
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
File: jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json)
Hash identifier: 3gmzAMxOdoCTh1uBHTShUIPW/ne41ixubo2NJc6xOsg=
Subject key identifier: D3:E5:7C:7A:33:B4:33:10:C9:73:FD:21:3A:3F:D7:D6:BC:0D:34:DE
Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
Certificate issuer: /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
Manifest number: 0162
Signing time: Thu 23 Jul 2026 06:31:54 +0000
Manifest this update: Thu 23 Jul 2026 06:31:54 +0000
Manifest next update: Thu 30 Jul 2026 06:31:54 +0000
Files and hashes: 1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: Pg9vbK4JAOI55kGzPbNir2Q3/oSafHYkI4H65bO01Tc=)
2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: n6rNTx4DosyE+NYmhaFLC8L4vDQdHdtdD/uLixXbDGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Validity
Not Before: Jul 23 06:31:54 2026 GMT
Not After : Jul 30 06:31:54 2026 GMT
Subject: CN=6a61b55a-a533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:22:d4:11:78:3a:f1:aa:2e:60:eb:fe:68:
f9:80:2a:ce:97:cb:39:48:07:38:56:2c:a4:3a:d4:
08:6a:2d:9c:9f:69:df:53:92:c3:d7:27:c8:05:bb:
c7:7d:c5:e1:3f:01:77:50:c7:ac:da:4d:2f:fb:eb:
e0:0a:f8:5c:80:2a:a6:09:bb:88:04:1f:3c:85:19:
2f:dc:2d:1b:b3:21:e3:1d:20:f9:ef:32:ba:38:13:
14:28:d4:b1:45:b5:2b:cd:1a:14:68:45:d0:51:f0:
90:48:71:93:9a:2f:5f:ff:33:e8:73:7b:30:c1:a7:
46:2e:3c:b3:36:c9:44:ee:c1:12:3d:d0:25:90:9a:
44:b3:98:8e:61:c7:9a:b3:14:11:fc:f8:b1:e5:81:
63:b8:f3:b1:fb:27:c1:d6:46:27:a2:99:f2:d7:df:
24:cf:88:bc:26:6d:69:2e:62:82:d6:53:0d:54:24:
d2:cc:a9:92:9f:12:5d:9a:9c:c7:39:47:76:2f:3f:
ab:91:4c:79:fd:db:34:57:51:b8:79:58:ee:46:96:
52:2a:0e:b1:c1:73:d8:cb:29:30:7c:47:a3:e6:85:
ba:64:ae:e0:84:cf:c6:80:f2:db:2e:3e:17:0a:5c:
eb:2d:d9:e8:37:9a:f0:04:27:0f:a7:82:78:c1:1d:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E5:7C:7A:33:B4:33:10:C9:73:FD:21:3A:3F:D7:D6:BC:0D:34:DE
X509v3 Authority Key Identifier:
keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:5f:90:c1:cd:98:d1:8a:40:2c:f9:18:4e:ce:7f:12:0a:47:
81:17:f0:13:4d:19:56:fc:b2:6d:ff:67:89:e4:a2:8d:f7:d9:
b0:cd:d5:ce:77:e6:99:c2:4f:65:dd:3a:3e:ce:bd:2d:bf:7e:
3c:46:ed:e8:41:ef:60:c6:92:53:0b:42:03:31:bc:82:ed:e7:
03:65:9d:bf:f5:73:60:b0:30:a7:64:f6:67:88:72:22:97:c9:
24:ef:8b:ea:9a:99:f0:d4:f0:b6:b9:49:ff:bb:55:62:33:f5:
b6:95:81:96:db:c8:9a:42:ea:53:64:f6:e4:03:3c:d4:a8:0f:
d7:e5:c6:38:ed:d8:aa:56:f1:5b:c6:a7:26:26:c6:b0:5b:c5:
86:ac:59:a8:3e:81:1c:cf:11:e6:8d:31:a0:ec:d4:bb:f4:b2:
1d:3a:4c:c0:94:3a:1a:7c:0a:0c:d4:76:83:2d:46:3b:11:a1:
bc:5a:cd:0a:a5:92:d1:13:59:dc:ee:21:73:81:cd:fc:23:ca:
72:1b:5f:d3:b4:84:a5:02:06:7f:4b:53:a6:aa:3d:cf:06:fd:
d5:59:95:19:f6:80:53:fa:ae:ed:5c:6e:42:8e:4b:2b:f2:e3:
01:f2:f2:72:19:69:14:34:8e:63:2c:8d:3e:50:58:5b:4f:8e:
26:d0:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:30:02 2026 by rpki-client