
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json)
Hash identifier: a2fay4YO9vghGQitqUOR2qvGPBuBza19UwhFJCj5ajc=
Subject key identifier: 2A:68:EB:43:47:5D:AA:69:D9:01:04:E1:43:0A:95:01:C4:7C:35:38
Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB
Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
Certificate serial: 083B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
Manifest number: 0832
Signing time: Wed 22 Jul 2026 21:37:02 +0000
Manifest this update: Wed 22 Jul 2026 21:37:01 +0000
Manifest next update: Wed 29 Jul 2026 21:37:01 +0000
Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: MjUQIwYTVAyWAB3YnmzwpSYe9V4k3MYlUDNTwVDCb+c=)
2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: //kyIlIYFX3+08S3h9a7dEmLAcY3BX1jLjRJO0SJN6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl
rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2107 (0x83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
Validity
Not Before: Jul 22 21:37:01 2026 GMT
Not After : Jul 29 21:37:01 2026 GMT
Subject: CN=6a6137fe-c44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:c1:13:89:60:53:51:c7:44:68:a9:1a:25:
0e:e5:41:b2:d1:87:85:d5:58:76:75:ab:be:68:16:
88:59:cc:6d:61:bf:bd:4f:40:ae:f9:45:3a:e2:8a:
ee:c0:2a:1e:72:2e:56:b2:9f:8c:18:77:b8:3a:12:
c2:be:63:bb:d8:37:3a:ce:43:df:23:8d:aa:9e:09:
dc:ef:f8:d7:a6:0c:56:54:d0:ab:96:92:7f:08:5a:
da:b1:b8:d8:d1:86:eb:23:b1:45:ed:d2:67:62:64:
ed:33:7e:a1:05:62:93:bf:64:c4:13:df:9d:ab:b9:
f5:62:68:4f:da:92:4f:a9:71:cd:a6:4e:71:65:01:
68:5b:12:bb:2e:de:a6:ab:fd:29:04:1c:20:a6:11:
7b:ce:c3:75:47:d9:cd:dc:19:4c:89:34:ee:49:0b:
fe:fc:f5:d5:08:5c:9d:d9:c9:7d:28:4a:1b:fa:97:
5a:0d:40:2a:e1:9a:e3:d9:ab:97:64:53:49:36:f4:
62:81:27:b9:e6:0d:4f:44:04:ab:2c:fa:a1:ec:97:
52:b8:2b:e1:e2:9d:d5:23:a5:7f:53:34:61:1b:8a:
6c:c4:4e:51:bc:04:d8:0d:04:35:9b:1d:5f:32:cc:
ce:5d:93:3f:02:32:ff:cf:e5:72:05:fc:96:65:34:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:EB:43:47:5D:AA:69:D9:01:04:E1:43:0A:95:01:C4:7C:35:38
X509v3 Authority Key Identifier:
keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:09:87:e9:ef:90:e0:b8:ab:36:f5:f5:a5:a9:e8:04:32:dc:
99:76:1f:a3:46:b8:4c:a9:5a:31:ad:d9:6e:2c:52:b2:53:9f:
c6:fe:11:40:fc:1b:0c:32:e4:81:82:0e:6d:28:f5:2c:a6:c9:
e9:71:c7:e6:48:17:a1:2d:ff:f7:90:7b:b6:77:20:bc:1b:52:
e0:a4:11:f8:04:77:27:f6:1b:fb:d2:cf:1a:76:78:9d:dd:c8:
5e:15:17:b2:d9:f8:92:8f:36:00:15:be:c9:37:37:0c:60:55:
30:90:4d:0c:90:79:37:53:57:c3:a8:0e:3a:79:56:86:eb:35:
37:bc:6c:1c:98:6f:fa:f0:10:76:d2:7e:8a:ff:bb:b3:c9:ae:
ca:48:f0:e0:62:75:61:16:00:66:48:9e:de:c1:38:91:bf:5f:
43:3c:4e:a2:93:2f:9e:b7:43:73:94:72:03:8d:d2:8d:e1:34:
86:73:53:b8:f9:8f:1f:45:fc:76:1e:b8:b8:c4:6f:46:44:95:
c6:ed:56:05:59:c0:bc:d6:5e:a0:ca:19:73:20:e1:a2:73:5b:
05:8f:25:8e:7a:f7:d4:6a:2e:55:62:68:e7:39:34:7a:d1:a9:
b0:44:6d:e8:5d:c5:9f:dc:f1:da:83:f9:62:36:b7:e5:20:13:
91:ac:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:59 2026 by rpki-client