
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json)
Hash identifier: hLdWt9gvQf2qXIhrlCLQRT6OhYo1NviQ70o/lOL9LKA=
Subject key identifier: 22:70:3C:1C:BE:5F:4A:DC:AE:21:0A:79:F4:F7:94:C7:87:2D:6E:6D
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
Manifest number: 0225
Signing time: Sun 27 Sep 2026 03:09:11 +0000
Manifest this update: Sun 27 Sep 2026 03:09:11 +0000
Manifest next update: Sun 04 Oct 2026 03:09:11 +0000
Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: pHSkqSy8IqAy8Uh6z6xwNTqnM4LUGsR3t/kdGMtrGt8=)
2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: g62n6MuaUWV6TMBxgw6JfizdoiYQ10/TclDcRrurcgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Validity
Not Before: Sep 27 03:09:11 2026 GMT
Not After : Oct 4 03:09:11 2026 GMT
Subject: CN=6ab888d7-97f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:eb:13:2c:13:47:d6:b1:ff:65:39:8b:7b:
7d:da:b2:e8:0f:3e:39:f7:77:d0:c1:dd:f2:22:14:
af:44:64:86:9d:e7:c0:aa:f8:9a:67:52:0b:eb:70:
86:8a:43:66:ac:af:26:d0:c7:d9:a1:b1:f5:d1:3f:
45:5c:44:43:e8:25:79:15:27:6c:3d:da:80:f7:c7:
8a:db:62:34:4e:e6:a2:9d:2d:de:f1:e6:f9:7a:1b:
45:b1:94:d8:6f:f6:e8:81:1e:af:c8:e6:17:34:97:
7f:b6:db:51:60:23:d1:53:6f:40:2e:e8:ca:e6:96:
cd:c4:95:c3:a8:13:1c:23:41:fc:24:b9:f6:dc:eb:
47:54:7d:1b:a0:db:3c:f7:08:a2:eb:03:48:6e:a0:
d4:ca:00:32:88:22:91:8b:0c:8b:1d:26:6b:b5:bc:
67:73:78:7c:69:76:69:7a:b7:bc:d5:8b:5f:f9:7c:
0b:8d:7f:9b:a2:25:38:69:69:27:45:c6:ce:d6:57:
ad:bd:86:a1:ee:7c:ed:db:58:45:78:7d:06:b9:d0:
af:e2:10:93:75:b7:ab:b2:04:b4:e2:ac:f6:05:a4:
e8:aa:d1:c8:73:48:b8:01:26:d0:c5:05:b8:f9:d0:
d4:34:4a:db:58:b9:a2:d6:3e:f5:9b:b1:f7:1d:21:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:70:3C:1C:BE:5F:4A:DC:AE:21:0A:79:F4:F7:94:C7:87:2D:6E:6D
X509v3 Authority Key Identifier:
keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fb:d1:9b:c3:83:ac:43:47:7f:f9:95:22:a6:79:bb:c9:70:
ce:0a:57:ac:18:f1:d2:14:ff:40:8c:a2:81:fc:f6:fd:10:f6:
c6:84:6a:70:6b:43:ce:3f:32:36:6f:84:1f:9c:4f:9e:ba:79:
56:c1:08:e0:31:19:1e:f9:91:43:f2:25:af:24:24:b1:d8:4e:
24:9e:ac:6d:88:e4:56:53:6b:ba:a4:00:ab:8a:f2:52:8a:21:
92:e9:b5:39:89:02:b9:83:1e:50:a8:bb:77:1a:ff:a6:df:62:
59:57:4f:92:a1:88:76:ae:d5:3a:ed:31:f6:10:8e:bd:d3:51:
e6:f5:68:33:5c:55:40:bf:66:79:3e:c1:78:db:86:84:d9:bb:
18:63:4f:a9:f3:96:39:12:d8:ab:3c:f3:3e:f6:8c:89:22:c6:
42:0f:2e:a6:3a:57:23:1d:af:1a:f6:9e:a3:3d:88:d6:21:e0:
41:79:c4:aa:a8:39:01:ff:9e:ee:35:30:59:d1:ad:ed:f7:b3:
41:1f:01:d7:c4:72:fa:10:f8:54:24:39:4f:13:44:34:5b:e8:
ce:0d:73:c6:3e:e1:d2:ec:92:ab:29:e9:4e:fa:bf:c4:32:89:
ac:40:25:e5:b3:b5:07:8b:2c:51:68:29:4a:39:fb:2f:6e:c8:
ed:22:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:32:40 2026 by rpki-client