
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
File: yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json)
Hash identifier: oJx752l9kwjcOgfWubgsQwMU5Zxb5LCOdGgsVqS/o6I=
Subject key identifier: 06:D6:20:0D:F0:5E:98:30:2C:42:B9:EA:64:49:CA:00:3A:7B:FA:20
Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76
Certificate issuer: /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76
Certificate serial: 0890
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
Manifest number: 0886
Signing time: Sun 20 Sep 2026 20:39:52 +0000
Manifest this update: Sun 20 Sep 2026 20:39:51 +0000
Manifest next update: Sun 27 Sep 2026 20:39:51 +0000
Files and hashes: 1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: KA6gVXnfAxWW6Q/M53vjtQwUzX7T2ZRRfQd0PvADPuM=)
2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: ariwM0UNsN9RHsI11tEsRZAkUo+gH7DpYJGLIoLRlPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl
rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192 (0x890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC42E, serialNumber=CA85E133C1E239614C9C57780118BDB309528E76
Validity
Not Before: Sep 20 20:39:51 2026 GMT
Not After : Sep 27 20:39:51 2026 GMT
Subject: CN=6ab04497-d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:d0:72:87:ed:d1:ab:1a:aa:02:33:c9:a6:
fb:53:f0:76:26:f1:c5:10:23:37:e9:a2:40:34:d3:
db:b6:d7:bc:af:06:85:d1:32:23:8a:ca:af:67:17:
e2:ae:27:46:2b:d3:6d:22:8b:33:6a:fa:24:92:c9:
00:98:18:df:a0:04:7b:6f:b3:23:5f:3b:d1:56:04:
5d:aa:9f:21:79:09:09:fb:db:35:3e:d2:70:27:93:
3f:69:4e:99:a4:85:b0:73:ae:21:f2:03:18:07:70:
79:df:c7:a9:25:84:88:13:35:14:61:6e:e9:0d:00:
e1:bd:59:b3:fd:5d:ca:5a:d0:64:80:06:fc:bb:fa:
db:0e:5d:66:df:57:49:67:77:3f:6f:59:0e:42:74:
34:d6:99:47:19:1e:bd:c0:6e:53:a6:7b:14:82:1d:
c3:59:74:9f:f9:ea:36:ff:17:32:dc:3f:dc:f0:4b:
19:5a:d3:51:74:7d:d8:5d:a9:a8:c4:a5:72:82:15:
0a:0e:d4:f6:0c:b1:1c:58:25:32:f4:48:a6:86:eb:
8d:dd:2c:aa:e4:b6:61:0a:b9:5b:42:92:d1:a6:4a:
82:33:ef:2d:08:16:2e:48:3b:e7:53:c3:0a:49:09:
50:05:8c:82:63:76:43:42:c4:1b:2a:cb:b4:64:b0:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D6:20:0D:F0:5E:98:30:2C:42:B9:EA:64:49:CA:00:3A:7B:FA:20
X509v3 Authority Key Identifier:
keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:82:19:f2:05:ef:58:d8:24:05:5f:61:e2:f6:5d:cb:f4:ae:
a2:7f:30:13:f0:06:d2:2f:66:02:23:a0:f9:7d:a2:55:d4:57:
88:15:63:6f:37:1b:30:d6:bf:75:41:1d:73:99:ed:57:36:67:
07:87:ce:5d:87:23:f0:36:89:a5:c0:24:df:ff:6a:75:4f:f2:
7f:cf:3a:51:68:f0:f1:26:2a:e6:b0:6a:37:3e:c3:cb:71:43:
d7:36:5f:2b:a0:e2:a6:3f:0d:c4:e6:63:33:75:b5:4b:8a:fb:
4c:2b:c2:d3:17:20:cf:cf:d6:9a:92:17:96:6e:4e:f6:26:8b:
6d:a8:aa:b7:0c:c3:5e:9c:5f:f4:c3:5e:a2:3a:6c:ab:8e:84:
4a:43:c4:6e:27:b2:7d:07:51:af:73:b4:fe:56:2a:2c:19:75:
93:d5:07:39:35:7d:d8:61:24:e0:6b:97:20:c8:bb:d1:6e:3f:
9e:d0:ba:b2:c7:18:dc:39:c1:80:2a:1b:99:2d:e9:0a:62:da:
63:c8:52:44:71:77:55:5a:ec:56:ad:5c:02:42:d5:5b:21:ea:
29:ce:ef:ce:f5:b4:b2:7d:f9:3f:ab:f1:11:ca:8d:ac:9b:b8:
dc:6a:20:4a:e7:0a:1d:66:22:f9:6e:3b:73:5c:13:6e:fa:c4:
3f:e5:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:23:13 2026 by rpki-client