
$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier: YmalG7spVGzATIv5FJ3cQa8VyGZjf5XmarCVm4IY8iU=
Subject key identifier: EC:A8:37:9B:6E:99:57:4B:24:E3:73:EC:69:9F:DC:E1:8F:C1:79:1D
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number: 0187
Signing time: Thu 23 Jul 2026 05:52:37 +0000
Manifest this update: Thu 23 Jul 2026 05:52:36 +0000
Manifest next update: Thu 30 Jul 2026 05:52:36 +0000
Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: zD1o0LzKy/uWQj5RSL4UHT5qTuy7hjBKp4teQV0NHwc=)
2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: SKhqrlepkMrk6BddxM6G2PMvfO6t8Ob/zKNcmmPpDSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Validity
Not Before: Jul 23 05:52:36 2026 GMT
Not After : Jul 30 05:52:36 2026 GMT
Subject: CN=6a61ac24-a940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8b:a6:4a:e8:8b:53:16:ef:66:78:f8:72:8f:
a2:db:cd:54:48:04:2f:31:ad:b2:80:96:32:fb:0a:
89:d5:91:47:16:f1:c7:4d:66:89:44:72:a3:cf:3c:
9a:c7:c8:b1:4f:6f:aa:e7:4e:59:4a:17:a3:c2:15:
04:d3:0e:33:6c:e7:d5:76:78:c7:ad:2f:86:df:24:
19:82:e6:7b:d7:85:e3:02:99:68:1a:95:ee:3d:8c:
59:2f:d6:ec:0e:5c:dc:f4:25:3b:fe:67:93:af:50:
71:d0:09:79:ec:70:e0:d8:d2:57:2e:f7:27:10:af:
24:df:84:81:a0:5b:20:26:d0:3d:31:f8:86:f0:1a:
11:59:44:29:20:10:61:82:f9:c8:9b:46:b9:d8:aa:
ec:3f:82:0b:1a:08:0f:70:58:66:80:45:26:db:7c:
45:ba:6f:ef:c4:27:a1:b1:41:e4:6c:13:72:16:18:
87:ab:76:f7:9f:ab:e4:7f:73:91:90:55:ba:bf:8d:
e3:33:91:41:06:dd:fd:0d:ae:f1:bd:4e:05:da:6a:
ab:30:c3:4e:58:ce:10:c9:55:69:26:2a:35:cd:d8:
50:9d:5f:a7:99:59:a9:8f:07:c4:ff:2c:25:47:4f:
99:da:dc:46:36:30:81:f1:81:f0:13:73:75:e7:0c:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:37:9B:6E:99:57:4B:24:E3:73:EC:69:9F:DC:E1:8F:C1:79:1D
X509v3 Authority Key Identifier:
keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:60:82:64:d9:a8:b6:d8:04:ee:c9:47:23:c6:3f:26:12:d1:
b3:1e:06:89:17:5a:f8:a7:74:d2:59:ac:88:33:16:ef:26:f2:
e6:64:1d:d2:68:95:fa:56:af:e9:ce:f2:bd:52:e8:2b:17:ea:
cf:0d:50:ed:39:00:a8:15:ef:1b:8f:20:73:57:58:bd:e8:2b:
70:8a:e4:9e:03:f7:c5:0d:0a:c6:c4:77:ff:a9:c5:f1:3b:59:
93:93:05:bc:28:41:c3:25:f6:af:71:31:64:67:d4:88:1c:39:
bb:74:81:40:64:d2:51:31:aa:24:59:cf:d6:63:0a:15:8c:d8:
f8:a5:84:59:9b:98:a4:7a:44:72:2f:cb:64:08:e4:df:c1:d0:
dd:09:5c:c3:2b:02:1a:85:91:3e:fb:ac:cb:18:46:b2:c8:98:
a0:48:20:cc:8a:3a:2f:21:33:2c:fd:7e:ff:a1:b0:18:ea:d6:
be:64:4a:cc:c4:6d:f5:d6:bc:2b:01:57:3d:b3:61:9f:92:9c:
62:3e:44:85:76:ac:01:dc:1d:01:d0:81:2b:44:20:bb:5a:de:
c6:4b:53:d2:05:b4:a1:d7:0a:69:63:33:b5:e0:9e:8e:7b:5f:
9c:a0:4e:6f:5d:02:52:9d:d0:37:69:e4:34:c1:e6:a7:9a:f1:
c8:a5:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:14 2026 by rpki-client