
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json)
Hash identifier: 3i9IL9OnIWd8oTBABssKJGeN+Mxc0SLG/zd3q6jEVCA=
Subject key identifier: 96:68:D3:80:79:BF:4A:3A:A5:3F:82:A0:AE:E7:93:C3:5D:41:60:CB
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial: 062B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
Manifest number: 0622
Signing time: Sat 10 Oct 2026 22:52:44 +0000
Manifest this update: Sat 10 Oct 2026 22:52:43 +0000
Manifest next update: Sat 17 Oct 2026 22:52:43 +0000
Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: r8ccaH7bd7l3rCmVJxrbuFaifsDTMtCFx04pH1u1Xgk=)
2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: hhhDivZPfpYVc/TnYUA+tCpDp/wVvW/IZEwMGB5mPu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Validity
Not Before: Oct 10 22:52:43 2026 GMT
Not After : Oct 17 22:52:43 2026 GMT
Subject: CN=6acac1bc-f290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:6b:56:1b:ca:c7:47:c5:2d:2a:e0:e8:e0:
a1:4e:5b:8b:2c:98:b5:97:38:b2:ce:a2:33:82:ee:
41:f2:10:14:65:9a:59:f1:c4:8a:27:9d:c6:95:48:
0d:ae:ca:39:41:d5:84:e6:85:78:73:f5:6b:ba:a1:
5d:95:99:19:ce:00:a4:19:fd:8c:a7:f7:c4:24:2c:
46:01:45:bb:45:70:16:9c:2f:aa:16:45:48:24:0d:
49:ff:d0:96:b1:31:a5:71:13:33:f2:10:78:d7:db:
0c:1a:51:a4:56:6f:7f:62:75:6c:36:4e:2c:b1:db:
aa:48:05:61:5a:f9:e9:1a:cd:99:6b:03:0a:8a:20:
26:b9:8a:fb:90:b9:d2:77:3c:0e:5b:f5:9c:f6:36:
bd:a2:eb:f3:f3:13:ab:9c:c5:a7:63:d4:2a:0c:8b:
c7:40:68:32:42:4d:ad:9a:08:42:18:e9:3d:0a:c9:
5a:2a:31:09:5b:e4:e7:e9:38:8f:5c:4e:07:09:9c:
f7:6e:69:54:8a:a6:23:5f:6a:48:b8:9f:e9:9b:85:
29:bc:f2:f3:6a:73:b5:79:c2:bd:0b:16:de:bb:41:
02:fd:74:0a:9a:e7:8f:90:1c:08:49:83:b8:96:2b:
b3:89:84:4f:32:32:d6:49:ec:07:c9:83:e8:03:d2:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:D3:80:79:BF:4A:3A:A5:3F:82:A0:AE:E7:93:C3:5D:41:60:CB
X509v3 Authority Key Identifier:
keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8b:29:96:e2:b0:5b:b6:96:3d:8d:cf:2f:f8:a4:8c:ca:13:
d9:a3:e8:cc:08:7b:68:50:c0:cd:6a:43:4d:16:5c:ca:9c:ed:
ad:b4:ac:35:ee:64:ce:8b:62:67:6e:a6:3b:88:8a:44:cf:60:
b2:25:a8:ea:2d:2b:76:1b:4d:dc:21:65:5d:38:65:b2:be:e9:
d1:4d:1d:84:8a:53:4d:d7:2c:ef:89:13:18:34:b8:19:fe:b4:
fd:c2:6b:60:3b:23:d2:1b:86:52:a6:3f:1e:c7:f7:72:6a:b0:
75:55:41:91:8b:9e:63:c9:a4:34:50:aa:d8:6f:50:b7:b3:69:
4d:01:1e:6b:2c:de:9e:27:c5:95:8f:eb:78:7a:d5:50:d4:a4:
dc:3a:82:d1:ac:78:44:a9:b5:27:a7:76:6d:ec:8c:78:c1:bb:
b1:cd:f4:c7:b9:8d:6d:76:e2:92:f7:d3:11:e2:14:02:92:98:
6f:38:c0:01:e6:0a:c4:ea:61:bf:e5:e0:40:b7:84:6d:57:af:
f7:58:df:30:8a:44:d3:85:99:a4:e9:f8:79:c6:f0:15:74:55:
13:df:7e:31:e3:46:f7:f2:80:38:a6:bb:b3:39:ce:b7:75:0f:
11:1f:ec:7b:4a:56:1f:52:8d:fe:6b:0a:6f:33:df:c0:f5:86:
0c:db:52:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:33:10 2026 by rpki-client