
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json)
Hash identifier: jaxsDWef62/qFB5cdc+ALpOJ3mVu8E2f3iFgFxqbrpU=
Subject key identifier: B4:67:43:1E:BD:D2:C6:F7:E7:15:5B:3F:60:BD:71:D5:A5:20:7A:D3
Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
Manifest number: 01ED
Signing time: Fri 25 Sep 2026 03:29:01 +0000
Manifest this update: Fri 25 Sep 2026 03:29:01 +0000
Manifest next update: Fri 02 Oct 2026 03:29:01 +0000
Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: d3sRXbb6hD7RO6VPMlR82G+Y9aXg7vTZqiA9qpnOArk=)
2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: 26WEtM895FnGR/kXovwY20hCbFpq6hJQTsJq8LOOA8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Validity
Not Before: Sep 25 03:29:01 2026 GMT
Not After : Oct 2 03:29:01 2026 GMT
Subject: CN=6ab5ea7d-ea64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:55:67:7d:68:b2:d2:95:7b:9d:2e:a8:2c:
55:dc:ed:dc:87:fd:1e:da:bd:f1:71:2e:8c:69:75:
6a:03:95:8f:03:6d:6a:66:0e:69:27:2d:71:63:eb:
b2:75:bf:d5:e3:ea:d2:d2:72:fd:39:cf:2d:95:c2:
7b:a5:90:67:3c:f4:58:3f:4f:77:86:05:ce:3b:34:
c7:0a:53:85:98:c6:c1:21:38:59:ef:71:78:74:72:
da:3d:39:7e:6e:03:f0:6d:27:df:04:95:e5:ed:5b:
18:cd:7a:01:b7:04:d8:a7:70:8a:26:e6:0d:85:62:
73:62:44:1d:0c:49:be:89:1b:d1:e0:e8:09:55:e5:
f9:52:7f:25:54:3e:f9:a2:f5:a8:97:39:ba:0c:b7:
75:2a:17:95:57:18:73:9c:ff:ec:46:c2:e2:8e:ed:
c5:b5:a7:a7:c4:9b:9c:7e:2b:f2:91:e9:6f:0b:3b:
dd:89:2c:9c:31:40:e6:25:38:72:bc:cd:34:b3:e9:
d5:ab:d6:52:1c:36:36:66:b6:93:4e:04:63:9e:a4:
cb:b5:13:15:03:52:aa:75:aa:8b:a3:3c:13:e4:12:
c8:b2:57:82:31:31:31:62:7c:d3:9e:e6:06:38:84:
d9:1c:d6:76:70:f9:be:32:4d:b2:e0:31:db:05:70:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:43:1E:BD:D2:C6:F7:E7:15:5B:3F:60:BD:71:D5:A5:20:7A:D3
X509v3 Authority Key Identifier:
keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:4f:ae:93:2e:e6:4a:90:54:2d:75:eb:41:a2:50:ff:56:08:
88:b2:4d:9c:78:f8:31:79:b0:52:2b:1a:b8:b1:ff:f8:11:1f:
de:a8:28:59:95:6c:c1:ca:24:87:e4:40:84:e0:e7:5b:7f:ed:
1d:8d:b7:89:f6:a3:bb:8f:0e:f5:32:22:c1:e3:88:e8:cc:a4:
f9:25:d7:85:08:27:10:e2:54:fc:99:7b:52:e1:d9:0b:db:27:
e0:f5:33:a2:6c:c9:fe:55:00:64:b7:1f:38:a4:18:54:5b:2e:
f9:c0:04:3f:30:d5:43:31:77:aa:bb:af:98:b9:07:a5:3c:60:
ab:17:55:9d:b8:10:16:da:28:cf:bf:16:45:25:ef:2b:0e:04:
8c:fa:ac:11:dc:e9:5a:48:ff:4b:68:d0:cc:3d:94:06:21:38:
47:77:4b:05:e8:c8:36:b2:ca:c0:df:2b:78:89:65:f3:32:fd:
c4:ab:17:c4:04:4d:22:82:58:7b:8f:6f:fb:d3:a3:16:41:3f:
cd:fa:71:34:39:ec:d6:b7:02:de:9c:6a:24:91:36:5f:9d:d8:
2d:ab:72:a6:ec:94:2d:fd:d7:a0:bf:26:ca:d1:5c:8f:e6:81:
7a:e2:8c:25:d4:2b:db:4e:26:15:7f:44:b9:41:11:7c:2e:70:
d8:2d:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:28:13 2026 by rpki-client