
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier: gEzqme+AAW3CWaOaOsECzblMRdb3/cTfbws+AMr1De0=
Subject key identifier: DF:1B:D7:50:13:E9:EB:96:9B:2F:D3:BF:67:5F:AA:7E:73:E9:38:90
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number: 01A5
Signing time: Mon 21 Sep 2026 04:15:46 +0000
Manifest this update: Mon 21 Sep 2026 04:15:46 +0000
Manifest next update: Mon 28 Sep 2026 04:15:46 +0000
Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: u9kxPu6/IdaFxP3HTr6Ym6T+J+k5NGLGeGqyxrWeopI=)
2: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: OxfaWe+94tIlTAT4+byZPb7wx3bdqZGYJ/nQcDtlMWw=)
3: 09F2AE3EF36811F0BB995E0C666F56BC.roa (hash: v8t9bmHpqZn0wuxiofvRlA2MMIdpOLvcB//haxyBf5U=)
4: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: tX6hwKferIVMkSYMI8hzg3HEG28VMd7DHAYXOto5Mlo=)
5: 09799D96F36811F0BB995E0C666F56BC.roa (hash: nJl06u2CCCZldTMQjMgrG+YE+xZkFMkssVi8+kqwbRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Sep 21 04:15:46 2026 GMT
Not After : Sep 28 04:15:46 2026 GMT
Subject: CN=6ab0af72-2b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:e2:8e:26:c4:80:70:21:33:1b:27:b7:a0:
ba:89:91:7c:58:61:99:a4:36:03:c1:7e:0b:84:9b:
1b:6e:ee:b8:c8:c7:26:0d:00:5d:da:12:8d:65:2f:
34:48:c9:33:7a:13:8a:63:79:f6:5f:30:d7:35:72:
1a:06:ef:b6:f3:5a:2c:d6:f6:f3:d9:01:c0:06:72:
2a:9c:a1:27:ac:1f:5a:fc:cd:f5:33:76:20:91:9a:
fc:dc:b0:02:fe:8b:e6:96:10:8c:c5:e9:5c:0a:ad:
b0:0f:cf:56:8f:93:99:5d:ae:0f:c5:db:c2:97:b9:
f0:62:7e:af:48:40:e7:a2:bd:dc:c7:ea:7e:05:12:
62:29:29:49:16:7f:83:79:f4:2b:d6:89:b8:f4:66:
70:db:46:a0:e2:db:13:19:28:b2:a9:88:87:00:bf:
45:07:9b:40:f1:1a:4c:69:5b:a0:b9:d9:0e:7f:90:
46:36:fa:fe:dd:13:ba:7b:1d:7b:e2:c7:6e:d1:c5:
5f:5b:ab:fc:37:1b:64:a6:eb:0e:19:2a:55:09:f7:
c9:1b:a3:58:8b:d1:3f:51:a3:7e:f3:52:cf:47:6b:
c9:dc:e1:6b:c2:74:43:1a:21:73:fc:71:7f:c8:8e:
65:dd:e2:ec:46:bf:c2:04:91:7a:ca:15:6e:ad:24:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1B:D7:50:13:E9:EB:96:9B:2F:D3:BF:67:5F:AA:7E:73:E9:38:90
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5f:25:fc:dc:db:65:19:4d:f4:6f:50:1a:cb:0f:30:7e:83:
ab:03:fd:11:79:7b:a3:e6:d9:b8:ec:53:98:65:ed:7b:bf:67:
9a:36:b5:ad:4b:80:44:ff:91:06:73:f5:aa:b1:43:43:7c:de:
39:30:21:de:2d:18:3f:bf:9f:4c:61:ce:3a:cd:75:23:3c:9c:
3f:29:41:05:4d:86:37:e7:42:dd:7e:5c:c0:8a:92:97:a4:7d:
e4:b9:99:3a:6b:b9:c5:ec:27:c4:ee:32:db:fb:79:38:17:c6:
66:d7:5c:68:3f:38:9c:53:e8:5b:e3:2d:0e:74:c3:00:33:42:
a4:6e:7b:96:97:ba:8b:94:9d:a6:28:c7:76:fe:50:44:b1:bd:
d3:38:cf:f6:af:bd:f0:b4:05:92:5f:92:a6:aa:a2:60:4b:e3:
20:63:2e:5a:f5:36:95:b7:70:41:39:1e:3f:ff:c4:93:08:b0:
b1:4b:73:25:f8:2a:bf:d2:46:1f:68:7f:58:7d:83:1e:7e:b7:
3a:d3:b5:39:79:bb:15:1a:01:d6:fa:a3:a2:d6:9f:e1:b5:c7:
d9:e0:fd:46:d2:d2:91:50:38:05:84:12:e5:e1:a1:34:02:01:
5c:2b:2c:b0:c1:b1:2e:b9:8b:92:c2:b4:31:41:5b:4e:0f:a2:
9d:2e:63:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:59:28 2026 by rpki-client