
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json)
Hash identifier: LE/jH7KxEivjRgp7hUssMcbqpc3P6pPKf/+BSsSIOwc=
Subject key identifier: E0:EF:CA:8A:27:6A:D1:66:02:92:63:27:9B:3A:39:E4:21:E9:F9:6A
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial: 062C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
Manifest number: 0623
Signing time: Mon 12 Oct 2026 22:57:34 +0000
Manifest this update: Mon 12 Oct 2026 22:57:34 +0000
Manifest next update: Mon 19 Oct 2026 22:57:34 +0000
Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: xpBv+DMQ36Ve6Aes1ezaFkmFa+o1mDA5+E872VQKFk4=)
2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: hhhDivZPfpYVc/TnYUA+tCpDp/wVvW/IZEwMGB5mPu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Validity
Not Before: Oct 12 22:57:34 2026 GMT
Not After : Oct 19 22:57:34 2026 GMT
Subject: CN=6acd65de-d38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:f9:13:96:fc:ed:98:23:78:71:ad:5f:31:
31:1c:74:b7:ca:d7:9b:f8:c2:e4:a7:03:85:22:b5:
22:46:19:de:22:65:d8:e6:14:68:8b:44:1a:e6:46:
6c:e6:f7:3a:df:0f:68:f6:e9:15:2d:ae:f9:99:f2:
29:68:44:f3:eb:29:5c:de:a4:c1:73:76:d4:d8:bc:
75:6f:62:21:79:3f:5a:4e:c2:37:05:5e:4c:6f:a0:
50:15:8d:22:45:f2:a5:8a:c9:ca:83:90:e3:ac:f1:
94:d3:e8:17:db:04:69:48:f1:3b:49:d2:9f:28:bd:
33:3c:77:cb:12:1f:19:f8:00:1f:6c:67:ad:5a:4b:
b1:3c:a0:63:a0:bf:b1:a1:0a:a0:86:c5:27:54:e4:
d9:16:61:66:97:24:62:5e:79:a3:fb:30:83:3d:ed:
26:f7:fa:8a:1b:41:01:7a:32:af:98:ec:f9:6e:12:
74:65:a4:72:1c:d0:cb:e1:86:43:a9:74:4e:45:b8:
44:73:6d:7b:56:43:a7:c3:68:ce:ed:89:6f:a8:da:
f4:3c:79:ae:91:5b:52:be:d5:f7:4a:c5:40:09:71:
b7:7f:7e:71:b2:8d:f9:fe:ce:66:cd:1e:31:61:88:
be:19:9f:6c:f4:e0:2f:55:e6:e3:46:77:5f:05:77:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:CA:8A:27:6A:D1:66:02:92:63:27:9B:3A:39:E4:21:E9:F9:6A
X509v3 Authority Key Identifier:
keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4b:2b:9c:ec:bc:9c:53:44:b2:ef:7b:7b:2f:11:8c:43:e6:
73:db:eb:a4:03:f6:5a:66:09:c4:da:a6:74:7d:e7:d6:85:91:
41:78:39:07:5a:2d:e4:ae:26:ae:5a:6e:fc:b5:9c:52:a1:44:
1a:a1:96:9e:16:aa:8b:5c:33:6c:e8:74:29:5e:71:73:d7:9a:
7c:0d:61:27:26:c8:f5:5a:e0:67:b1:97:76:0b:7e:ae:cd:fb:
10:85:79:1d:aa:73:a1:47:79:86:31:25:bd:80:cf:13:c3:04:
35:5d:4d:3a:d6:1b:a1:61:f0:bc:2d:9c:b6:31:d6:de:14:c2:
9a:f9:9b:e4:5e:9f:22:e6:65:73:0f:fc:80:28:88:e3:be:02:
7b:ec:9f:d6:9d:c6:70:83:c5:c5:c8:b4:a6:8e:c4:9a:9a:60:
bd:8a:d0:e6:9f:ff:18:e7:ba:1c:ad:aa:06:0d:cf:3b:12:e1:
de:e9:7c:f0:3d:9b:25:9c:b9:7c:b0:7b:43:ae:b6:76:eb:06:
95:a5:b1:bc:3e:60:0a:f8:b8:03:61:4a:aa:5a:5a:70:c1:19:
77:08:48:18:cc:1a:3a:b4:46:07:30:b1:5b:f4:80:e1:bb:ed:
15:04:a9:c4:ac:b3:e0:f0:45:6f:e5:af:e3:19:46:9d:82:12:
aa:f5:56:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:47:41 2026 by rpki-client