ZDE5ZS05NmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplOKL0Mf2RBNF+PUgeKWPS910E8Y7DeshVZO2maEfn7rGoMJS8v0g07J8duG
vAPyjrmqUKDQu1+6wHcGwCLoOROvzyv+10ciNIaeXF77C3MMlZT40FDPiQilyq+j
3dxPTidsLaooKF5oVIF9EwD724ogKH0Lc3CzAAFRFoAhssnZFS8sq1wyXDjYsKdB
YVz7J4PkeRF+dS4E7gLkMrtGAdDCWgyfwGHCkP9X0TqqsW+6DpToCAgIbI0IXUoa
N7ViLL9r84R5xfJUJrhsHO/XU2CV1E5x56/6SI4mvGDzzk02hrLREgJfewoZO2iG
AvAka45qjvp+jbUihn//G5tmXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8tAdiv
mbkwzmG3p+NMqLaY8Jf2MB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB
REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS
UlhSbzNKSm5YR3NyeWNSSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXoUCcgYLlkvIc0CPsm7i+mftl/LTJxd9cuxyiqhrPp2kQM63p7JRzNQR8jEh
15aquJJpXta6M3wqXLITrXQgzMxgNcNZ+XhkLJIBiyx/3adzeUsLrug2VhNtWreQ
Hx7emuN3q9CM0aDUciI2azvnZaJyT6TJ1OoqTcoCVCk86u1dAEq1Z09chy+f4ESg
lCpHUCgZ5j815HivWAdVnfhjJLT5a0t2Z1Xjs+yYuZCc9uYRYNX38+SJQ7vFCD6d
gaCY9p90p/HBUxH3jX8fxFV6PVMbkWxe/8DytUe77ksJIels55PME2dhxiFK7XPL
TJxw+QjEPHWzK8M4kW4iU472VA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:44 2026 by rpki-client