
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
File: yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json)
Hash identifier: NtsJ9a0Oe2mDOPmkKNE8Xz7Lu1OlU10247Q8RPsdXqA=
Subject key identifier: D7:50:21:BF:F4:87:18:B5:2F:39:6E:92:D3:CE:77:35:94:D2:A1:C4
Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76
Certificate issuer: /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76
Certificate serial: 0821
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
Manifest number: 081A
Signing time: Sat 28 Feb 2026 21:23:35 +0000
Manifest this update: Sat 28 Feb 2026 21:23:35 +0000
Manifest next update: Sat 07 Mar 2026 21:23:35 +0000
Files and hashes: 1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: XqW4mw7vwT/wei2lw2J5WMggf/4+d57pvKIpZVBg7OI=)
2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: dqlBL+Mvfc+xCr3YIFtIl73lm9u/ZT3pHNyxLQdBwx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl
rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC42E, serialNumber=CA85E133C1E239614C9C57780118BDB309528E76
Validity
Not Before: Feb 28 21:23:35 2026 GMT
Not After : Mar 7 21:23:35 2026 GMT
Subject: CN=69a35cd7-c627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:75:b3:e7:49:6e:55:e6:92:30:a0:b8:fd:
b6:27:b0:32:ac:99:c5:4f:fa:4e:d3:4a:28:dd:b7:
6a:80:d1:3d:3d:e9:18:72:f6:33:83:77:69:9e:1c:
36:0f:7c:5d:4b:ad:56:b6:25:c9:fa:8e:1e:06:c3:
d3:32:89:fc:32:13:dd:56:ac:1f:40:37:b0:0a:ed:
b5:45:d8:bc:5b:25:ce:bf:4d:57:f2:0e:69:67:7e:
20:4c:9b:5d:52:03:2f:5d:e3:df:02:c8:9b:c4:7d:
46:25:6a:02:2b:35:88:77:b7:f4:71:c6:20:56:a7:
f5:d9:d0:cb:b2:64:2d:3b:1e:6a:85:ae:c9:98:8c:
81:61:0c:20:be:6c:0e:20:49:ae:2a:59:89:5a:ce:
36:5d:6c:54:d0:21:f1:8d:f2:cd:6c:b0:34:f3:f0:
71:68:10:f6:a4:03:f2:4a:c2:98:d6:d6:46:8e:a8:
08:0b:00:5c:5c:0f:51:15:fc:8d:8f:4d:d0:94:58:
47:51:5a:b3:64:9c:d9:e7:27:1f:ef:f4:0c:01:a9:
97:e5:65:c3:3d:38:46:73:69:3f:35:4d:76:9f:2d:
a7:8a:b8:cf:12:81:0b:d8:95:5d:77:9e:fe:05:10:
37:ca:cb:f8:53:99:e6:7e:63:36:98:3f:0c:38:3d:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:21:BF:F4:87:18:B5:2F:39:6E:92:D3:CE:77:35:94:D2:A1:C4
X509v3 Authority Key Identifier:
keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:59:e1:f7:4c:ff:4b:dd:f2:aa:ad:60:7a:dc:2f:25:dd:1b:
0f:6d:08:32:24:06:22:20:fd:0b:56:b8:e2:98:0e:ec:64:56:
bc:9b:cf:f4:75:99:5b:b5:8a:78:47:4b:43:cc:92:af:34:ce:
bc:7c:5b:ef:80:ec:cf:38:2a:64:b9:a8:f6:65:10:4e:90:33:
a3:10:17:62:72:7e:2e:e9:a0:42:c0:90:8e:94:19:42:b5:8d:
8c:4f:f6:7a:bc:86:f6:80:09:5d:62:ff:53:27:37:b6:7c:63:
5f:a9:9c:43:27:da:cc:f6:ed:9e:6f:08:db:d2:21:5b:9f:9d:
0c:1a:ed:a7:db:84:29:ce:86:a8:2c:06:05:9a:17:0d:ae:5b:
97:0f:22:ae:e1:ae:86:33:ab:06:38:16:18:3d:ea:4d:0d:95:
60:8f:c2:49:8b:e6:92:f0:53:c3:1f:08:ed:2e:15:bf:d4:8f:
47:6b:83:4b:61:dd:18:f5:dd:6f:59:a9:0c:b9:27:79:76:07:
f1:bb:42:0f:34:7d:1e:37:a4:51:3f:7a:a6:55:8d:89:81:55:
1e:08:82:42:5c:9c:31:81:99:a5:fa:13:78:c5:13:a8:ca:b4:
c4:c4:94:53:e4:3d:d8:8e:e5:8e:55:2f:80:62:e1:21:83:c0:
8c:85:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:03 2026 by rpki-client