
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft (raw, json)
Hash identifier: SvphAZnmJ3M5ja9FdjIaZ1Ilo8cyTdqkovTlZfBdlCE=
Subject key identifier: CD:E7:94:62:AE:9D:B4:5B:33:D0:E4:F5:33:0B:7D:8A:47:91:5C:0A
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial: 05B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
Manifest number: 057E
Signing time: Tue 06 Oct 2026 23:25:59 +0000
Manifest this update: Tue 06 Oct 2026 23:25:58 +0000
Manifest next update: Tue 13 Oct 2026 23:25:58 +0000
Files and hashes: 1: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl (hash: MbfJTiqGO7Y987KlwMoUDEyPfteuTe3XfaYQK0Dq/jI=)
2: 89631CA886F211F1B8F66003A7EE528E.roa (hash: pp0SsPRI0lZaJFY63wMy0xm+ALBFk9ue42FemaySj5U=)
3: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (hash: KD9hfqOsHpMQcz4Ocv/ZU2VsOJ4y9reBcPWQuq7fk2E=)
4: 35A2418C45AE11ECB857890EC4F9AE02.roa (hash: bQnKvH35hX5X/UldLBXn3SvQoLw65mlVkunvCUb9t7w=)
5: 9896BA2EB6DE11EC8DB17172C4F9AE02.roa (hash: Z7D659FzkIB1+T2i3b4ybnwfMQnbYWcfLc/V298b1eI=)
6: FB03729A370111F1AC489D14BF833773.roa (hash: qCyra6afbP8VZyk8tTQuTnWntq5Vf9XBEhtSR3+HSbs=)
7: FC94057A370111F1AC489D14BF833773.roa (hash: VzSo0BSup+M9DK5oiFRGkbacIHVy+Ni31LYkiFE8P8s=)
8: 351AC73E45AE11ECB857890EC4F9AE02.roa (hash: WkaUxI5aNRHxxaJY8HBva8OySlCaRi8rcu5by1WiBNg=)
9: FBB1514E370111F1AC489D14BF833773.roa (hash: Y1XvAg0Ntlz4qbXESuumNTPWdZ4Y+sd5xBosago0l14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Validity
Not Before: Oct 6 23:25:58 2026 GMT
Not After : Oct 13 23:25:58 2026 GMT
Subject: CN=6ac58387-38b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:19:d7:ed:ec:5f:d3:60:64:18:99:75:d6:d2:
93:85:66:9d:d2:77:66:53:3d:5f:16:fb:a6:60:0d:
e9:86:01:a0:54:27:58:8e:92:eb:2f:93:bb:c3:45:
d7:ba:1a:58:75:b4:ee:43:2e:3c:b8:aa:a6:b1:22:
18:ee:3e:53:e6:9a:e3:d5:7f:61:72:e4:e9:fd:ab:
4d:ad:1c:91:d9:36:86:9a:87:00:c6:8d:2c:f7:fa:
13:06:e1:9b:0b:91:7c:60:8b:55:ca:87:c8:c7:27:
37:37:c4:5b:5c:f5:5c:a2:64:39:71:a3:e9:29:b3:
73:2c:60:98:a4:69:15:ee:4b:7d:9b:80:1d:c9:d4:
18:dc:12:bf:31:bc:d2:3f:0b:df:20:b0:7d:6d:45:
e8:66:fa:ae:b8:04:ee:d2:e9:9b:87:d4:cd:c6:02:
fd:53:67:1c:55:7c:98:ae:c0:75:4a:f1:28:d0:39:
ce:8d:6b:0b:a3:52:98:cb:b4:51:8e:35:b7:dc:19:
c8:82:5d:b3:64:98:a3:7a:77:fc:1b:02:86:fb:35:
a4:c3:e5:d7:23:50:3b:de:a2:bf:a6:53:7a:72:a9:
ee:ac:b7:09:d3:33:d6:78:25:c7:0a:0c:b2:95:05:
f0:3e:c4:66:f7:2b:c7:df:73:fe:91:00:1f:72:a5:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E7:94:62:AE:9D:B4:5B:33:D0:E4:F5:33:0B:7D:8A:47:91:5C:0A
X509v3 Authority Key Identifier:
keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:f9:34:6b:60:aa:25:c4:0e:ff:5e:43:f7:ea:3d:6f:57:dc:
99:cf:56:83:ef:a5:cb:23:b9:27:86:d1:a2:9a:4c:d5:a5:86:
56:de:c1:1f:26:62:7f:78:4c:af:9a:05:4a:04:a5:01:08:1f:
6e:e2:21:8e:42:7e:b1:4c:29:92:b9:33:0b:9b:a6:91:1a:b9:
01:15:34:fa:27:48:33:35:ff:b5:3d:ca:51:fb:d0:1b:6b:2d:
55:e7:a9:e2:33:78:26:54:4d:5a:fe:9e:79:f4:2e:41:2e:e6:
ba:af:09:01:68:ea:54:13:f9:59:bd:b3:c2:42:5e:ad:a6:83:
11:62:f8:c4:49:a9:cd:dd:8b:62:da:80:00:92:e1:d3:87:9c:
6d:5e:0d:93:ba:7f:88:d9:9f:32:1e:44:95:06:71:4b:d2:b1:
4b:52:cf:db:e3:65:44:7f:0f:23:26:4e:17:fb:93:8f:d8:d3:
1f:a8:3f:02:82:13:28:8a:ff:90:b4:67:5f:e6:67:13:27:4f:
b5:60:89:e9:17:a5:ae:a8:10:f6:11:da:de:5a:9d:ba:77:55:
cf:d7:71:68:d7:26:cf:28:1b:c8:b7:a4:53:0f:ef:99:f4:eb:
d6:7e:dc:6c:68:47:f2:2e:06:9a:33:b2:55:ba:41:f4:b6:cc:
eb:ef:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:55:37 2026 by rpki-client