
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
File: YwwCddFRnD7kuqftn9t0UvPhDEs.mft (raw, json)
Hash identifier: U5l6K3VE9c5P9vlTit878MosbGVp9EyqktBLiJjLg5Q=
Subject key identifier: 50:9E:A5:4E:C1:1C:C0:3A:08:0E:93:AF:84:42:D6:8A:9F:6C:EE:B6
Authority key identifier: 63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B
Certificate issuer: /CN=A91F69AC/serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
Manifest number: 04
Signing time: Thu 23 Jul 2026 11:20:43 +0000
Manifest this update: Thu 23 Jul 2026 11:20:43 +0000
Manifest next update: Thu 30 Jul 2026 11:20:43 +0000
Files and hashes: 1: YwwCddFRnD7kuqftn9t0UvPhDEs.crl (hash: qk+W66vH052EaAN4qTbiCOjjmZaw0+uTuhSFexesoGA=)
2: 32701246850511F19B0544DB68A30FBC.roa (hash: lRJz8Jm02V4m/7gp5At9XI7RM1aeGiqZoYJHPf5CB2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl
rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69AC, serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
Validity
Not Before: Jul 23 11:20:43 2026 GMT
Not After : Jul 30 11:20:43 2026 GMT
Subject: CN=6a61f90b-956f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:61:82:67:e3:1d:d6:ea:c1:b3:9c:76:20:
ab:49:f6:7b:0a:49:20:85:f0:81:a7:c8:91:cb:d6:
89:fa:17:c4:43:f4:e5:f8:e3:6d:d9:59:c1:bf:8a:
df:fa:8f:8e:ac:d1:f5:4d:ff:9b:3c:4e:1e:ba:38:
0d:34:69:20:dc:a1:e1:75:07:05:a4:b3:ec:4a:f2:
9b:ca:d4:b0:4c:45:29:23:64:ef:55:0f:f0:21:54:
7b:90:b8:10:86:86:3b:cb:2b:0e:5c:dd:0b:60:6f:
88:67:69:f4:fe:f5:a8:aa:4f:57:66:f8:f0:cb:28:
11:e6:ef:6e:c1:79:b6:6d:6b:f7:51:1f:8f:81:c1:
b6:ef:6e:4d:61:61:9f:ba:49:06:f2:8b:35:3e:b8:
30:d0:23:ef:a3:01:96:5d:af:cf:2b:2a:c7:cc:7f:
99:b3:9d:29:14:e8:ff:7b:08:6b:f2:6a:3e:82:77:
28:8b:59:b9:e7:e0:85:b8:ba:58:b4:25:7e:4b:36:
0e:a0:d9:a9:d4:af:b2:eb:fb:ec:96:f5:d8:62:45:
4d:59:05:8f:ed:bf:00:ae:0b:05:08:f3:33:76:79:
64:fc:35:73:f6:cb:7b:a6:06:05:fe:6e:a5:cd:a0:
31:48:ce:ec:96:b8:0a:40:7a:5c:95:63:8e:77:88:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:A5:4E:C1:1C:C0:3A:08:0E:93:AF:84:42:D6:8A:9F:6C:EE:B6
X509v3 Authority Key Identifier:
keyid:63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:a0:3b:74:46:bd:c9:24:73:b8:39:d6:71:91:dd:22:7f:52:
a3:a5:a6:dd:8d:d0:f1:34:48:69:23:50:11:51:b1:2b:e1:85:
58:38:68:50:6d:65:f6:d7:cd:67:86:76:5a:d7:63:2c:a7:ed:
84:e6:2a:8b:b2:1b:50:06:4d:d3:46:92:60:c7:9e:01:54:05:
98:c3:a8:1b:42:17:d3:4b:f4:ca:3a:88:3a:89:76:e9:09:d3:
71:0b:35:a5:97:4a:80:67:66:cc:e7:96:2d:61:8d:35:65:24:
33:08:c5:f2:4e:23:1f:ab:25:6e:a0:c2:c0:42:8d:61:57:fd:
7b:8b:cb:c9:a5:96:1b:23:48:6a:0c:49:38:34:e0:4f:76:c2:
99:14:7f:6b:2b:ae:5b:ea:27:34:af:45:95:32:7c:05:6c:ab:
1c:fa:d4:44:2a:9e:b2:26:00:c5:05:bc:88:3a:fb:59:7a:a2:
96:40:13:c7:f6:96:f8:25:61:ac:d2:f1:b8:ee:42:b8:47:c0:
af:d6:60:8a:ba:25:a7:0c:21:dc:2d:ae:0a:8a:e9:cc:fd:0d:
44:64:b2:2a:94:fc:5f:a3:db:73:47:b2:c7:db:47:28:71:27:
d0:6e:89:eb:f0:90:24:cd:21:03:5c:f1:48:ff:f9:8c:f0:46:
c0:41:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:29 2026 by rpki-client