
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json)
Hash identifier: zVarN5ycwpfPBlJC9iYpHxXJjSPKRAFQ0oaXwXoPzSY=
Subject key identifier: 40:65:39:04:6A:AC:FB:FB:45:47:8D:2D:D8:CA:8D:EC:79:42:91:FE
Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80
Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
Manifest number: 0203
Signing time: Thu 05 Nov 2026 04:04:55 +0000
Manifest this update: Thu 05 Nov 2026 04:04:55 +0000
Manifest next update: Thu 12 Nov 2026 04:04:55 +0000
Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: 28m74qL/dZccu4N8FbEUB/YYRscjD4Q5+dEClikUDMA=)
2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: yIHsiGXUbr4yiSWIbyeH/+lnd1LO5enPoNYE+CObcWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl
rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
Validity
Not Before: Nov 5 04:04:55 2026 GMT
Not After : Nov 12 04:04:55 2026 GMT
Subject: CN=6aec0067-f1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:56:f5:90:f7:9a:77:6d:16:76:3a:da:e0:
b4:da:2b:4f:fe:b7:ed:03:1f:05:d8:83:18:be:da:
38:15:21:62:bc:16:4c:cf:8d:d3:ea:95:b7:ae:b4:
2c:a0:8a:9e:3d:c5:05:34:ca:a3:45:79:0a:26:eb:
c5:85:15:2b:1c:7a:c3:a3:55:9f:33:e1:5a:66:94:
a7:36:83:46:fb:6c:1a:86:13:33:38:7f:4c:87:bf:
ad:ce:09:21:25:d3:d5:88:2f:21:ec:c0:93:b3:d8:
4e:65:e6:75:13:8c:5f:9a:a8:f2:0a:a7:38:71:c3:
8d:b7:a9:4f:e4:92:bc:57:f9:89:46:4a:f9:3f:18:
af:be:f0:3b:b0:7c:8a:4d:9f:63:1f:1f:9e:0c:18:
d4:ef:2e:98:33:79:75:d4:df:3b:f7:f7:98:74:ec:
d9:08:79:29:a3:71:c4:84:b9:0a:01:6b:ec:3a:d7:
96:25:b7:f1:da:b7:67:a7:10:22:ba:f0:2d:e8:28:
e6:73:1c:6e:90:5d:48:17:27:7f:92:a5:f0:2b:c5:
72:1c:f2:ee:fe:75:6f:a7:de:29:e1:31:45:94:4a:
4b:61:9b:ee:21:11:a6:ef:5d:22:6c:6a:73:eb:64:
2f:74:46:0b:9b:92:27:79:f2:d5:6a:93:ac:9a:2f:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:39:04:6A:AC:FB:FB:45:47:8D:2D:D8:CA:8D:EC:79:42:91:FE
X509v3 Authority Key Identifier:
keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:de:f8:94:56:54:ec:f0:6c:56:6c:ba:bb:0e:1a:ef:1f:92:
68:bf:56:13:2a:88:e7:c6:63:aa:be:0c:0e:b6:fd:1a:b0:15:
f6:ee:0d:ea:f5:6f:e7:c7:89:96:cf:a6:ef:d1:08:9e:40:35:
7d:b9:7b:e1:f0:09:32:18:d9:03:bd:08:bf:be:9e:3b:52:ef:
3e:f9:b6:c3:61:4f:bb:25:52:b1:70:0c:07:7f:6d:1a:6e:bb:
97:a6:46:21:f8:4d:d1:af:21:00:42:a3:17:eb:f6:c7:05:1a:
14:7b:0d:ab:61:11:14:76:db:0e:5d:cd:4a:1a:79:e2:44:fd:
c3:ef:37:1a:47:de:14:c9:98:ab:bb:17:06:7a:6c:43:df:cd:
84:e9:c8:8e:ce:bc:47:ad:8b:28:4d:c4:08:fb:5a:10:8d:fc:
35:f1:4f:de:6e:4e:f9:6a:de:96:9f:26:c7:55:78:aa:4b:89:
3f:83:e6:cd:42:ee:32:61:05:9e:2d:dc:51:9a:0d:82:6e:00:
34:c2:b1:80:7b:61:e5:79:22:fc:45:a0:84:be:ad:56:9d:40:
c4:25:1d:e8:32:96:4c:80:cb:a2:3c:19:28:dc:48:ae:97:73:
4a:20:06:d7:5e:c1:eb:33:e2:85:70:af:39:9d:63:95:63:3c:
21:d9:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:32:51 2026 by rpki-client