
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json)
Hash identifier: kvBA2/uqHrrdU61xjBNZPf4sdR0rVz2H6oEqAx4eegA=
Subject key identifier: 4B:93:1E:2E:C3:E4:E2:4F:0B:CA:63:E1:53:33:CD:67:BE:66:31:01
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial: 0635
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
Manifest number: 062B
Signing time: Mon 26 Oct 2026 22:40:40 +0000
Manifest this update: Mon 26 Oct 2026 22:40:39 +0000
Manifest next update: Mon 02 Nov 2026 22:40:39 +0000
Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: 2Wsqi6YNlwYaFg7cFfWt5wnExhD3hiRVcD8BeUEp6uk=)
2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: hhhDivZPfpYVc/TnYUA+tCpDp/wVvW/IZEwMGB5mPu8=)
3: BC1F804CCCF611F182B45AE5FA65CEF9.roa (hash: O+siAOAZQB/bYuNnUYz6iKtDKruZ4svnYH9aiihw9gE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Validity
Not Before: Oct 26 22:40:39 2026 GMT
Not After : Nov 2 22:40:39 2026 GMT
Subject: CN=6adfd6e7-1f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:17:f5:ea:d5:32:60:5b:0c:5f:23:9a:da:
1f:8d:f3:f7:0d:7c:c2:05:90:0d:18:61:de:29:33:
29:02:4f:a1:64:c7:a1:43:b4:44:ca:3a:85:90:7c:
46:af:d9:9f:5d:d1:39:28:05:a6:14:a8:f2:61:55:
64:3f:96:2f:59:d2:3b:e4:f9:f9:f9:1c:d3:b3:e4:
a6:32:5a:13:9d:ae:b1:3e:d7:d7:e2:65:49:98:67:
fe:77:f1:5a:97:47:2d:f4:f4:03:e6:21:fd:4b:2a:
19:53:64:2e:fe:99:80:35:70:2a:e8:b6:ad:b4:11:
a7:d5:33:3d:a3:2f:45:3f:7a:08:fc:e0:31:3d:38:
43:0d:35:1f:69:9d:6c:cd:5c:f8:a7:e0:12:11:48:
50:ae:37:38:c2:9b:fe:25:de:f8:78:80:2e:3b:50:
34:1b:4d:91:70:22:1f:35:41:f6:09:c1:f9:8a:e2:
45:81:5d:00:e4:23:77:05:aa:d1:8d:5e:4e:67:ec:
e8:85:d8:71:5f:a0:82:69:34:1e:c3:ce:52:ec:03:
48:3b:fa:41:cd:88:2b:fb:fc:bd:0a:4b:aa:0a:f0:
55:4b:1b:ff:ca:49:d4:bf:3e:7c:de:8b:08:57:e9:
71:f1:a2:ac:75:55:60:8e:ee:9c:e0:e5:9e:d0:ae:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:1E:2E:C3:E4:E2:4F:0B:CA:63:E1:53:33:CD:67:BE:66:31:01
X509v3 Authority Key Identifier:
keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f3:b6:8d:f6:02:3d:7c:09:81:e6:07:ee:85:80:b9:41:ca:
68:84:05:a3:6c:70:a6:49:47:0d:6b:02:66:6c:9d:8d:c5:4a:
44:ce:9d:06:f5:a0:12:f4:8f:6f:13:1a:11:b8:d1:f2:f3:d9:
58:85:55:5d:03:99:57:c4:52:5a:12:63:cc:a5:d6:9b:af:fa:
ba:99:4f:64:32:74:6e:b9:41:7c:a6:7b:28:47:a6:69:1f:53:
57:ad:31:df:e0:72:c9:ef:20:07:63:65:6f:14:f8:64:f4:08:
cc:95:9b:96:d0:6f:38:a8:df:d8:d0:55:c9:0c:20:86:1f:3c:
2b:0c:db:f0:88:e8:dc:00:ec:a4:4a:dd:53:57:06:9c:0d:f1:
36:6b:2f:cb:58:6b:04:7d:cf:ce:26:82:fa:40:ab:1e:b3:11:
da:23:c3:c0:38:70:70:37:d9:78:cb:a8:63:be:b1:4f:f5:52:
92:42:93:04:55:9c:71:50:e6:a7:ce:60:9c:c0:05:fb:72:85:
b5:31:e6:89:92:98:e1:ed:23:09:2a:69:cb:fc:73:9d:ff:27:
83:84:8e:c0:a3:6a:00:34:7f:37:7a:ea:0b:49:b4:e3:d7:66:
71:26:be:bd:c9:97:a1:01:3d:e3:3d:40:71:d5:ec:9e:69:5a:
c0:e2:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:31:58 2026 by rpki-client