
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier: LBpB38r47T3PRRghmuTTXzI820H6YIQ0N8ZGmUtxEOs=
Subject key identifier: FD:AE:E0:12:D5:84:31:89:BF:5C:EF:7E:D6:FA:1F:D1:0D:E3:FF:6E
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial: 0A2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number: 0A28
Signing time: Sat 28 Feb 2026 20:00:24 +0000
Manifest this update: Sat 28 Feb 2026 20:00:23 +0000
Manifest next update: Sat 07 Mar 2026 20:00:23 +0000
Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: 7xYL5+JDNSEHi+t0hvZlt9f/vXSu2yCIbIeYWA2yUBQ=)
2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: 2eavA5MnM8j9MsEorxYmL8jVbA9inLFPJYXoSo6cKDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2607 (0xa2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Validity
Not Before: Feb 28 20:00:23 2026 GMT
Not After : Mar 7 20:00:23 2026 GMT
Subject: CN=69a34958-352c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f0:ad:2c:50:bd:08:32:8f:b5:90:2e:52:62:
92:5a:fd:02:f1:28:c5:ca:5d:75:04:da:b5:28:ed:
1e:7e:15:d2:50:82:26:1e:aa:5d:a8:5f:89:e3:5b:
b4:44:77:6b:1a:25:77:e1:4e:87:35:98:64:34:8d:
78:34:7e:8e:a9:38:dc:62:6b:9c:d7:57:5f:7b:f5:
30:50:70:20:ec:f8:84:f1:5e:62:2c:9e:16:be:93:
4a:09:1c:5d:24:84:95:5d:13:35:a6:d0:e6:12:3e:
40:f6:94:57:e3:7d:b6:4c:31:07:16:cb:72:f1:c3:
8d:68:c2:03:4a:4b:d9:cd:1c:59:be:4f:ec:3d:14:
1e:bb:95:a5:d3:22:21:d1:4d:3a:55:e4:df:5f:fb:
fa:1b:a9:ca:ce:e6:07:03:62:54:57:94:bd:63:4c:
f4:1b:ee:68:bd:ae:8b:08:c3:05:f1:8e:f7:0b:ec:
ed:21:2c:af:16:39:14:51:24:26:68:41:72:81:50:
95:66:21:e5:5a:b1:18:9e:52:06:a1:7a:b9:3e:2f:
0b:a0:d0:0c:05:9b:e9:63:0d:2f:f0:95:88:b7:82:
79:a6:c1:98:65:6c:e5:24:30:47:be:02:8a:37:7f:
47:43:e6:1b:9a:51:12:e3:f1:6a:39:58:ff:c7:a2:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AE:E0:12:D5:84:31:89:BF:5C:EF:7E:D6:FA:1F:D1:0D:E3:FF:6E
X509v3 Authority Key Identifier:
keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d3:eb:85:1a:d9:dd:6c:6a:de:47:39:a0:73:0a:9e:a5:46:
8b:7e:76:8d:59:1c:85:54:19:53:9f:ba:42:2d:c7:97:eb:80:
f0:32:ad:0c:33:f2:65:00:c4:47:6a:f7:a0:17:57:42:77:b7:
7b:72:39:20:2a:d7:c8:c1:f2:11:6a:c5:f9:68:0f:5d:8d:0b:
6b:ab:12:e7:82:78:88:1d:29:d5:94:40:ac:8f:34:3f:02:11:
dc:8e:a5:2d:d6:a3:46:79:81:01:4c:ce:18:83:cb:df:c2:7e:
d1:fa:6d:88:a2:c3:04:cd:a0:40:d5:7b:b5:a4:55:92:03:7b:
2a:42:00:26:66:b2:b1:c8:f6:7a:9c:30:e7:fc:65:37:97:29:
73:83:19:2d:a2:17:e0:c9:2d:5b:25:32:d5:27:6e:75:5a:78:
16:54:31:8d:af:0b:61:af:e9:61:2f:78:0c:fb:ae:a5:43:58:
f4:a4:ce:e7:32:83:b0:f1:cf:7f:c8:0e:0f:c8:7c:a8:7f:ce:
bd:c3:7e:fb:76:67:c8:aa:b1:14:9b:53:f6:9f:a5:0d:69:99:
cc:b3:f7:a1:f7:cc:08:c9:5e:09:40:bd:8f:3e:53:4e:8d:96:
8f:8c:2e:74:47:9c:75:83:2b:66:c9:c2:9c:12:9b:4f:32:ff:
8e:20:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:39 2026 by rpki-client