
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
File: ycIPtAaIDHHcvabGs_umov85Kks.mft (raw, json)
Hash identifier: /d6jWaXfeRCtLsCwLcTm4DXMsKpIFJCBcHzDruLpIFk=
Subject key identifier: 0C:2E:8D:D8:C3:D0:AA:CE:D4:A7:97:19:3C:37:CF:EB:E5:06:83:57
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Certificate issuer: /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
Manifest number: 2A
Signing time: Sun 01 Mar 2026 10:28:59 +0000
Manifest this update: Sun 01 Mar 2026 10:28:58 +0000
Manifest next update: Sun 08 Mar 2026 10:28:58 +0000
Files and hashes: 1: ycIPtAaIDHHcvabGs_umov85Kks.crl (hash: kX2qU2Ld1h3YofhvSxABGboUDxAb7YkAdtTaEzerPoo=)
2: 41E03246DA3E11F0A9D9994C8ED3641D.roa (hash: RSEIybSMpRGlyt7iVSAaODWDkzpxlz37Tk1zS8mwuzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Validity
Not Before: Mar 1 10:28:58 2026 GMT
Not After : Mar 8 10:28:58 2026 GMT
Subject: CN=69a414eb-3cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:26:06:85:fb:23:71:cd:76:fe:81:94:91:
34:75:3f:89:95:ea:09:f5:9c:c4:a6:ea:9a:db:ea:
48:67:01:1f:2f:6f:28:1c:d2:03:a9:aa:ef:ec:e7:
a3:4b:1b:5a:68:fb:95:12:f1:f6:f0:5a:9b:72:6a:
da:06:0c:9b:ea:2f:c3:62:32:41:f5:bd:50:d5:b1:
5d:89:0d:d5:c9:c3:ed:ee:c2:a1:24:e3:78:2a:11:
3b:24:a6:28:44:9f:b2:72:27:df:82:64:ca:6e:00:
5c:95:76:ac:ff:b6:c2:40:f5:b7:29:ae:90:ed:4d:
5e:44:1c:15:73:c8:7c:52:79:54:ee:5a:8e:56:58:
4f:9c:5f:25:a1:94:24:1e:2e:2e:03:09:3e:77:29:
ff:00:16:da:69:99:c3:c3:fa:b4:81:80:55:d4:24:
72:8a:46:07:1f:43:8e:ac:3b:4c:ed:f3:1e:56:7e:
58:78:99:bc:18:25:62:d1:ca:b0:13:d9:b1:e3:bf:
18:8c:f9:4e:3d:8b:18:b8:56:c4:4b:59:aa:31:51:
24:94:ca:a9:54:43:bc:88:7c:d5:0e:39:3f:98:26:
33:81:34:50:54:54:a9:8b:b7:5d:ad:ca:c9:7d:67:
20:6f:65:ef:a2:1b:d1:32:df:50:50:99:ee:d5:f0:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:8D:D8:C3:D0:AA:CE:D4:A7:97:19:3C:37:CF:EB:E5:06:83:57
X509v3 Authority Key Identifier:
keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d6:4e:87:60:72:e0:5d:67:79:83:29:e2:da:fc:3c:be:2d:
c2:23:0d:82:97:cf:67:cb:e1:ea:72:88:c6:a4:04:ae:cd:85:
b5:e2:0d:e6:71:52:a3:ea:55:a0:da:48:bf:00:9c:6d:e1:75:
c7:40:d5:69:f8:ce:6b:86:d9:15:f7:bc:a0:4b:6e:16:d4:49:
29:f4:fe:8d:2f:01:bf:d3:9b:d9:1e:83:9e:ed:e2:9b:93:b4:
6a:69:3c:f9:33:68:d4:05:b9:57:df:bd:34:a6:6a:d5:82:33:
51:0d:1f:ee:57:d7:78:49:01:d5:64:25:9b:0a:79:0e:cb:50:
8d:f9:bb:36:1f:d2:f4:06:e2:36:99:a5:39:93:18:ed:97:c3:
b8:6d:b9:70:04:84:1f:6a:65:3d:15:2d:ff:6a:10:5a:4a:01:
19:a1:14:e6:a4:36:6f:ea:1d:05:6e:a0:7e:d6:ac:00:a4:0e:
a4:27:2a:93:0e:fc:27:52:35:86:69:19:98:a9:af:fa:00:6e:
75:09:f1:5a:f5:81:8b:a2:38:b7:02:73:e6:fb:77:a0:d8:a9:
62:1b:6e:14:6b:ea:c7:80:a3:61:f8:53:94:a6:65:d4:b9:27:
2e:2e:94:5d:b1:9e:48:41:8d:9e:76:f3:a5:12:e6:bf:03:6c:
0a:3d:87:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:46 2026 by rpki-client