
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft (raw, json)
Hash identifier: VpxI7ONr1oyfiSjQ0dWwYdrhYbI1uCNDsem/cbGkecs=
Subject key identifier: 91:45:04:9E:97:23:5D:24:97:7D:87:49:FF:34:47:5D:7B:57:6C:93
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial: 0581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
Manifest number: 0553
Signing time: Thu 23 Jul 2026 00:13:12 +0000
Manifest this update: Thu 23 Jul 2026 00:13:11 +0000
Manifest next update: Thu 30 Jul 2026 00:13:11 +0000
Files and hashes: 1: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl (hash: yPccnS4FlEfdtCZO1r9OognqDXtuuRc2pdJabDRUpzo=)
2: FB03729A370111F1AC489D14BF833773.roa (hash: AU9dHXjHqTNme6QysdUZa4PCsHy+4a87mRqErQXJ6iA=)
3: FC94057A370111F1AC489D14BF833773.roa (hash: JZJalDSQr/IoFea9NxLBWN3ZOZ/DgJ84ZBHO9Nd0bsM=)
4: 346A2B4045AE11ECB857890EC4F9AE02.roa (hash: YheXK0UgGEB7Z/3VeNqFrG7TEedt8nnqAV/x4ZuFjYw=)
5: 351AC73E45AE11ECB857890EC4F9AE02.roa (hash: 1fMszEVclnRMOM/POK57IbuTqKPaZ6i1HdvWDw7RSC4=)
6: 35A2418C45AE11ECB857890EC4F9AE02.roa (hash: 1S4BYpNOabN3d/LnYoJIPgaMIRT82AJo33zkA94dJ9s=)
7: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (hash: xY/esRTHmVcSEnmni9qKfYB8APe7aNUaqGzW5UYshQs=)
8: FBB1514E370111F1AC489D14BF833773.roa (hash: ZkDSUGhIzcmjSgjRJZ9cZlXr5/YHk19HP0IIMCiijuA=)
9: 9896BA2EB6DE11EC8DB17172C4F9AE02.roa (hash: dG9p093s1Ue0rrA4RBzIOjl2As439gOH8sz6VM6eiUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409 (0x581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Validity
Not Before: Jul 23 00:13:11 2026 GMT
Not After : Jul 30 00:13:11 2026 GMT
Subject: CN=6a615c98-e2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:80:b7:34:1a:b5:8e:ab:5f:09:1a:8b:37:45:
db:0d:54:f5:0a:21:45:43:c0:e2:8e:ee:08:e8:4e:
1f:ce:dd:6c:cd:9e:0f:ff:d1:4e:37:07:05:88:09:
f7:b9:df:56:bc:53:4c:00:09:f8:20:3c:00:9e:5f:
06:33:74:fa:f0:04:08:76:0a:aa:8a:c0:ac:95:03:
9a:84:70:27:17:9e:ac:2f:1a:55:7f:81:55:de:25:
74:35:5b:df:8b:7d:85:e3:3d:5f:6c:92:5b:8c:1a:
42:ed:5b:05:db:4e:1b:56:81:17:07:51:fa:5d:f2:
c4:58:8f:fe:14:b1:fb:c8:50:87:73:d7:4c:7a:ee:
98:9d:29:25:73:cc:8d:a3:d6:a9:3b:5f:41:1b:04:
bd:12:75:9e:5d:9b:db:c2:bd:5a:6c:72:d2:96:ef:
dc:50:c5:78:0e:38:b7:ef:aa:d2:ca:9e:e4:fd:08:
a0:67:0f:89:d2:a0:54:d8:ea:c7:55:56:a6:43:ca:
d4:fb:70:da:42:5e:b5:04:0b:9c:15:81:97:5e:e7:
e0:ba:cf:2a:ec:e3:fb:48:4f:db:33:ef:42:4f:99:
7b:cc:04:bb:cc:a1:0f:ef:d0:d7:bd:a1:30:73:34:
57:c6:4f:ff:7d:f2:fc:07:b1:eb:e3:e6:16:10:76:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:45:04:9E:97:23:5D:24:97:7D:87:49:FF:34:47:5D:7B:57:6C:93
X509v3 Authority Key Identifier:
keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:41:93:69:11:d2:1e:2c:16:91:2d:38:2f:87:b3:a9:6a:12:
14:7a:01:fe:1e:b7:6f:b2:c6:8e:fd:8e:f3:57:85:96:6f:f0:
f0:3f:b4:41:63:aa:c3:76:f8:db:9a:c6:cf:13:55:5e:de:9c:
cb:c1:40:ca:af:34:ad:54:2f:0a:96:9e:64:11:9e:cc:88:4b:
34:52:ef:be:40:3d:37:13:f4:c5:48:3f:41:0e:01:d5:51:4e:
4f:a8:f7:cf:89:d6:b0:0b:1d:10:60:ea:95:cd:0e:75:af:f5:
bc:54:06:03:3a:dc:6a:b8:7c:05:ec:75:2c:6a:bc:82:60:2c:
72:f8:b5:ca:86:0a:ac:34:57:f7:53:98:6b:86:85:05:39:7d:
da:d0:26:ec:d6:01:bf:e2:32:23:6d:22:cf:15:c6:b1:7d:c9:
60:5f:4e:2d:6a:9f:ab:34:0c:95:d0:1d:db:da:28:80:73:7b:
65:e7:69:1d:f3:6f:4e:58:1d:12:d2:be:3e:d1:f9:9a:8f:00:
23:02:30:19:e0:00:0f:b4:c3:1a:b8:f2:ea:7c:88:cb:3c:55:
74:8e:02:cb:bf:db:42:aa:57:8e:4d:2d:68:3a:6c:8e:90:33:
90:49:29:c8:5b:36:7d:85:61:8e:77:e9:6b:ae:8e:5f:96:86:
ac:bb:51:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:06 2026 by rpki-client