
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
File: YhVbsAWcTchhU2ywUux1W6sWbD8.mft (raw, json)
Hash identifier: uZSm3OhJBcSMWyKbl3ezmyt9erpHUjIbAnJu7cTkQs4=
Subject key identifier: 09:70:1E:F1:F3:E1:B3:6D:2A:61:63:BA:F2:45:C8:2E:B6:1B:25:16
Authority key identifier: 62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
Certificate issuer: /CN=A91978F7/serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
Manifest number: C4
Signing time: Wed 23 Sep 2026 06:37:06 +0000
Manifest this update: Wed 23 Sep 2026 06:37:06 +0000
Manifest next update: Wed 30 Sep 2026 06:37:06 +0000
Files and hashes: 1: YhVbsAWcTchhU2ywUux1W6sWbD8.crl (hash: 5blsSOIOlsjGpf4l2RyHexTSRujx2xIlnwormO5jMOA=)
2: 87C69A4E8DEE11F0A7999742C4F9AE02.roa (hash: qwmJMtInrC0IqGGbywIekTKX8KQ9rZiVhjJ+ax1NumM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91978F7, serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Validity
Not Before: Sep 23 06:37:06 2026 GMT
Not After : Sep 30 06:37:06 2026 GMT
Subject: CN=6ab37392-200d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:12:65:53:b1:f8:39:be:52:60:85:e9:74:
f0:78:6a:a8:8e:04:30:3c:6a:cf:aa:7d:53:d8:36:
9f:74:ab:9b:c2:fa:6b:c3:64:de:00:c4:7b:20:5e:
03:ce:ce:f5:00:04:55:c1:a6:0b:5e:8c:06:f6:72:
7b:de:c5:be:6d:86:ab:d0:c6:50:76:a0:68:a5:5d:
d5:1e:28:a6:83:52:7f:57:c9:5d:44:8c:9f:be:7b:
d6:d4:61:ca:8b:67:a2:2b:12:dc:d5:e7:6f:4e:d1:
78:28:8f:c6:9f:90:b9:71:1c:78:19:c3:43:56:57:
61:4d:75:16:75:8c:2c:a6:e6:72:41:3c:22:d2:28:
59:1b:19:0e:c8:f5:c0:55:77:74:b6:b8:c8:51:ae:
66:ba:20:d4:24:bc:3f:dd:db:ec:a9:67:a8:6d:a8:
df:a3:d4:aa:84:34:3a:ed:50:2e:bb:f2:57:47:4e:
f5:04:91:c8:87:89:3d:2a:dc:31:01:4e:92:16:c5:
ec:86:94:06:b0:e3:8a:a5:02:b1:13:59:8f:d0:c2:
f3:25:eb:f6:ed:20:9f:ff:ad:f4:ba:3a:ee:15:b4:
0d:28:47:37:e0:4b:17:19:37:26:af:10:24:a6:5e:
2a:bc:23:66:c4:5f:52:fe:38:80:64:dc:44:09:9e:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:1E:F1:F3:E1:B3:6D:2A:61:63:BA:F2:45:C8:2E:B6:1B:25:16
X509v3 Authority Key Identifier:
keyid:62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:4e:a9:34:5a:d5:76:89:f9:b7:e5:41:46:1a:fc:34:0e:56:
40:a9:e3:a3:a8:ce:de:22:18:88:1a:41:25:6b:b7:26:c5:a2:
ee:f5:86:c6:1d:ab:13:0a:c9:95:69:47:15:93:03:c3:0e:d9:
e7:62:17:41:b9:a6:c9:88:08:4c:2e:32:71:26:dc:74:2f:1a:
9b:2a:7b:66:9a:11:f5:8f:0a:46:03:6c:c1:b7:7d:af:1b:d7:
65:53:3b:c7:d6:10:3d:a3:92:96:b8:ef:0d:90:e6:93:a6:07:
42:23:96:85:35:47:bb:4a:b9:d7:f2:d8:41:b4:2e:0d:9f:d2:
09:1d:d9:74:cc:0e:2d:9b:55:13:49:b1:5b:6b:12:77:9a:1b:
fb:62:9b:21:cd:44:f6:05:75:33:90:c4:3e:08:c3:13:da:be:
81:49:1b:7e:e7:dd:54:d1:53:3b:1a:24:9e:d4:dd:c6:c3:78:
c0:cb:ba:7e:14:c1:fb:a8:9a:98:76:dd:61:3f:96:ac:dc:4e:
71:52:dd:24:a2:4f:64:94:4d:77:4b:f1:5f:c1:49:6e:90:15:
92:9f:b9:87:14:6e:6a:e1:ce:01:e0:67:95:e3:e5:7f:f4:ef:
0e:2e:d5:8e:0d:cc:10:39:a5:48:bc:86:a4:c4:8f:50:db:62:
e2:00:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:25:16 2026 by rpki-client