
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier: fYS/TqhRPLLADi1+Ll3ookkI0tmfV+3DTdOalNqQZfg=
Subject key identifier: 1D:5F:9D:CC:0E:92:57:38:A6:1B:26:B2:A2:0B:FD:64:26:C4:3A:E4
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial: 0A58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number: 0A4F
Signing time: Tue 12 May 2026 19:43:42 +0000
Manifest this update: Tue 12 May 2026 19:43:42 +0000
Manifest next update: Tue 19 May 2026 19:43:42 +0000
Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: AZ8YOAlnd+tjndjJmZLG1frIkHKRaI1NOkcD6n6e7kI=)
2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: VjRNecW0vXmHI7IX4ZkzrAT4JcWtKoRZ3oauY1DQFzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2648 (0xa58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Validity
Not Before: May 12 19:43:42 2026 GMT
Not After : May 19 19:43:42 2026 GMT
Subject: CN=6a0382ee-cc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:c7:c1:fd:c0:41:05:0c:92:93:44:5d:78:
e5:24:df:eb:e1:d1:a3:be:17:7d:ef:f9:67:5f:0f:
40:02:ea:95:8c:da:c4:a0:b3:58:f3:67:95:40:64:
0f:18:48:df:31:d9:05:58:8c:fa:7f:d2:1d:aa:c6:
66:20:14:3e:65:ab:c4:20:30:b3:ba:23:ad:e5:36:
fb:d1:e5:19:ff:ab:cb:8f:6c:2c:be:02:f0:ac:97:
a9:bd:05:52:d0:f9:ca:a0:61:7c:b1:48:54:4b:3d:
f9:f2:d1:98:05:6a:7e:34:f6:e8:9a:ac:c0:de:fd:
91:7f:c9:80:05:51:4e:c3:df:9d:eb:94:c5:51:3f:
17:fd:1a:1d:fb:c0:c7:0d:d5:e4:5e:66:6d:92:9f:
62:54:98:d5:06:c9:c0:af:8d:05:80:23:2a:06:69:
05:45:b2:d5:56:8b:e3:67:a9:d7:61:0c:70:98:66:
27:ed:e2:c0:91:f7:94:2f:8b:fd:de:a2:98:a5:1f:
cc:36:8f:eb:89:b4:51:87:fb:0d:0f:2f:2a:48:4d:
92:bc:5d:48:7d:5e:5a:66:00:c2:87:b8:6e:e0:a2:
36:33:da:ff:0b:07:b2:94:79:fa:bf:5d:9e:98:20:
dc:61:ae:e8:c2:a6:1f:2b:ea:a3:e0:cf:eb:65:da:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5F:9D:CC:0E:92:57:38:A6:1B:26:B2:A2:0B:FD:64:26:C4:3A:E4
X509v3 Authority Key Identifier:
keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:b4:4b:06:76:81:ed:7c:bb:60:b2:01:f3:83:83:80:53:df:
b0:c0:c6:fd:f9:c6:ff:18:3d:ae:e4:9d:d6:5d:df:2f:59:9a:
52:90:85:f0:df:63:5e:30:fc:4d:44:89:73:33:77:f9:8d:49:
59:6e:d0:41:44:82:89:df:53:68:cf:92:85:eb:ec:0f:ad:96:
cf:39:a3:fd:ca:ae:f7:0c:4b:4f:67:1d:2a:e8:3d:51:52:23:
55:ea:35:4c:0b:1f:7a:b6:ad:c0:b9:e9:9f:20:96:a7:8e:a6:
a0:91:d3:e8:43:86:c1:a8:f8:77:58:ce:1c:b4:fa:f5:fe:4d:
17:0a:4e:d3:be:af:cf:76:1a:43:9d:01:52:83:6d:1c:b3:20:
5c:e0:9f:66:02:1f:dd:d1:a5:5d:de:60:86:fa:85:94:dc:49:
2b:15:cc:59:7c:d2:f1:c4:cf:10:44:71:22:c8:d3:0e:bb:9a:
bb:08:1e:7e:89:bf:4e:7c:2c:66:fc:fc:2c:f0:10:f6:58:fd:
ed:5d:4e:12:8c:e9:bd:0c:65:c8:66:58:74:1e:41:dc:ff:41:
08:48:47:e6:dc:70:8a:69:69:c1:de:75:41:59:0d:2c:4c:c0:
45:b5:c2:c9:0c:b5:8e:25:bc:18:62:89:f6:70:1e:d4:7c:18:
e2:10:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:21:01 2026 by rpki-client