
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
File: yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft (raw, json)
Hash identifier: z6WNdC+JDNzmQUStzaEfXG7JMsyocamwA7VEndqTT00=
Subject key identifier: 46:68:EC:0C:62:33:CE:95:DA:6C:85:7B:10:77:FE:3F:2A:0D:A4:3D
Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
Certificate issuer: /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
Manifest number: 025E
Signing time: Fri 17 Apr 2026 01:57:35 +0000
Manifest this update: Fri 17 Apr 2026 01:57:34 +0000
Manifest next update: Fri 24 Apr 2026 01:57:34 +0000
Files and hashes: 1: yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl (hash: FhjEZ5R6xRLc244aofSvJFfmxVsHCF0DoSEu0pmCe+s=)
2: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (hash: 0zxYrdPrMBfjgPj6RJV7ZvcXItqtU0NYSlHoSwv7daw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Validity
Not Before: Apr 17 01:57:34 2026 GMT
Not After : Apr 24 01:57:34 2026 GMT
Subject: CN=69e1938f-da1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:e8:29:dc:14:a5:d5:b1:53:59:a2:d8:ef:
ec:63:d7:ce:ae:78:f3:61:d2:7a:61:a7:c4:c4:ef:
c7:55:68:3e:12:7d:13:92:d1:52:32:44:db:b9:30:
72:6f:91:03:4d:e9:32:cf:5c:8f:81:da:91:42:55:
27:ab:04:75:bc:2b:0a:8f:ad:a6:d6:e0:1e:9e:bb:
99:50:37:d8:b4:36:65:a9:eb:3d:1d:51:f7:3f:3e:
66:28:67:05:c9:61:8f:10:4e:ed:96:63:b9:21:43:
1f:1f:2d:ed:12:ea:05:68:9d:e2:58:45:a5:0e:47:
44:22:41:44:6f:61:b4:57:15:8c:55:89:cf:f2:67:
be:3b:94:77:07:fc:1d:c7:89:63:65:a4:48:08:4e:
30:70:21:bd:a4:19:ff:c0:66:ea:26:f4:ae:ed:e5:
48:c8:a8:33:e4:8f:be:1b:7a:0a:ef:d1:7e:77:95:
d9:3b:07:97:6f:00:9b:9d:5c:bf:b4:ca:c0:80:2e:
00:42:6b:dd:78:fe:f1:c4:44:23:bc:79:dd:8d:9c:
87:c6:32:65:fe:5b:06:ff:ff:f2:8a:0c:3b:9b:0c:
f5:57:e3:9c:45:0d:68:54:22:8a:01:8b:32:6d:62:
bb:77:ca:5b:5b:c1:ee:95:b4:07:f3:b5:a4:ba:41:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:EC:0C:62:33:CE:95:DA:6C:85:7B:10:77:FE:3F:2A:0D:A4:3D
X509v3 Authority Key Identifier:
keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:a9:ab:28:ac:67:6a:9d:d4:59:57:69:d5:c6:8a:db:28:d0:
84:a3:6d:ac:17:97:15:3c:02:5f:78:37:04:f0:cf:a5:40:3c:
19:1d:51:47:37:c1:dd:e3:c1:ab:5e:62:ff:8d:9a:c0:69:42:
4b:a1:e2:22:b0:23:59:a1:31:19:b7:21:d1:90:b9:f4:c4:31:
ce:7e:2e:c1:d3:bd:ac:72:9e:23:24:fe:41:23:f1:c2:48:8b:
0a:0f:2f:ad:10:c5:78:ac:6f:c3:e9:db:be:ff:e7:65:bd:36:
a4:4c:b7:bd:4c:b4:58:65:11:e5:a9:fb:1e:4a:76:89:d4:ec:
e0:33:bd:93:5b:7b:97:48:33:86:f2:63:81:7b:f2:94:6a:be:
b5:1e:65:69:cb:8c:c7:aa:d8:80:c7:ec:4b:50:c6:be:b4:cd:
7e:32:99:0f:61:e2:7e:c3:f7:e8:d0:2d:9a:da:45:b2:12:a8:
6a:e7:b1:17:a2:21:21:c9:51:2e:0a:e4:66:99:1d:5d:cf:5d:
97:25:e7:cd:c5:a6:08:db:0b:a3:69:66:a5:87:e9:64:11:87:
a6:3d:3e:7f:0f:ec:eb:5b:fe:c1:ce:eb:06:e7:e4:0f:ce:cd:
ac:88:0e:4e:b3:e5:87:9c:0e:50:21:b5:3a:0d:9d:a2:b4:b6:
87:04:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:02 2026 by rpki-client