
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json)
Hash identifier: /4WpXHuqaVNKrw4T6g8Vyb+BfFcUWD9S3ol34UX6V70=
Subject key identifier: F8:B7:70:4D:BE:36:1B:ED:A1:AE:80:CC:55:AD:AD:92:42:F3:BD:F3
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 117A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
Manifest number: 115F
Signing time: Thu 08 Oct 2026 17:18:16 +0000
Manifest this update: Thu 08 Oct 2026 17:18:16 +0000
Manifest next update: Thu 15 Oct 2026 17:18:16 +0000
Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: i5k9qOeR/umMZbiyax6GsE7tZrc2G6BOxebgoBTfq+8=)
2: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: QNd+7yoJE7XGdb3l9stbVIXGPJdYrSjK5lDsTdFfmX0=)
3: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: MInSGZWk/+V+/O784VPQkOPEvkikcYw1hh5xAfaMy+Y=)
4: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: aScypq58ma32Blk4gXAn5hRCMA++RlRKUglRyBdAIIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4474 (0x117a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: Oct 8 17:18:16 2026 GMT
Not After : Oct 15 17:18:16 2026 GMT
Subject: CN=6ac7d058-dbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:e1:30:36:7f:e2:4e:59:7e:2d:5e:f6:ba:
e8:ef:85:08:56:d4:9a:9a:34:42:94:c8:c2:8a:06:
6c:30:a7:af:1b:21:2e:78:2c:ce:25:ae:8f:b6:c4:
6f:c3:35:f4:3a:10:97:d6:54:08:b9:ac:b5:00:12:
b2:19:3c:77:bf:af:dd:f4:5d:53:ed:e2:d5:b1:fb:
17:80:96:9d:17:25:84:e4:6a:9a:9d:e7:cd:94:19:
7e:ed:ce:37:20:94:41:28:28:24:42:a7:d9:4c:15:
ae:05:d6:43:e6:40:32:61:a3:e6:83:f2:19:a9:b5:
80:82:ca:59:ef:d8:7c:59:ca:3e:63:e4:ee:26:ef:
d0:97:84:30:8f:3c:fb:9c:0f:0b:f3:7c:6a:79:d0:
6f:e8:55:fa:5c:b7:8e:aa:87:eb:5a:ad:07:e9:76:
30:55:43:54:6f:f0:49:0d:53:24:20:69:fe:78:9f:
b1:ff:98:86:5a:a5:e3:07:ea:7c:8c:bb:1a:e3:bc:
7d:0e:be:e3:63:1c:70:36:55:e5:41:0a:4f:f0:eb:
e3:93:0d:2c:3c:34:e6:b5:b4:bd:93:13:57:61:af:
e5:89:b8:27:f4:63:a9:5a:60:af:d9:4a:57:71:63:
71:bb:bb:58:a1:a9:d9:ff:f5:34:e9:aa:b1:7f:1d:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:70:4D:BE:36:1B:ED:A1:AE:80:CC:55:AD:AD:92:42:F3:BD:F3
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3f:c5:34:73:20:3b:0e:ec:5b:a7:38:be:08:4e:6d:9d:21:
6e:9a:58:1d:87:07:5c:6c:94:3b:6c:bc:42:fc:1e:86:af:b4:
fb:ec:3b:cd:56:9c:f0:2b:4a:cc:bc:82:46:e4:a6:a7:c9:af:
79:6a:11:fb:a0:52:c8:2a:1d:ad:d6:0d:b8:70:1d:c7:6d:94:
ec:7b:60:ec:ba:67:1b:e5:c4:69:e1:f1:8c:d1:d1:98:17:5c:
44:b7:18:6d:ef:ef:56:01:97:af:3d:61:53:56:3f:85:4e:9c:
9d:a2:1d:57:35:47:92:30:c9:1b:7d:41:71:e4:20:56:bf:02:
69:ce:0f:c2:39:eb:11:98:05:24:30:b1:59:f4:6a:17:8d:da:
11:b7:fd:4c:3e:f7:7c:a9:1f:b3:2c:a6:dd:e0:89:f7:70:37:
89:a0:15:1a:13:52:2c:fd:85:14:ff:0a:55:17:c3:e2:c6:2c:
98:de:b8:28:82:5c:74:43:70:45:6e:c1:9b:2b:94:83:8d:3a:
32:5b:b9:0a:e4:59:be:07:25:ac:a9:6e:f6:a8:0c:97:51:7b:
ee:3d:78:6d:bc:1a:6a:0b:16:69:10:f5:cf:ea:12:44:c8:c0:
02:57:52:78:bb:6c:1c:3d:52:e2:1b:c2:dc:d5:21:f5:3b:fb:
1d:76:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:55:18 2026 by rpki-client