
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json)
Hash identifier: xucFIv+tByti7Zt/0jvj10APirwUz4wW5YgT72hzwRQ=
Subject key identifier: 3E:F3:41:9F:F8:86:35:D8:9C:49:0D:55:32:42:62:49:A3:56:3A:5B
Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Certificate serial: 03A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
Manifest number: 039B
Signing time: Mon 21 Sep 2026 00:29:18 +0000
Manifest this update: Mon 21 Sep 2026 00:29:17 +0000
Manifest next update: Mon 28 Sep 2026 00:29:17 +0000
Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: J96xmyR3NDByhqozQgCD6qWsKsLBSvovQmd6F30X42s=)
2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: eTFcd93Ik05dvYU83eyYl+NfNuBY+EuLqHvO4+8nNVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl
rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930 (0x3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Validity
Not Before: Sep 21 00:29:17 2026 GMT
Not After : Sep 28 00:29:17 2026 GMT
Subject: CN=6ab07a5e-e750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:7a:f9:54:71:9b:c6:a3:b7:e7:0c:94:00:
f5:69:1e:e1:3f:ee:d8:81:3e:52:25:a5:b7:25:72:
ab:6a:34:ea:c7:2b:8a:da:63:73:ba:6f:16:d6:3d:
07:62:ca:6b:b3:58:f8:3b:1d:ff:d1:3e:99:4b:67:
ce:7c:ba:27:6b:7e:f5:a9:56:82:61:96:a4:06:00:
e2:f2:fb:18:41:36:86:a7:3e:88:da:ba:05:77:18:
4c:ca:e6:c1:79:f4:42:0b:91:f3:c2:99:2c:db:7b:
94:d8:15:5d:ad:2a:50:18:7a:3e:42:39:37:e0:8b:
c0:64:db:0b:e0:0d:60:76:4a:4a:4e:50:18:1e:cb:
db:20:90:77:89:35:f7:d5:55:5e:71:2b:63:36:72:
ba:8e:83:15:08:04:e2:4e:d8:7f:19:c8:1d:b7:fa:
b9:c7:08:1f:d7:ec:bb:fe:cd:0c:40:40:36:d8:83:
a0:1e:eb:a3:dc:c3:85:9d:48:e7:1b:97:80:10:89:
4f:d7:b0:e1:dc:dd:fa:9a:ce:51:11:07:11:17:3c:
c8:ed:ce:4a:d5:d3:b4:2b:e4:bf:38:02:3a:db:0b:
5a:6b:b9:1c:1d:24:8a:f1:c4:12:e8:6e:6b:e9:56:
3b:b8:5d:e4:31:ef:dd:85:47:ae:6e:a7:3d:79:e5:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:41:9F:F8:86:35:D8:9C:49:0D:55:32:42:62:49:A3:56:3A:5B
X509v3 Authority Key Identifier:
keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:8f:41:3a:ce:20:34:1b:60:be:17:0f:c3:56:c6:cf:31:ec:
a9:5e:7b:ef:15:fd:c9:80:f5:ef:99:07:ec:58:ff:c2:a7:e6:
80:87:0a:ff:bd:a5:94:d8:a9:11:50:78:df:45:54:69:8f:18:
c1:67:3d:3b:f4:24:f4:f2:3f:cf:c0:ae:44:8e:2c:c5:29:88:
8f:77:8d:0a:d4:89:b0:5a:17:43:9a:ba:77:55:6c:95:2b:7e:
8a:bb:9f:94:ed:f7:63:7c:0f:f5:cd:27:06:14:5d:a7:2c:56:
b5:cc:8e:9f:b9:70:2c:96:b7:b5:3c:9d:75:fb:05:cc:1d:55:
a1:b8:0d:38:d4:42:7c:ef:1b:97:93:f3:b2:38:ca:28:cf:71:
41:79:6f:75:4b:8e:89:30:64:3c:57:df:e0:6b:ab:b7:c1:61:
74:f7:90:62:15:bc:7a:04:f5:24:93:52:3a:57:7c:39:6a:24:
38:cf:04:9d:56:95:b3:a2:f9:ba:ce:ec:2c:85:64:1e:f8:fd:
f3:e5:0f:5e:23:3d:13:3b:51:bd:74:01:66:4a:fd:58:d2:5e:
73:eb:20:4f:d7:23:c0:1a:f9:9b:ea:31:fc:e8:e3:7b:62:93:
69:34:db:2e:5f:1b:ca:4b:7f:b9:91:5c:7e:11:96:d0:58:94:
9c:32:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:48:25 2026 by rpki-client