
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
File: yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json)
Hash identifier: M5QFNcLoxv2maRjXjOzcs3i6FZBDaUhbwnolovef3Tk=
Subject key identifier: 7B:E0:36:DE:65:B5:47:6E:1C:9C:47:F9:1A:9E:B7:51:66:77:11:D6
Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
Manifest number: 01CB
Signing time: Sun 15 Nov 2026 04:00:39 +0000
Manifest this update: Sun 15 Nov 2026 04:00:39 +0000
Manifest next update: Sun 22 Nov 2026 04:00:39 +0000
Files and hashes: 1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: fig7CKH1xCwV86DUsUJHT3ocbNKeSN1i+4UqjhmPnRQ=)
2: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: SY3cJmeJRYwxQTdV8LuINvKyBM5cYU9gdA5scwGtw/k=)
3: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: wyT3A7piAuRFJYSmj03a1CgN5dYY1alX8ULeMn9nACs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6FF, serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Validity
Not Before: Nov 15 04:00:39 2026 GMT
Not After : Nov 22 04:00:39 2026 GMT
Subject: CN=6af92e67-c881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:dd:84:32:a6:d1:20:fc:78:14:fc:33:5c:
59:59:34:9d:b5:c2:8c:61:e1:f9:2c:3c:c3:26:1b:
4d:91:4d:ca:15:a1:98:d8:17:d3:b0:28:8e:e9:27:
ce:da:5e:da:f9:ea:14:df:a8:36:58:8f:57:94:00:
48:68:c0:0f:e4:5e:fc:f2:74:d5:7c:5c:a2:37:3e:
e1:c7:fb:6e:af:d0:56:f6:15:79:30:7d:9e:b1:94:
38:80:e4:20:d5:d7:4f:b0:a1:51:31:3b:15:74:1d:
b1:b9:ea:ca:29:f8:56:5e:67:e0:c4:03:df:a2:a8:
29:6e:71:28:c7:f9:40:31:28:dd:81:8b:96:d8:21:
d8:93:ee:80:82:51:2f:88:13:25:25:60:d0:f5:94:
9b:40:4d:89:79:8c:22:77:9a:53:db:a5:4d:06:83:
57:48:54:80:db:a4:b5:e2:fc:0d:c4:0f:6a:c7:f5:
d3:9c:30:0a:c2:82:cf:8f:d9:d5:60:72:da:f5:ab:
2d:9f:ec:aa:8f:92:5f:28:79:dc:d6:a4:09:ed:0f:
dd:e6:fa:17:55:6f:7a:f5:e3:00:f0:05:d5:55:4f:
af:c7:16:fa:b9:6f:75:aa:9b:d0:26:5b:ae:c8:c2:
77:46:78:1b:aa:ba:8b:11:db:63:b7:79:16:c3:bd:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E0:36:DE:65:B5:47:6E:1C:9C:47:F9:1A:9E:B7:51:66:77:11:D6
X509v3 Authority Key Identifier:
keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:79:0b:68:b6:ae:da:f6:ff:05:d6:59:76:41:8d:33:50:52:
61:bc:5d:3b:06:fb:4c:34:b0:10:b8:49:bd:96:c7:2f:1e:e2:
91:bd:b5:a6:59:80:fe:16:f7:ce:0a:bf:82:84:09:9a:5e:3a:
94:f1:40:3c:dc:e0:a9:66:47:66:95:e9:ab:e1:05:49:f4:af:
50:43:40:54:f2:c2:5b:1f:ec:33:da:8a:ab:7c:f3:9f:62:6e:
76:e9:46:f8:df:c2:dd:1e:94:f8:15:cf:f2:47:13:44:9e:51:
41:b7:31:5b:52:17:0a:d0:b1:02:63:4a:ed:7f:52:ce:fc:ee:
07:97:44:8b:d5:33:9b:cf:30:36:80:f2:96:38:07:86:d8:d9:
69:b6:16:be:75:fd:79:f8:28:95:8b:58:3a:be:61:31:d8:e6:
6b:97:4c:3a:29:6f:90:06:57:31:17:e4:d3:7c:60:02:02:44:
f8:4b:ae:9f:f3:19:f0:98:27:40:c3:9c:9c:36:d7:15:ba:cb:
10:82:18:d8:8d:45:cd:c8:98:af:3d:46:88:57:b2:0f:20:b2:
a5:80:34:09:5d:f4:91:4f:45:c1:68:37:a6:a5:b6:6b:db:20:
38:68:82:34:f4:ab:b4:bd:29:23:5d:64:7c:ed:86:c6:37:bb:
03:ff:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:41:09 2026 by rpki-client