
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft
File: yCFQSaXsETZftnQLghcGdiaArRc.mft (raw, json)
Hash identifier: 0fxJF+Ys+mhn30YCMm5FGJ8q0oqbIV+MI6GYFg8Vrw4=
Subject key identifier: 1C:61:5F:39:51:F8:C2:91:A5:71:04:F5:4B:4A:D6:A5:77:F7:2E:10
Authority key identifier: C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17
Certificate issuer: /CN=A91DC459/serialNumber=C8215049A5EC11365FB6740B821706762680AD17
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft
Manifest number: 01AE
Signing time: Mon 27 Jul 2026 05:46:54 +0000
Manifest this update: Mon 27 Jul 2026 05:46:53 +0000
Manifest next update: Mon 03 Aug 2026 05:46:53 +0000
Files and hashes: 1: yCFQSaXsETZftnQLghcGdiaArRc.crl (hash: +u62ml+AND9rnqdVO3GZsOV8PyMtRMOtlFad4Vs4eGg=)
2: 264C45FAFA3F11EE8A884F09C4F9AE02.roa (hash: 5wpit00HjrDdtoq3eiW6to5uWB0TX3js4LGWC8s6SMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl
rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC459, serialNumber=C8215049A5EC11365FB6740B821706762680AD17
Validity
Not Before: Jul 27 05:46:53 2026 GMT
Not After : Aug 3 05:46:53 2026 GMT
Subject: CN=6a66f0ce-0080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:9b:a6:47:04:98:8c:73:f5:1f:7c:a8:23:
54:5f:7d:e7:c4:6f:a6:cb:02:03:ef:bd:b3:3b:74:
3b:c2:5e:18:17:72:bb:76:81:81:5b:81:2d:8d:6d:
c0:0b:2c:06:13:0c:7e:16:d0:cb:b9:05:05:d1:75:
a6:06:7c:69:95:fa:77:c4:6e:1a:1a:8f:85:db:4d:
a1:78:a2:28:f6:ed:02:ea:c2:42:71:6b:1b:fa:2c:
f9:24:54:ad:dd:20:77:1f:d7:24:6c:24:7f:08:6b:
44:66:3e:fe:f5:01:2e:15:3f:5c:ef:05:c9:e1:a2:
0c:ac:dc:77:ec:1b:c2:f9:50:49:1a:68:33:4b:23:
90:49:a5:03:9c:9a:a8:33:68:40:27:44:35:53:e5:
64:36:56:5e:34:07:9f:98:cd:cb:f8:34:af:f9:dc:
45:dc:b6:44:6d:43:92:1e:fa:a5:6c:64:18:8e:33:
55:26:40:6e:c8:a3:bc:7a:a0:d8:ad:80:ef:f9:a2:
88:dc:d2:bb:eb:de:5e:da:19:ca:11:f3:93:2c:8a:
90:d7:eb:50:36:ec:f7:b7:97:45:46:15:74:41:3d:
4b:40:41:5e:a3:58:5e:87:2b:2f:34:69:8b:f6:55:
54:b6:2f:8d:57:c5:95:ff:30:ed:07:ff:73:3b:43:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:61:5F:39:51:F8:C2:91:A5:71:04:F5:4B:4A:D6:A5:77:F7:2E:10
X509v3 Authority Key Identifier:
keyid:C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:44:7c:38:78:80:f4:e5:f8:91:a1:40:fc:2a:5f:a6:d7:31:
65:f8:19:1e:d1:ca:fb:de:85:88:e8:db:0f:79:4c:75:d5:30:
ef:3a:ec:13:95:76:31:39:b1:38:11:bd:18:30:d1:41:d8:48:
29:95:e0:54:f8:eb:67:ed:30:51:52:5b:16:5e:40:3d:97:c6:
a9:41:e2:f1:1b:51:1a:68:ab:0c:f7:a5:3a:77:cd:a7:7c:2a:
70:21:b7:09:10:16:c5:4c:08:dd:7d:0a:84:43:c5:46:27:ce:
3c:03:36:51:08:49:9c:bf:82:91:30:80:cd:83:b3:10:ae:e6:
ee:05:58:7c:dc:ab:e3:ce:08:e5:7f:14:b8:ee:8c:f7:1b:9e:
2d:bb:c9:0f:fc:72:23:34:73:e5:e9:9c:ca:22:19:52:c3:0b:
6c:27:ca:97:6e:a3:d2:23:2d:75:3c:26:55:0e:3c:af:90:a5:
2b:9d:74:78:26:ec:7a:2b:e1:87:4b:c4:2a:95:ed:60:12:c3:
e7:15:29:85:c8:c6:40:05:a2:c6:03:b4:20:99:73:85:88:7d:
fd:d6:97:63:5f:a8:f8:ab:c4:28:75:7f:fe:13:1f:5a:d9:4a:
bc:2f:99:25:1e:41:39:fb:68:06:3e:35:f8:79:7f:9b:51:7b:
04:60:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:45 2026 by rpki-client