
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json)
Hash identifier: tPIdy002tQO/oymA9/4IFMe+UjoN2Zn1zpqgcM3IGlY=
Subject key identifier: 5C:DA:83:43:BD:4E:D6:0B:2C:35:C4:3C:0A:6D:60:17:63:5B:00:41
Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
Manifest number: 0251
Signing time: Wed 29 Jul 2026 03:21:47 +0000
Manifest this update: Wed 29 Jul 2026 03:21:47 +0000
Manifest next update: Wed 05 Aug 2026 03:21:47 +0000
Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: kGLdKi4V3LDqeDlICJsAUshu3A/FUY1rtm+oEA/jjG8=)
2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: Cd3ka8bb5R3DYUTF/v0b6ivGnboKPrlUrUoM7/Vgbdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Validity
Not Before: Jul 29 03:21:47 2026 GMT
Not After : Aug 5 03:21:47 2026 GMT
Subject: CN=6a6971cb-fd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:4c:e8:8a:27:28:fb:ab:74:41:50:8d:9a:
29:9c:0b:57:b9:5d:7a:5c:9f:d4:df:49:c4:c6:b6:
dd:5d:3b:fa:7d:ce:9f:39:7e:4a:cf:86:76:23:cf:
8b:db:61:5d:4b:4c:dd:de:5e:3a:82:57:d3:76:33:
b4:a0:bb:79:39:dc:d5:4a:66:b9:9f:8e:b8:54:7d:
e6:df:2b:c2:27:88:c8:f5:d2:fd:0c:d1:56:7a:b7:
d7:35:ed:3d:60:30:ad:1d:b8:11:c9:d9:c8:7b:73:
42:ec:1d:3c:59:bd:2e:1d:f9:c1:8c:7d:a7:4e:fc:
87:a9:5d:2d:b9:8b:63:a0:eb:fd:37:77:e1:3b:79:
77:49:3d:76:5e:ab:bc:7e:35:c6:b5:0e:fe:93:c7:
f5:8b:b0:8c:bf:3a:a2:2e:01:d5:2c:d4:ff:18:05:
39:b3:9e:42:9a:18:f2:52:91:65:5e:c7:ec:a5:20:
4f:c3:86:2c:e4:3b:a2:68:1b:78:44:81:bf:25:fb:
69:5b:9b:03:fe:00:8e:6e:f9:aa:bb:8b:a0:26:66:
5b:19:b2:77:6b:5c:8d:05:b4:6d:f0:ac:00:2e:c4:
76:56:9d:cd:a8:08:b7:a1:34:0d:9d:f4:aa:e4:8b:
c3:d4:28:82:15:98:a9:6f:e4:7e:70:9c:9f:84:2d:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:83:43:BD:4E:D6:0B:2C:35:C4:3C:0A:6D:60:17:63:5B:00:41
X509v3 Authority Key Identifier:
keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:10:27:90:5a:fa:79:4c:4d:17:f6:6a:f8:ac:95:d9:fe:9f:
c7:b7:52:9b:5e:21:c3:9c:8f:47:64:7a:57:50:6d:7e:0b:58:
00:ce:48:7d:5f:ae:4d:a9:f2:a4:e0:71:40:e7:a9:39:e3:60:
a1:bf:af:b2:1a:aa:f5:33:ef:97:65:c7:9c:08:b9:ed:00:1a:
f5:bf:8d:c1:36:b6:cc:b4:06:f4:f0:f7:f6:c3:e9:4a:39:ba:
e6:ff:51:ae:3c:df:ec:17:81:a3:9b:11:31:c8:bc:fd:31:c9:
5e:85:e8:85:60:ec:14:35:d2:ae:89:b4:bf:8e:cc:f7:10:37:
20:db:d0:87:4b:e8:a1:7d:dd:96:22:f1:97:b9:2d:9d:25:cf:
88:51:23:83:78:66:94:a6:c5:15:a2:5f:b3:10:d9:16:6d:df:
36:2f:e4:af:2f:5b:06:c1:84:f6:42:33:19:66:c1:3c:1a:8c:
ec:98:f9:9a:ad:0d:19:24:a0:42:1b:d4:44:ad:f8:1c:d7:7d:
97:e0:61:75:35:60:2f:d5:6f:a6:26:4e:8f:f8:df:a1:e0:28:
4d:01:ef:a1:09:91:75:18:d4:4e:a9:b0:94:70:f2:d6:ae:99:
d6:19:b8:8a:c5:b3:f7:a7:b1:d6:0c:a2:9a:db:36:ea:30:62:
e2:7c:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:32:55 2026 by rpki-client