
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
File: 1ybobzALJko1PClnPgdxb1RUteI.mft (raw, json)
Hash identifier: BDctlXUvF2LrMMdKQF/KvcegRh26p8C74cVU0JdwoHg=
Subject key identifier: 4D:F9:F9:20:4F:99:07:D4:64:45:31:40:52:67:AC:A3:98:3A:DF:16
Authority key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Certificate issuer: /CN=A91B4053/serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
Manifest number: ED
Signing time: Mon 21 Sep 2026 06:24:52 +0000
Manifest this update: Mon 21 Sep 2026 06:24:52 +0000
Manifest next update: Mon 28 Sep 2026 06:24:52 +0000
Files and hashes: 1: 1ybobzALJko1PClnPgdxb1RUteI.crl (hash: WtuX2vDR1yLtsMaKHwn36NxNWnNfDYvJvCRSk4BD+bY=)
2: D28B7DD450E411F081600061C4F9AE02.roa (hash: oi0JC/Dg/qtN4Sq4ydksp3+2DNk0fSKtyYZSAHUSHgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Validity
Not Before: Sep 21 06:24:52 2026 GMT
Not After : Sep 28 06:24:52 2026 GMT
Subject: CN=6ab0cdb4-b45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:93:83:d6:16:28:d0:c2:7a:df:ff:0c:39:
c2:cf:01:0f:6f:19:c5:87:30:8b:aa:b8:f0:3f:b3:
ba:fc:aa:9d:57:cf:f8:a4:59:ce:df:4a:f1:58:f2:
9a:79:bf:01:0c:82:07:b8:d1:81:6b:76:2c:2e:db:
5c:86:db:07:e5:a2:07:5c:7b:66:53:13:ed:76:19:
ac:18:62:94:10:74:7e:b3:8a:b3:29:ae:84:a0:8a:
72:ff:60:95:92:93:34:d7:46:75:04:9b:cd:56:4f:
4c:14:5d:16:db:d7:9c:98:6b:3e:b5:37:3c:0e:9a:
c6:5c:fd:d8:ca:ce:ff:c7:f0:53:1c:60:cb:37:75:
a7:56:86:6a:41:0e:2b:1a:5b:d5:4b:ee:e9:f8:a1:
3e:3f:e2:e0:51:13:e0:cf:81:18:c9:39:21:0e:f7:
da:07:c7:6c:e0:d1:8a:bf:43:b3:7f:6c:20:04:3b:
86:2c:73:84:bf:b1:b6:c3:34:d2:e0:3f:5f:04:7d:
21:ad:67:14:a3:20:34:35:93:e6:d9:b8:1d:74:8e:
cf:9a:8a:7b:b7:27:e9:15:91:3c:36:9a:46:14:75:
99:72:e6:1f:e1:61:66:c9:9a:bf:b7:f8:43:d4:74:
a9:d5:0a:60:f3:9e:9b:91:bd:00:bc:33:f0:aa:95:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F9:F9:20:4F:99:07:D4:64:45:31:40:52:67:AC:A3:98:3A:DF:16
X509v3 Authority Key Identifier:
keyid:D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ac:ca:11:23:f0:c1:30:2c:7e:67:1f:f1:86:35:ac:9b:57:
69:a7:77:ce:29:a9:e0:5e:7d:5d:06:02:58:72:a3:33:75:7d:
be:dc:d0:1b:b7:d0:93:be:8d:5d:df:44:f0:5d:02:9e:fd:a5:
70:71:10:09:0c:03:05:4f:46:dc:c8:30:c4:cf:64:16:44:d4:
85:f2:a0:a0:f5:8f:a6:02:3e:d1:37:6a:9d:e1:1a:38:72:a5:
c8:84:63:33:cd:19:19:1b:f7:5b:02:c1:9c:93:ad:ad:46:30:
72:46:57:36:17:38:43:a1:3d:f6:8e:4f:8c:e5:cc:b3:cf:ff:
a6:e4:56:07:ee:05:68:63:48:bc:65:49:6b:ef:65:32:33:12:
b5:93:51:b1:4f:c0:50:75:72:e7:1f:ee:8f:80:08:72:5d:ad:
68:b0:02:c0:9f:34:d3:e0:81:32:b1:14:f0:c2:43:94:93:09:
45:38:06:83:5c:62:6d:25:92:bb:cc:58:f4:c3:83:93:0c:3e:
c7:63:db:46:22:9a:21:bf:cb:91:3a:90:eb:7b:8a:38:bd:0b:
2d:a7:bb:87:09:43:cf:51:8f:8b:1d:b9:2a:83:1f:d5:32:69:
94:5d:33:c3:c5:e2:fc:03:7a:6a:bd:06:b6:a0:82:26:25:3d:
17:fa:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:27:25 2026 by rpki-client