
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File: yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier: GMY4+ro9ONJzLcriI70yLtk3JhG7cFYhl8/FWL60Tu0=
Subject key identifier: 63:E4:39:51:8E:3B:C4:61:AB:8D:C9:36:33:C0:5A:48:63:43:63:A8
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number: 015A
Signing time: Tue 12 May 2026 21:23:42 +0000
Manifest this update: Tue 12 May 2026 21:23:42 +0000
Manifest next update: Tue 19 May 2026 21:23:42 +0000
Files and hashes: 1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: m+3BIh0KMUGd9Zcvc+XkTflGSvX5xZbwfellJKpRCbU=)
2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: OPdh+VvdJ8rvY5Hnhte8AjyqGibUOoE1fm+ikF6YCWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Validity
Not Before: May 12 21:23:42 2026 GMT
Not After : May 19 21:23:42 2026 GMT
Subject: CN=6a039a5e-e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:23:49:48:2b:b1:b4:5e:52:43:70:b1:53:
14:c5:e6:1e:73:54:29:fe:15:e9:ce:7e:c5:8a:e9:
1d:c8:d9:65:a6:06:14:4d:27:e5:46:dc:cc:d5:04:
fc:fc:0d:66:6d:2f:f0:38:33:de:9e:76:34:27:c3:
51:fd:fe:5b:23:37:d0:60:d2:4f:81:bc:24:d0:57:
06:b7:26:ff:a0:9a:39:14:01:bf:96:7e:5f:5e:d3:
d6:7e:0f:41:5b:27:2d:0b:64:fe:61:38:c9:90:b0:
f9:96:3f:37:1f:3c:32:bf:e5:d8:4b:4e:fa:b9:cc:
7f:ec:7b:23:e5:6a:4e:f8:ca:fb:90:8f:ca:ff:69:
c4:d7:a5:9c:a3:08:8a:ea:c2:5f:51:6f:56:4d:59:
23:7b:0b:d2:22:4b:f8:d5:9a:8a:c9:e0:2e:c3:f0:
44:0d:e8:d1:e2:9e:ef:28:29:eb:7f:d8:0d:1b:9d:
63:88:79:6d:6b:98:99:71:3b:45:26:96:83:2a:f8:
21:48:15:37:7b:b5:b1:af:22:76:83:6c:c7:a2:fd:
91:8a:c7:bc:32:e0:6e:bf:85:a9:ba:bb:bc:f3:69:
f9:f7:ce:83:ab:ad:2d:ed:f7:1e:0f:73:24:d7:1c:
27:df:95:64:c3:7e:5e:ac:ff:bd:ed:28:c4:92:f7:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E4:39:51:8E:3B:C4:61:AB:8D:C9:36:33:C0:5A:48:63:43:63:A8
X509v3 Authority Key Identifier:
keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:1a:6a:73:57:a8:0d:3d:4a:51:2f:e9:44:4e:d6:29:ff:6d:
5a:e7:d6:7d:3a:48:16:70:46:16:08:73:01:40:08:fd:4e:2e:
a9:8b:e5:27:3f:95:dd:2f:48:a3:5a:ce:2e:da:12:b5:60:f0:
ce:4f:b3:ad:51:9f:ad:d9:c1:c2:9c:53:ee:2d:79:6c:cf:bc:
8b:06:ff:93:df:21:70:56:db:81:b6:cd:62:1b:46:f2:69:8f:
b5:26:54:19:e9:23:42:42:a7:63:6c:5a:42:9d:f4:3e:d4:07:
f0:c6:77:67:42:fc:39:95:d9:01:28:77:9e:ae:6b:62:13:d2:
1e:53:75:00:21:9f:29:f2:a4:e8:08:39:58:12:aa:46:87:d5:
ee:b7:d3:27:eb:c0:ff:d7:70:24:72:5f:3f:eb:dc:a6:2c:d5:
a8:3b:e4:89:4e:1a:36:2b:e6:78:ac:eb:d4:0d:33:80:1d:cb:
78:9f:fb:16:15:00:44:4e:91:c3:61:f2:bc:90:5d:4f:55:51:
67:76:ee:0f:2b:eb:d9:3f:6d:19:4a:78:61:d9:a0:7c:57:6d:
a6:d5:2a:f2:24:b6:d4:c7:00:02:9c:29:ac:83:e9:f7:7e:d9:
98:63:72:42:0a:9b:f6:ab:86:15:3a:d4:b9:33:0f:7d:1f:06:
58:05:67:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:54 2026 by rpki-client