
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json)
Hash identifier: 5k/98Z2qGmeGldiNd0NVsiTEJeGkY2ZseTZqdn4c46o=
Subject key identifier: 43:C8:C5:74:A1:1B:62:28:AC:A1:BB:05:44:AA:22:25:82:38:EB:50
Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Certificate serial: 0D56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
Manifest number: 0D44
Signing time: Tue 28 Jul 2026 18:14:20 +0000
Manifest this update: Tue 28 Jul 2026 18:14:19 +0000
Manifest next update: Tue 04 Aug 2026 18:14:19 +0000
Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: t32cS8GfpMO0O+WjMBII95/cLebQEQs0K49xZ4FUGQE=)
2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: r6NMGYsxb0CTrW+33MllDccXL4xyxMC+FjKpakw8GUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3414 (0xd56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Validity
Not Before: Jul 28 18:14:19 2026 GMT
Not After : Aug 4 18:14:19 2026 GMT
Subject: CN=6a68f17c-abf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:fc:84:69:2b:7d:c1:4d:11:2b:b8:19:0d:
73:9f:6d:59:2c:26:3f:6a:3b:7f:f9:e9:97:e0:e0:
a4:96:63:6a:7a:7c:13:78:96:b5:6a:bb:84:34:29:
1e:ad:b4:05:48:8e:dd:5f:d7:90:da:6a:7b:66:15:
5c:17:6e:5d:53:ab:cd:f2:f4:87:96:9b:17:55:e4:
b5:6f:94:93:04:55:d2:ce:8e:41:a2:72:97:31:16:
11:38:1b:da:36:e3:7e:39:6d:f3:5a:9e:59:8c:99:
88:73:0f:0c:7b:2d:c1:9d:17:f0:0f:48:2a:6b:c7:
ef:29:4d:1e:fc:66:0c:42:19:86:d6:d4:39:25:69:
02:33:4a:7d:09:81:57:ef:87:47:dc:8c:7b:5c:32:
35:d3:f1:4d:95:1d:e4:3c:44:ca:17:62:ce:6f:a4:
67:a8:e3:c4:d2:5b:82:03:fe:64:21:d1:ad:96:25:
19:b6:9d:f7:30:e2:3e:9b:3b:b3:29:65:77:10:22:
32:e6:b1:13:3e:cb:16:43:93:9a:77:9f:c3:05:79:
3f:13:3e:1b:49:42:0d:55:44:7d:43:91:38:d8:be:
eb:de:d3:3c:97:fd:65:fd:b9:cb:31:0b:78:8b:91:
0a:0e:b7:ec:5b:75:0a:65:0e:db:8d:e5:42:73:5c:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:C5:74:A1:1B:62:28:AC:A1:BB:05:44:AA:22:25:82:38:EB:50
X509v3 Authority Key Identifier:
keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:58:92:28:6d:4c:fb:e1:b2:ce:87:12:87:89:b2:8e:fc:15:
59:6e:cc:52:30:cc:3d:b2:3a:3d:a8:73:ad:13:e4:ca:9a:d5:
ca:31:31:83:e8:47:03:fb:13:9d:aa:ce:a1:71:34:0b:5f:8f:
4c:00:0e:5b:73:8b:a2:8c:ff:54:58:f2:23:48:28:72:0b:5f:
61:d7:fc:05:98:72:1f:e2:ac:e5:48:1c:81:df:9b:35:55:cb:
ec:f1:3f:3a:a3:8e:78:43:0f:ff:9b:7d:1d:a6:1a:64:4b:51:
d9:05:5c:be:79:e5:59:5c:44:e6:42:fe:0b:0a:f4:41:b6:24:
11:ab:6c:47:ac:18:fb:c4:4b:1a:24:2b:6e:0b:28:21:99:ed:
30:0d:64:b6:50:07:5b:e2:ab:32:44:d6:e0:aa:c9:8a:23:a2:
7e:82:07:ab:59:be:6a:45:7c:e6:60:cc:1e:d8:24:bf:ad:f8:
54:29:00:3d:22:a1:fb:71:f5:04:92:02:46:51:36:d1:18:1a:
e3:e8:27:26:bd:1b:e5:29:ba:3b:7c:2d:6d:f8:14:91:a5:46:
69:ea:8b:34:4d:07:4a:b4:66:f8:b5:93:0e:7a:47:90:27:32:
29:6b:46:1c:58:75:48:aa:5a:3d:31:65:e5:3c:7c:22:24:c6:
fb:5d:18:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx
ODQ1NzNERkUwHhcNMjYwNzI4MTgxNDE5WhcNMjYwODA0MTgxNDE5WjAYMRYwFAYD
VQQDEw02YTY4ZjE3Yy1hYmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYn8hGkrfcFNESu4GQ1zn21ZLCY/ajt/+emX4OCklmNqenwTeJa1aruENCke
rbQFSI7dX9eQ2mp7ZhVcF25dU6vN8vSHlpsXVeS1b5STBFXSzo5BonKXMRYROBva
NuN+OW3zWp5ZjJmIcw8Mey3BnRfwD0gqa8fvKU0e/GYMQhmG1tQ5JWkCM0p9CYFX
74dH3Ix7XDI10/FNlR3kPETKF2LOb6RnqOPE0luCA/5kIdGtliUZtp33MOI+mzuz
KWV3ECIy5rETPssWQ5Oad5/DBXk/Ez4bSUINVUR9Q5E42L7r3tM8l/1l/bnLMQt4
i5EKDrfsW3UKZQ7bjeVCc1zILQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPIxXSh
G2IorKG7BUSqIiWCOOtQMB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw
N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2
T2ZzajBzNnlJemNZUlhQZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVFiSKG1M++GyzocSh4myjvwVWW7MUjDMPbI6PahzrRPkyprVyjExg+hHA/sT
narOoXE0C1+PTAAOW3OLooz/VFjyI0gocgtfYdf8BZhyH+Ks5Ugcgd+bNVXL7PE/
OqOOeEMP/5t9HaYaZEtR2QVcvnnlWVxE5kL+Cwr0QbYkEatsR6wY+8RLGiQrbgso
IZntMA1ktlAHW+KrMkTW4KrJiiOifoIHq1m+akV85mDMHtgkv634VCkAPSKh+3H1
BJICRlE20Rga4+gnJr0b5Sm6O3wtbfgUkaVGaeqLNE0HSrRm+LWTDnpHkCcyKWtG
HFh1SKpaPTFl5Tx8IiTG+10Ygg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:25 2026 by rpki-client