
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
File: yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft (raw, json)
Hash identifier: PQOVLSRPS1qjOw9TbyCncsvOJKmG+Dk8eAF8l3B0Aac=
Subject key identifier: CE:84:31:51:70:06:E9:BB:19:6B:8A:9D:65:52:86:EA:22:FF:F6:85
Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
Certificate issuer: /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
Manifest number: 0242
Signing time: Sun 01 Mar 2026 03:06:37 +0000
Manifest this update: Sun 01 Mar 2026 03:06:37 +0000
Manifest next update: Sun 08 Mar 2026 03:06:37 +0000
Files and hashes: 1: yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl (hash: WIku+FLaigr0cKjODZiQYLiZVeNutHMisycTj2t6OPQ=)
2: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (hash: /ERrUArKmo0KgEQ70S3Uf+U0E1QNCp3+3kkOG/O7FLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Validity
Not Before: Mar 1 03:06:37 2026 GMT
Not After : Mar 8 03:06:37 2026 GMT
Subject: CN=69a3ad3d-95a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:6a:cd:0a:be:96:b6:b3:f8:f3:19:83:ca:
48:3c:61:84:0c:b9:80:ac:2b:04:6c:4c:32:64:1b:
ff:53:7f:6e:c0:10:8a:88:97:cf:ea:ec:e1:9f:33:
8d:66:7b:0e:cf:f2:ca:77:a0:5b:c4:fc:86:20:0a:
08:38:ab:6d:8a:01:d4:ea:14:30:58:67:c7:17:ad:
f6:b2:64:41:6b:73:20:e6:11:b4:9e:1d:96:fe:fa:
29:28:42:3e:74:30:34:a5:8d:9b:98:20:45:43:b9:
73:f9:e1:f0:47:3f:83:68:14:09:2c:54:13:c0:68:
e2:b4:7a:93:d1:b5:b1:61:30:4f:19:29:1e:5e:68:
8d:6e:22:89:ba:5e:8e:8b:f3:50:1f:00:bb:90:a2:
62:7f:58:dc:57:27:bb:6f:ef:0f:8a:a8:1a:56:5a:
c3:7d:f6:23:33:f2:c3:27:9b:40:29:45:f7:81:57:
6e:00:2f:29:20:84:32:72:94:c9:84:7e:2e:5e:a1:
69:6a:2b:91:f6:a8:85:3f:ab:8d:a7:59:cc:06:0f:
a4:f4:00:24:b2:36:e9:3a:83:5d:bb:d2:2c:2a:93:
4e:fd:e7:0a:8e:d4:6f:9c:33:29:67:60:4d:e0:d5:
a4:e7:4a:15:c8:e7:9d:06:53:99:73:8f:b9:a1:8e:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:31:51:70:06:E9:BB:19:6B:8A:9D:65:52:86:EA:22:FF:F6:85
X509v3 Authority Key Identifier:
keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:08:0a:46:e2:6e:86:c1:b7:0f:44:f8:41:8e:51:0c:48:4e:
65:34:a0:71:48:86:01:37:6c:85:19:34:e0:24:f1:b7:d0:58:
85:3a:48:a1:7d:6b:90:7b:24:fa:2a:21:57:14:dc:8e:3c:6e:
76:be:32:72:af:04:fd:f5:5e:4a:23:03:4d:77:4c:28:87:2f:
2f:20:7e:9b:76:33:8b:5f:1f:b9:b6:bc:26:c2:8a:6e:67:cd:
17:8c:28:ac:9e:b5:a9:d1:2a:61:6b:fa:91:18:2a:bf:ce:9c:
4f:b1:a5:88:f6:e6:c8:ac:28:30:32:7e:4e:ea:b0:2d:0d:e6:
9f:7b:86:1c:94:37:34:6c:ac:f5:b4:d3:a7:a9:fd:bb:dc:ff:
d5:a2:fd:f6:6a:af:6e:9c:ba:27:52:86:39:55:0d:a9:f9:89:
1d:9b:18:f3:72:28:44:31:e3:c2:29:e2:80:f1:eb:b3:26:9a:
50:c8:e6:8e:d8:63:70:4c:81:d9:b0:88:ee:92:97:d3:05:75:
9d:3e:32:a2:ad:d5:24:0d:a9:ac:11:ac:32:94:7f:5e:6b:fc:
7b:19:3e:c7:22:fd:33:5a:f0:01:cf:b1:98:5b:a7:26:ae:f9:
9e:9f:d7:4a:ba:cb:03:3d:6e:ba:92:b0:35:c2:88:7a:fb:3d:
a5:0e:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:48 2026 by rpki-client