
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json)
Hash identifier: pSWoWLnDnbJdCX6e9hgUmfzv1Q1vsAsa2g06J5NjO1E=
Subject key identifier: E9:3B:9E:4C:FA:EA:92:ED:84:92:05:3E:86:8D:94:05:EC:30:4B:33
Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Certificate serial: 0F2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
Manifest number: 0F12
Signing time: Wed 22 Jul 2026 17:48:27 +0000
Manifest this update: Wed 22 Jul 2026 17:48:26 +0000
Manifest next update: Wed 29 Jul 2026 17:48:26 +0000
Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: WGmAh03UIhvVHQKoLo5RFHaLOEtK4mNBJCjidgBrfxo=)
2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: JURe/kWLxWBBPujRNutDT5hH/C63Ar6PS7XUiquehOE=)
3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: 9PzmGNvK7SqmPlPyXHrhBcEPkqCMbrFtsm/C/q55ytk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3884 (0xf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Validity
Not Before: Jul 22 17:48:26 2026 GMT
Not After : Jul 29 17:48:26 2026 GMT
Subject: CN=6a61026a-acd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:93:f9:d2:e1:13:1f:40:18:a8:64:8f:00:
4c:da:38:9b:a8:55:25:9c:a4:19:28:07:0e:f0:87:
4e:8a:b0:7b:df:69:79:8e:77:b1:75:b6:aa:fa:ef:
df:8a:99:00:a6:57:f7:e3:2f:85:ca:47:46:6d:12:
e3:52:cc:d7:a6:8e:25:92:6a:67:a0:5b:70:55:19:
ee:a1:ca:2a:44:40:d1:76:0a:35:e2:2d:68:32:10:
ce:3f:dc:c9:10:8d:62:75:a1:d9:ea:88:ee:3f:24:
9e:6c:e7:25:9f:0e:cb:c5:52:60:e2:eb:ca:31:de:
fd:32:fd:c4:49:47:cc:0b:e8:07:cd:f9:59:b9:60:
e4:cb:3c:c0:86:c5:82:e5:cc:f3:d2:4c:24:5a:23:
44:8d:34:0d:1d:08:0e:64:a8:e1:1a:43:df:28:7f:
3e:79:e7:b1:a0:df:0b:b7:de:ac:26:70:ad:c3:50:
21:06:f3:67:03:ee:90:15:5e:7c:3b:c6:84:44:e9:
57:fd:e7:c2:9d:c9:12:c3:6f:14:63:94:73:ba:ba:
96:1e:ea:b6:eb:f3:b9:15:f6:66:2a:d1:6c:4b:54:
39:78:35:d8:8f:c4:d2:ef:88:f3:a1:7a:e5:24:04:
0e:ee:35:2c:05:76:d0:49:52:22:32:c5:bb:9b:6f:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3B:9E:4C:FA:EA:92:ED:84:92:05:3E:86:8D:94:05:EC:30:4B:33
X509v3 Authority Key Identifier:
keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:84:f8:b8:70:cb:bd:f5:76:26:ff:1b:f2:45:fe:d3:3d:5b:
27:80:3a:e5:b7:72:5b:06:41:26:7c:40:a2:d0:ce:07:71:41:
5e:94:f7:69:07:e6:e8:b4:60:d2:48:74:f3:42:ac:6d:3c:48:
bb:34:a7:88:83:00:c9:99:9e:fc:32:39:7f:4b:bd:c2:ce:7b:
a9:e9:0b:c7:e1:79:37:ef:84:d5:1f:15:63:88:1b:a8:22:74:
00:f8:9a:1e:c3:ed:b4:07:39:be:fb:0f:09:2e:00:f2:98:ac:
35:8e:b6:ad:95:a2:c7:fd:00:a3:1f:f0:85:47:14:51:1c:0a:
ff:27:6b:56:61:d5:5e:1e:dc:80:f3:4b:f4:f0:1c:cd:4d:65:
ba:71:4d:a7:31:0a:af:b2:44:47:fa:c9:3c:6c:8b:c2:a0:4f:
73:25:dd:0f:d0:a6:26:7f:ee:9b:7e:4e:13:8c:a7:ae:39:df:
e1:58:91:80:c0:98:b4:5f:3f:cc:ad:07:eb:c5:0e:99:ea:5c:
ed:af:bf:2a:75:fb:ba:b8:82:19:c4:68:4f:91:6e:74:a1:21:
07:cc:97:db:37:2a:90:1e:85:dd:6d:3a:17:a3:c3:81:d1:73:
f9:39:5d:69:20:ec:ed:ae:0c:5e:e7:a7:19:ab:2e:4e:f8:6a:
f2:91:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:41 2026 by rpki-client