
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft
File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json)
Hash identifier: w9Uu1MEI+YG4cunS+u9V0MwPAZT2CJKKXNRn8OCnGII=
Subject key identifier: 55:59:A3:42:E0:1B:A9:88:3D:0E:BA:0E:4E:1A:C7:11:06:AC:4A:0F
Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A
Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A
Certificate serial: 03C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft
Manifest number: 03C0
Signing time: Thu 23 Jul 2026 01:31:14 +0000
Manifest this update: Thu 23 Jul 2026 01:31:13 +0000
Manifest next update: Thu 30 Jul 2026 01:31:13 +0000
Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: HGpkrguHJ+6PBDKqrhCNUVWxxvYvYc2h/ay0xZzkdFk=)
2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: ebLn1kmFFAVk7O0jw8QI6JsXqB37NuyRPaNONVz+j0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl
rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3E17, serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A
Validity
Not Before: Jul 23 01:31:13 2026 GMT
Not After : Jul 30 01:31:13 2026 GMT
Subject: CN=6a616ee2-5de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:ad:d0:72:e0:fe:62:e1:24:57:0d:db:89:
0e:3f:18:ad:14:01:39:9f:06:7a:bd:4a:7b:4c:9d:
ae:8c:dd:ee:d9:7d:0b:84:38:b4:84:a1:3b:54:8f:
7a:ac:92:f6:52:c7:48:dc:25:77:e4:a5:8d:0b:37:
d2:a4:e6:33:e0:3e:7e:15:4f:81:41:e7:03:12:79:
66:6b:39:3b:db:a9:25:b5:54:2d:b0:50:08:48:9b:
f9:0f:46:04:9f:cd:07:12:7c:42:76:c6:b8:49:af:
d3:24:07:d2:6c:46:3e:f1:e3:7b:36:77:5f:2e:52:
f7:52:a2:ba:15:6b:ea:8e:2d:9e:24:bd:2b:e3:2c:
bf:06:05:05:1d:45:bd:dc:53:2f:f8:5c:31:89:c8:
be:ef:96:0d:85:75:e3:5f:43:0d:9b:cb:b2:d7:54:
7e:06:08:88:41:6c:bb:8a:97:50:c7:6e:47:0d:40:
68:5e:28:ec:d6:14:cc:d4:86:cb:24:4e:09:fe:93:
ef:7a:9e:f5:da:c4:ea:a1:53:ba:cd:88:58:4c:44:
a7:75:17:a7:a0:21:e4:e4:d2:cd:8f:07:25:78:a8:
29:d1:ee:5a:63:f6:67:0c:20:cd:77:42:14:0f:be:
2d:e1:e3:a9:06:0d:6e:a3:91:e6:2b:4d:12:b0:49:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:59:A3:42:E0:1B:A9:88:3D:0E:BA:0E:4E:1A:C7:11:06:AC:4A:0F
X509v3 Authority Key Identifier:
keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f6:5d:bc:9c:41:fc:c8:84:e7:03:47:0d:a0:35:ed:93:46:
a0:0c:0c:c7:4c:87:02:0d:9b:c8:73:57:28:61:8d:06:06:05:
a0:fd:8b:dd:26:00:a0:8c:e8:55:1f:1a:c8:bd:7c:b7:ec:87:
9d:aa:e1:5e:0d:f1:e7:9d:1d:64:5b:d6:cf:7b:36:65:fe:24:
19:0c:3c:6a:d6:83:c0:28:1c:f9:12:5e:61:5c:56:3b:1d:0a:
42:e0:3c:dc:21:27:29:d0:ca:7d:66:3b:19:65:cf:39:d1:95:
37:bc:35:1a:9a:b3:ff:a5:e4:c5:23:2c:10:32:9f:a6:da:a0:
fc:84:99:f1:43:d6:d9:21:86:44:08:42:59:29:d0:1b:f3:75:
37:92:8f:b6:0b:07:2a:db:36:1c:9c:5c:37:b7:6c:ed:c9:bd:
08:2e:ec:43:a5:a0:9e:fb:85:ab:f3:e9:e9:ae:2c:2a:2e:cf:
ec:d8:89:5f:0b:4a:6a:30:b4:f6:99:d8:34:bb:6f:5e:45:0a:
5b:e8:9f:d9:99:e5:26:a1:87:dd:09:ab:41:f7:b9:a9:0a:06:
1d:0f:19:05:06:7e:ba:cd:5e:a9:0b:27:a7:9c:3c:8b:df:cc:
98:d0:e2:47:9a:39:73:00:db:a7:cf:c0:25:2c:25:ab:39:07:
13:ea:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:06:56 2026 by rpki-client