
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
File: jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json)
Hash identifier: KJQXNeI6lJkKLB3EBUZvtB9hcwZZ0NYXJ2CO61WmI2Y=
Subject key identifier: 04:AC:CE:8D:D7:D6:F4:8F:EA:FF:F9:C8:3E:B2:31:1A:56:B3:92:84
Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
Certificate issuer: /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
Manifest number: 018A
Signing time: Fri 09 Oct 2026 05:08:02 +0000
Manifest this update: Fri 09 Oct 2026 05:08:01 +0000
Manifest next update: Fri 16 Oct 2026 05:08:01 +0000
Files and hashes: 1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: TAgB0L90HEWvKQY7dIW/fsdLCzOlzB2T59Wx9kX38qg=)
2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: n6rNTx4DosyE+NYmhaFLC8L4vDQdHdtdD/uLixXbDGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Validity
Not Before: Oct 9 05:08:01 2026 GMT
Not After : Oct 16 05:08:01 2026 GMT
Subject: CN=6ac876b2-d317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:f6:33:7a:34:bd:34:b3:f1:f0:36:d3:48:
de:3f:ae:e8:27:0e:3d:d7:6c:de:5f:72:1a:b2:de:
ab:47:7b:ee:e0:16:99:fb:3d:3d:02:b1:fc:e2:99:
1a:e5:68:79:72:2b:5a:1b:64:f0:8d:74:2a:99:f3:
36:e7:18:9e:d0:e1:e8:a6:25:1c:2b:9d:ea:4e:e9:
44:17:22:9f:41:af:ad:fe:5c:54:26:85:c0:05:f9:
22:2f:c0:5a:b8:74:5d:b3:6f:97:9a:78:00:40:78:
f3:72:fc:64:2a:94:3e:95:bc:2c:24:0c:cf:5d:62:
c3:97:ba:ac:32:b6:34:f5:1d:22:e5:4e:a1:18:e1:
81:51:cd:ed:a5:b3:72:01:5f:70:1a:97:1b:da:77:
72:d7:35:6e:34:a1:7f:56:76:6f:cd:3a:ab:73:7d:
f8:4b:7a:4b:30:3e:78:ab:c2:19:2f:71:d6:e6:5e:
49:77:6d:b2:c6:97:1e:a1:61:0a:6f:0d:ff:f8:b4:
7f:66:7c:32:b0:31:d5:b4:7c:e5:3e:7c:e6:08:16:
64:25:0f:73:64:dc:71:96:d7:13:36:69:78:7e:2f:
46:23:4a:88:9c:ee:a2:e3:dd:16:13:fb:56:14:40:
30:e0:98:60:0a:4a:01:60:d0:a6:f4:7f:10:e0:a8:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AC:CE:8D:D7:D6:F4:8F:EA:FF:F9:C8:3E:B2:31:1A:56:B3:92:84
X509v3 Authority Key Identifier:
keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:70:54:9f:5a:db:62:d3:79:08:1f:67:e4:57:7a:1a:5e:a4:
29:bb:fc:c5:a2:72:b8:87:83:02:2e:d6:99:06:94:ec:e2:d5:
4f:72:dd:e7:21:cf:1e:54:4b:77:6d:ac:6f:fa:86:38:6b:89:
ce:7c:dd:5a:9f:32:06:22:66:5c:2b:29:a8:a8:ae:25:b3:7b:
82:89:50:13:7d:96:27:7f:3e:39:b0:db:aa:64:d2:af:11:5d:
c2:cb:f5:70:7d:d8:51:6c:65:30:79:9b:15:f1:72:79:27:11:
fc:6d:f6:bb:79:a7:71:c8:a8:bf:b4:fd:06:3b:f3:65:6c:b5:
c1:1c:99:2f:44:70:da:31:dc:37:31:02:a1:78:93:76:8a:0f:
1d:aa:17:00:c8:22:20:a8:78:0e:79:30:44:d6:29:f4:ac:a2:
b4:fc:30:25:50:72:58:83:a8:15:68:c7:9a:90:38:97:e1:e8:
da:bc:4e:5d:36:ca:a4:e1:11:43:64:df:9b:71:26:0e:c5:d0:
93:06:f9:88:4c:04:0c:8c:d4:b5:c6:40:ca:a2:70:31:6e:29:
6a:95:3f:e9:1f:55:ff:d6:63:20:48:17:a3:0a:1e:70:fc:21:
3f:30:bf:c0:33:46:69:8c:20:e1:6f:4b:fc:5e:48:96:f1:ae:
46:78:92:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:58:49 2026 by rpki-client