
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json)
Hash identifier: kqJYh6larTB/cPXahNiwsMUFcwCvTvJjCcs9UJlju28=
Subject key identifier: 45:A6:8D:61:FD:33:8B:B3:88:B7:EE:08:DC:21:B5:81:41:BC:A7:F6
Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
Manifest number: 021C
Signing time: Sun 01 Mar 2026 03:36:12 +0000
Manifest this update: Sun 01 Mar 2026 03:36:12 +0000
Manifest next update: Sun 08 Mar 2026 03:36:12 +0000
Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: m6CUuAbad7iWy1bNkQRBm3Az1ah6aErPPh9YK+e1GbI=)
2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Validity
Not Before: Mar 1 03:36:12 2026 GMT
Not After : Mar 8 03:36:12 2026 GMT
Subject: CN=69a3b42c-21df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c6:a1:e2:5a:07:e2:6e:4e:26:f1:9e:da:12:
26:54:df:7f:31:82:52:49:19:d5:d9:69:f9:0f:cb:
b3:45:ad:a5:1b:59:ff:aa:65:99:76:c5:e6:7d:73:
2b:a7:02:b8:ae:86:06:db:08:19:85:77:d6:c0:02:
5f:5b:8d:c4:c3:8d:3d:c7:f5:6d:c7:14:4f:fb:f6:
4f:4f:e0:40:91:92:ec:c2:75:3e:0d:f8:46:da:f4:
b4:38:72:88:7f:22:7c:14:ad:10:35:73:1f:88:14:
cc:b6:48:46:43:a6:50:2a:74:a3:d8:23:e7:5b:44:
fd:a8:e5:c6:d9:33:16:65:e8:95:6c:20:7f:a1:57:
ad:37:c2:f3:45:46:73:25:d1:53:79:ec:b7:34:f4:
9f:0e:34:dc:f0:3b:68:f3:23:b0:30:29:c0:40:c3:
c2:8a:74:99:97:90:18:e3:53:d8:aa:1d:2f:9b:09:
6f:0b:c2:cb:60:43:9f:6a:e2:f3:2b:bd:c5:0a:20:
98:74:67:49:2e:09:fc:d9:7b:f8:4b:60:b2:04:b7:
fc:08:7c:83:cf:3b:2f:60:55:ae:ac:4a:f5:28:b4:
3b:33:f9:02:fa:08:17:38:54:40:6f:fe:bb:25:ff:
05:22:95:ae:ff:9d:f8:3c:50:20:74:24:9c:31:d4:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A6:8D:61:FD:33:8B:B3:88:B7:EE:08:DC:21:B5:81:41:BC:A7:F6
X509v3 Authority Key Identifier:
keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:d3:95:2a:c3:48:6e:62:e7:64:97:6e:1f:2e:c2:40:3f:b8:
59:74:98:5a:12:ab:4d:d9:0f:62:31:bc:60:f5:c6:8e:3f:20:
f0:49:a6:24:88:e6:b0:33:3d:8d:7e:67:40:f7:41:17:e8:ea:
df:ae:37:df:3b:04:28:ef:40:4d:6a:9d:da:da:1a:57:a2:d9:
f9:13:9f:ec:64:b0:04:8a:2a:0e:da:eb:a0:99:12:e1:49:e0:
34:c2:e5:99:24:97:0c:ba:52:ae:1c:3d:75:56:87:b8:6f:20:
04:dd:ce:f6:e0:51:92:9b:2c:52:87:db:84:9b:e0:ce:44:ee:
41:3b:4b:42:c2:f1:f4:7d:32:9f:9b:47:0f:68:ca:eb:2e:99:
8f:29:75:ed:0d:76:5d:0d:ff:08:67:40:c3:0d:ef:99:20:73:
16:9c:4f:e5:f6:01:d3:cf:89:34:65:60:c0:5f:ed:8c:ed:d6:
35:cc:c0:b0:a5:1d:bf:6a:09:01:b5:35:10:24:ec:42:1c:19:
52:ea:8a:0d:08:44:e3:ab:50:1f:27:bf:5c:cb:60:43:c2:74:
6d:b1:cf:0f:91:e5:d4:b8:9e:fb:3a:05:fd:2f:ff:3b:f7:8a:
3c:65:8d:d1:d6:cc:b1:93:7f:af:1b:40:f3:9b:e8:a8:0e:07:
cf:6a:7c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:56 2026 by rpki-client