
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json)
Hash identifier: QGHOX0rnD46JwvkyWLwWR4qux+eyiHly8n02R61SyFY=
Subject key identifier: AE:0A:ED:A2:B4:E1:51:6A:56:0E:1F:A6:8A:6A:A2:62:E9:AB:25:E5
Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Certificate serial: 0D30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
Manifest number: 0D26
Signing time: Thu 08 Oct 2026 18:22:33 +0000
Manifest this update: Thu 08 Oct 2026 18:22:33 +0000
Manifest next update: Thu 15 Oct 2026 18:22:33 +0000
Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: ndPXZ52lCFzFtUCzYtaUWRsaKgDdrEDnxK5ZlFkz0BI=)
2: 69308C200A9611EABF034172C4F9AE02.roa (hash: Og8kggLWLgVMfPp3OlQnblKMTWi+r7xJXzXK2YD03aI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3376 (0xd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Validity
Not Before: Oct 8 18:22:33 2026 GMT
Not After : Oct 15 18:22:33 2026 GMT
Subject: CN=6ac7df69-728c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:4c:de:36:39:10:64:eb:fc:d5:6a:e3:28:
26:8e:6d:7c:60:d6:89:b3:79:b8:b5:2c:f1:8c:25:
03:15:b8:c9:76:30:78:b4:e0:28:c9:23:4a:bb:0b:
f6:ca:85:84:1d:0b:71:5e:39:28:b8:07:2e:18:f0:
09:bf:43:d5:e7:be:da:ce:e5:d0:52:ae:ee:d2:b9:
60:c7:87:81:f5:09:30:1d:1e:68:95:d8:9c:45:b1:
af:2f:57:1e:c0:44:03:3d:06:42:2a:d3:96:e4:6a:
d0:0d:6b:9d:0c:55:2e:28:ce:f5:8b:9e:1c:52:fb:
3e:4f:a7:5a:05:64:21:2d:56:92:b5:26:c2:d1:b1:
07:33:09:d0:24:6a:07:a7:d9:32:99:08:b8:bd:8d:
1b:41:57:f5:28:a0:44:3f:29:69:0f:18:6c:b3:a9:
43:b8:4f:60:9d:21:7f:93:75:77:75:d9:34:15:f6:
24:a1:55:86:96:c8:c3:bf:8e:54:7f:ab:12:72:22:
a8:78:a4:ef:cb:88:44:8c:a2:99:68:0f:e8:9a:3c:
09:fd:bc:80:7a:85:f7:50:9f:94:58:60:10:64:a1:
fb:52:a4:38:48:23:4a:6e:08:8f:33:1f:09:9d:6e:
12:e2:e1:41:20:39:3e:af:11:82:ce:18:f3:85:7b:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:ED:A2:B4:E1:51:6A:56:0E:1F:A6:8A:6A:A2:62:E9:AB:25:E5
X509v3 Authority Key Identifier:
keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:f2:09:fe:92:ba:c6:b6:df:d4:be:c7:b7:fd:51:92:1b:e2:
3c:ff:87:e4:65:71:da:1c:bc:2c:ff:8f:b4:3a:aa:bd:14:e9:
2c:9f:e0:dd:c3:2b:26:14:ae:83:6b:a5:68:e0:80:fe:b0:62:
ef:5b:71:5e:ba:a5:02:92:50:36:c6:91:0e:68:00:45:04:ff:
93:91:07:26:6b:31:5d:c5:10:53:90:14:d2:4f:11:34:47:80:
75:64:5f:44:5f:1e:6b:0c:9f:03:2e:d0:9f:1f:f4:2c:de:46:
e7:e9:a3:66:b6:1e:7b:12:7e:da:40:f5:ee:fd:19:96:fc:7a:
52:63:b3:80:e2:99:aa:25:b7:05:48:06:89:2a:76:08:f9:32:
d5:78:0d:5b:7c:02:d1:2f:fa:56:f8:8e:43:36:2f:35:66:9e:
10:9e:d8:af:43:35:39:b9:de:d7:64:84:46:a3:0b:1e:a2:5c:
68:05:02:c7:67:b6:ab:6d:a0:e8:83:a3:70:0a:21:63:91:73:
4d:89:d3:5a:a6:3b:fe:8c:f2:5b:a7:d8:71:bf:52:46:ae:3f:
1f:c7:31:58:86:85:53:cc:1d:f8:2b:9c:83:e1:58:02:51:bd:
98:44:5e:40:85:5a:21:fb:89:2a:10:a2:aa:3f:30:eb:33:45:
cc:5e:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:40:53 2026 by rpki-client