
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier: EBitZeXUh1MYhsiI0LQOcXlteKscdX5qQmW6ybiN43E=
Subject key identifier: 92:23:84:04:EA:95:CE:44:5D:29:4C:81:B4:E8:41:63:F3:B5:D2:08
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 0504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number: 04FD
Signing time: Fri 20 Mar 2026 23:13:13 +0000
Manifest this update: Fri 20 Mar 2026 23:13:13 +0000
Manifest next update: Fri 27 Mar 2026 23:13:13 +0000
Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: 5gPFohKfKlKa5sYp8HvIHrijpUulWA704etSa6Kx98E=)
2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: FCX1sDJ2lcFZeK81Yi1zKSTIFWnL4W2ESjtnUZrEFH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 23:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Validity
Not Before: Mar 20 23:13:13 2026 GMT
Not After : Mar 27 23:13:13 2026 GMT
Subject: CN=69bdd489-579d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:c2:60:b6:a2:38:b9:21:37:f3:92:ed:55:
7b:07:50:38:8f:31:16:e5:51:24:95:0c:66:5a:35:
4c:28:e7:02:07:6c:7a:4e:67:c6:03:15:1b:08:f7:
9a:0b:59:38:27:50:db:6b:c3:35:c5:e1:9e:2a:1f:
ad:27:10:e5:f6:16:09:aa:c3:60:f4:95:51:1b:dc:
74:47:57:d4:e0:cb:0b:ba:f3:3b:30:32:91:43:27:
63:86:7e:b7:39:fb:2d:32:d6:0b:29:0d:ae:7f:3a:
e9:f4:11:5a:4b:63:06:75:87:78:57:c2:f6:fa:fb:
73:50:f9:85:d2:29:16:ad:92:57:49:5d:f5:42:4e:
4e:6e:ad:d7:35:c7:ba:7a:07:cc:07:22:00:f5:9a:
3a:09:56:9a:b0:97:a2:72:7d:70:c9:9f:3a:eb:50:
3f:75:08:12:be:44:2a:28:52:20:27:ec:78:3f:c7:
0d:21:e8:9b:3c:0e:c2:1b:fa:95:82:37:e1:ce:3d:
f4:c1:a3:f7:7b:95:56:2f:df:bc:66:ea:4e:7e:ea:
38:95:a6:48:7b:a0:8e:91:b4:3e:82:28:66:3f:ed:
cb:01:e1:78:37:99:51:7e:e9:b2:2f:51:21:8f:c6:
a9:16:b0:76:ed:9e:cc:62:80:96:bf:a8:98:c1:df:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:84:04:EA:95:CE:44:5D:29:4C:81:B4:E8:41:63:F3:B5:D2:08
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1b:87:98:ba:05:7f:2a:4e:c1:a1:44:00:dc:2a:1f:c0:60:
04:de:ee:ca:bb:0a:9a:a6:92:7a:94:a3:bc:e3:c7:28:76:78:
1e:78:c7:3a:6b:42:42:fe:9c:dd:4c:50:75:3b:b4:d2:82:1d:
11:e1:33:ab:63:76:3d:9c:d3:46:65:f6:8f:f2:27:36:c7:1f:
67:4a:3e:07:d7:bf:85:f0:cd:39:c6:d6:73:01:39:5c:f0:12:
a6:1f:86:32:32:72:01:43:b5:66:b7:de:d1:21:31:57:a6:76:
40:af:d1:a2:c8:49:f0:6b:a2:5b:97:3e:66:b4:dd:81:b6:df:
6b:93:00:a7:c7:64:cd:94:96:59:98:61:c4:e1:7e:93:bb:68:
71:9a:e9:46:c0:29:26:71:fe:33:06:93:d9:df:be:2a:b5:0f:
eb:12:24:8b:a5:b8:f2:e6:3a:28:53:43:bb:56:dd:17:ba:7b:
7f:ea:27:c7:f7:ac:0f:b9:a5:74:41:d3:87:01:ab:7a:d6:e2:
e3:8f:4f:79:7b:18:44:05:d2:31:b3:a7:2b:57:5c:fb:c6:6b:
13:7b:cf:49:e8:5a:42:6c:6f:50:93:cf:6e:7e:f0:d0:57:4c:
3f:d8:1a:04:c4:a7:14:b7:da:9f:a0:e2:ac:27:a5:fa:7a:ca:
a9:2b:64:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 04:59:23 2026 by rpki-client