
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json)
Hash identifier: dg4OIX1d5Vay39T77TKTtn4hG461DgYPf56YDzDczM8=
Subject key identifier: 75:5E:3F:7E:18:54:E0:BD:5F:BF:B0:B8:98:6D:23:16:1F:17:3D:DE
Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Certificate serial: 0C1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
Manifest number: 0C10
Signing time: Wed 22 Jul 2026 19:08:53 +0000
Manifest this update: Wed 22 Jul 2026 19:08:52 +0000
Manifest next update: Wed 29 Jul 2026 19:08:52 +0000
Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: QoG/LgzZCCuKy3P7D2ZWm6qlhDqLerx9CXsRQbQReaI=)
2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: 9vfMSvXUgFAWrMwGngY+4Eec7WyIf24UFnNt67nkKsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3102 (0xc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Validity
Not Before: Jul 22 19:08:52 2026 GMT
Not After : Jul 29 19:08:52 2026 GMT
Subject: CN=6a611544-a7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:74:94:78:d1:e7:5e:f8:95:35:11:9f:4f:
43:8a:a0:2f:41:f6:3b:bf:12:b9:d7:18:d1:65:d0:
41:a5:80:c2:37:97:b9:35:5b:b9:94:9c:70:56:fb:
4d:5d:2b:ee:c9:75:95:a1:29:ed:e1:8e:c2:2e:ec:
b9:45:e7:e7:e1:45:ff:d3:5c:d3:19:97:4a:5b:f6:
ab:21:ba:b1:40:0c:22:c8:94:b6:60:f5:42:21:bd:
e2:95:87:6f:d7:15:6e:aa:2d:86:b6:a4:59:11:52:
90:6a:87:49:c5:7d:04:71:e3:e6:ad:81:9e:48:4c:
1f:45:c5:60:92:1b:01:32:40:c0:79:48:37:a8:7b:
0c:98:ab:f3:f4:6a:ff:c9:d4:e8:b1:71:aa:2a:36:
ce:6b:e8:ec:62:68:8e:f2:16:8f:27:a6:df:4e:3d:
b6:9d:0c:ab:d5:17:7d:cf:76:17:93:32:47:06:f2:
74:d6:12:81:67:4f:d8:06:98:6c:52:3b:26:c5:8a:
14:0d:9d:4e:d0:00:1b:70:de:4c:ad:44:38:a7:44:
cd:83:98:01:f5:16:c5:e7:4e:f9:9b:d5:15:0d:ef:
5d:31:b8:81:3c:03:f1:83:51:b3:4e:6f:0e:ac:ce:
b0:42:62:96:74:c9:aa:11:2b:8f:03:d4:18:95:7f:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5E:3F:7E:18:54:E0:BD:5F:BF:B0:B8:98:6D:23:16:1F:17:3D:DE
X509v3 Authority Key Identifier:
keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:17:ee:e7:d5:6c:0c:21:99:d2:88:50:0d:0c:44:da:41:04:
dd:1d:9b:60:a0:6a:8e:77:f0:e9:47:b4:32:2b:09:51:de:e0:
f0:3f:61:09:8d:51:02:a1:55:9f:52:9d:c2:d4:f6:41:33:9b:
a5:41:3a:70:e6:c5:9b:80:f4:72:f5:3d:20:49:ee:d4:25:18:
7d:20:26:fe:62:7d:f0:ea:72:3f:17:f1:a9:ef:6a:43:02:c9:
64:bd:6f:6f:4d:25:0b:45:d9:5e:b6:9d:12:3d:38:d6:75:ae:
57:ba:d7:3f:c9:1e:e3:9f:db:28:42:86:52:61:5c:99:84:cc:
98:9a:90:08:8f:38:6a:57:a3:91:d9:79:8a:9d:8e:84:cc:47:
a3:c7:92:37:c6:96:c9:dd:7c:9c:73:91:0b:40:64:5d:17:1e:
84:73:1a:54:63:60:3a:64:85:79:7e:1a:f3:f3:2a:63:3f:17:
e6:2e:1b:2a:21:f9:af:61:77:7a:fa:4e:e2:83:3e:3a:3e:5c:
a7:ea:b1:23:39:2f:56:9e:35:b1:af:f9:22:e5:73:87:90:b5:
06:8a:0c:05:bd:68:06:53:5e:47:b2:fa:7b:6f:97:b7:61:5e:
69:08:71:76:53:c5:00:d8:e0:a6:21:cd:7c:13:bb:43:65:76:
f6:02:06:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:04:37 2026 by rpki-client