
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
File: YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft (raw, json)
Hash identifier: bMcww/yZVf6fs+7pSH+wUrBKbGVFZromM2IpWeem5PI=
Subject key identifier: DD:A7:E7:A3:EE:7B:C9:C9:8D:1A:76:26:FB:43:2B:68:30:FD:83:05
Authority key identifier: 61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56
Certificate issuer: /CN=A91A1CAA/serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
Manifest number: 01A8
Signing time: Wed 13 May 2026 04:14:28 +0000
Manifest this update: Wed 13 May 2026 04:14:27 +0000
Manifest next update: Wed 20 May 2026 04:14:27 +0000
Files and hashes: 1: YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl (hash: p+HmUBI2swUarqEIX+L7f2sMhi6orwz0rYoIdhWfIXM=)
2: E75FB4F0CE4A11EE95C15E20C4F9AE02.roa (hash: VOuSl10nDbGYce++IROj56tt7FaPfuOY+khidDuWXx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl
rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1CAA, serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
Validity
Not Before: May 13 04:14:27 2026 GMT
Not After : May 20 04:14:27 2026 GMT
Subject: CN=6a03faa4-3424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:8e:26:b8:ea:e1:fb:1a:12:b4:53:55:f1:
75:3d:71:64:c4:a9:f8:e5:38:01:c4:17:3e:4b:0d:
3c:8c:43:cb:30:48:4b:45:7e:f3:f1:f7:1b:fa:53:
77:5d:ef:e5:6d:85:dc:fc:b0:bd:4b:4b:22:4b:d9:
dd:21:01:5d:78:68:2a:d1:22:7d:ad:b9:34:6b:3d:
f1:b8:61:1d:11:a9:61:a7:ea:35:69:04:63:86:15:
11:5d:d4:ed:bc:86:c1:5c:8d:fa:89:ba:af:cc:06:
09:f2:bf:08:f7:21:1e:b3:19:71:9a:95:cb:16:ec:
f3:3c:99:25:7e:5f:13:c5:9f:f9:e5:78:4a:b0:a2:
9d:09:20:e9:00:d8:f4:03:b0:92:ba:5f:27:03:ef:
e7:02:f9:93:91:05:cc:33:79:99:99:09:e3:cb:e1:
04:0b:fa:1c:29:1d:b3:45:86:a3:a0:77:ba:3e:f0:
68:2f:b1:36:f4:9b:31:a9:d5:9f:04:d9:c0:79:dc:
d4:71:0d:ab:51:cc:ee:65:e7:f1:58:40:d3:b5:1e:
58:0a:31:0f:b4:9d:40:95:2b:7f:fa:b6:f5:c9:62:
d5:72:ef:f8:15:ae:94:52:ba:45:ad:23:6e:a1:d3:
2a:40:d8:1d:70:cc:73:0d:e5:33:a5:02:51:bb:97:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A7:E7:A3:EE:7B:C9:C9:8D:1A:76:26:FB:43:2B:68:30:FD:83:05
X509v3 Authority Key Identifier:
keyid:61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:c2:08:65:3b:43:48:18:0a:79:53:cd:48:55:60:11:99:5a:
2c:fb:bc:28:89:f3:c3:f8:6c:6b:83:95:9c:c7:83:02:4f:9b:
5f:a8:72:25:e8:f7:8f:fd:eb:6b:5d:06:bc:d9:a8:8a:61:b2:
6b:1a:fd:9b:de:ee:8e:bb:59:0c:81:0a:97:31:98:57:d3:4d:
53:d6:71:9c:bb:a6:98:43:be:48:ae:16:69:8a:5a:82:72:fb:
1e:5b:61:71:75:bb:58:56:d8:d4:45:61:a3:46:17:09:da:ef:
22:ad:a4:e9:bb:dc:0b:1d:8e:55:6d:34:56:e3:01:88:ee:04:
b1:9f:69:63:f4:8a:ba:f4:39:eb:e7:a5:95:28:ad:2f:4d:72:
2e:dc:fc:b9:fc:ce:b5:f4:34:3d:55:91:5f:ab:70:c1:e2:09:
27:5f:18:a4:46:a2:92:1d:fb:d7:dd:8e:ca:7b:56:a1:e7:2e:
d8:e1:1f:d2:de:05:7f:03:f8:0b:16:e6:7e:ca:a0:36:2f:5a:
82:09:e0:ba:1c:32:19:47:cc:fa:2a:19:c8:5f:a5:fe:f2:1e:
22:ee:d1:17:15:95:46:99:1f:72:02:8a:fe:ed:4c:19:b1:be:
70:a8:ac:c4:83:3c:fd:85:dd:62:04:46:7b:ed:56:93:1b:1b:
0d:2c:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:53:00 2026 by rpki-client