
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft
File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json)
Hash identifier: /5CYI11BFHO/6gbxDEtT8bQxuixyiB7gx8H+PjDt16g=
Subject key identifier: 7C:87:8A:00:00:5E:76:D1:20:42:0B:F9:A2:73:85:5E:EA:2E:34:6A
Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A
Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A
Certificate serial: 037E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft
Manifest number: 0377
Signing time: Mon 02 Mar 2026 00:03:53 +0000
Manifest this update: Mon 02 Mar 2026 00:03:52 +0000
Manifest next update: Mon 09 Mar 2026 00:03:52 +0000
Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: bFkcagvkRsW7OdNs2Ms2MhCpg6C6rvn/eC70FFp3Nq8=)
2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: ebLn1kmFFAVk7O0jw8QI6JsXqB37NuyRPaNONVz+j0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl
rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3E17, serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A
Validity
Not Before: Mar 2 00:03:52 2026 GMT
Not After : Mar 9 00:03:52 2026 GMT
Subject: CN=69a4d3e9-f5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:1f:2e:bb:fa:55:7c:71:bb:72:2d:06:64:
c4:db:8c:11:55:65:1d:e0:ef:9c:91:0f:e7:24:e6:
1d:e2:1b:cc:e6:45:7f:43:58:dd:a2:96:ac:1d:11:
9c:4d:55:42:2c:16:6c:7d:a8:5d:e4:60:61:53:7a:
21:cd:8e:31:22:aa:14:db:f1:a5:e6:3b:51:ea:de:
8d:e7:87:7d:dd:32:23:75:38:5f:2d:df:65:e3:7f:
e8:c7:9c:c2:47:96:54:b6:30:3e:c8:4f:72:57:93:
81:23:94:bb:f7:70:f7:4b:e5:33:e2:3e:a1:28:00:
56:f7:51:ed:27:9c:00:2e:4f:99:72:c2:83:28:98:
a1:89:35:d5:02:f2:f9:b2:7d:3e:fd:06:b4:67:72:
ca:46:84:e4:5b:f4:03:3b:ad:f9:6d:17:84:eb:84:
52:24:ab:e6:8c:c7:1e:bc:a7:2e:71:35:46:1f:1a:
38:1b:88:d7:f2:86:79:08:99:b4:20:3a:9d:05:a7:
e4:3b:e7:4b:ca:80:4e:52:03:4b:c3:31:36:14:fc:
a6:2c:d7:4e:d0:9b:dc:39:b1:54:a7:6c:4a:4d:a0:
0d:41:01:da:3f:20:08:b9:e5:1e:01:07:70:15:44:
8d:4e:88:4e:a9:b4:63:f5:01:53:7c:a2:2d:98:3c:
cb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:87:8A:00:00:5E:76:D1:20:42:0B:F9:A2:73:85:5E:EA:2E:34:6A
X509v3 Authority Key Identifier:
keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fb:3c:ec:ef:8f:b2:13:cf:ea:ee:0b:9c:28:76:60:a5:f9:
89:11:af:d5:2e:e3:9b:ec:fb:fd:8d:80:7d:74:26:42:5a:7c:
0e:8e:8e:c0:ef:7c:9d:51:14:fe:10:b0:69:c1:b5:eb:38:6e:
3a:88:b1:83:8a:27:91:7d:44:28:91:58:ad:2b:cd:7f:d0:bb:
14:be:9a:eb:74:50:fe:cc:ff:cf:d5:e8:8b:27:7d:81:9e:49:
a7:13:8d:35:5b:47:14:48:5a:55:0c:3c:ce:94:77:f0:8a:ed:
e6:14:31:ab:bc:2b:ea:54:0f:6f:3b:9d:c0:77:1c:0e:e2:bc:
ed:83:fa:97:47:95:a8:7c:92:15:7b:0f:99:a8:d8:2a:b6:65:
2b:f3:0d:1b:dd:1d:a6:f3:8b:1c:c4:a1:22:70:29:e2:a6:19:
f7:c3:e9:64:4d:28:b4:02:13:e8:5d:75:ea:39:7b:fe:df:de:
c7:d6:90:6f:aa:52:f4:9f:13:86:be:d9:28:6f:e2:b7:36:03:
b5:8c:06:2d:6c:14:b2:b4:b9:03:a7:1c:1f:33:24:1a:0c:8b:
4b:14:6b:be:74:f1:1c:61:63:43:bb:e8:10:64:a7:1e:22:51:
d3:60:77:2e:df:47:93:be:55:47:c8:54:01:b5:2a:31:c9:79:
6f:3d:77:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:51 2026 by rpki-client