
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json)
Hash identifier: O+3on57g0VTUevGEce1asIT4vtefowfjLH70wgfk9eE=
Subject key identifier: E0:40:64:BD:5E:F6:2D:DA:73:C5:7B:AE:FE:39:70:51:FD:BF:DB:F6
Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
Manifest number: 014A
Signing time: Sat 17 Oct 2026 06:04:35 +0000
Manifest this update: Sat 17 Oct 2026 06:04:34 +0000
Manifest next update: Sat 24 Oct 2026 06:04:34 +0000
Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: zq5yzS2iGjnrx4agdVsYJw40Y43DAeo3oc7a3mPOx9g=)
2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: tvmpk8Ite7pSp5NKIoDYEAchnf/U0Ef+pNgJmhuXtZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 06:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Validity
Not Before: Oct 17 06:04:34 2026 GMT
Not After : Oct 24 06:04:34 2026 GMT
Subject: CN=6ad30ff3-67b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:e7:36:3e:1c:d0:b7:8d:81:4b:e6:e8:66:
69:6b:5e:7a:07:97:53:98:af:4f:66:a2:45:36:72:
fe:0d:68:60:53:ad:85:9f:c2:c6:39:8c:5b:bf:0d:
d4:35:a7:76:79:ea:65:32:19:14:5e:7b:9e:fa:00:
89:17:22:1f:01:70:6b:96:97:9b:cc:91:56:65:38:
9b:30:b0:1d:42:7d:7d:a3:60:fd:89:ae:82:29:21:
4c:1a:e6:d1:85:3e:44:7b:f5:94:e9:e5:40:f4:1d:
58:70:c5:3a:c4:23:bf:e3:99:06:64:41:74:a2:bc:
13:8a:1d:b8:46:1d:0d:90:0b:85:dd:1e:01:ea:39:
1f:eb:21:57:e5:30:f6:b1:2c:65:dc:84:13:47:19:
90:22:e7:9b:0f:f5:fc:d6:dc:69:77:90:c6:73:a4:
13:98:dc:ec:4c:c9:a3:7f:b7:f7:10:48:fd:62:bc:
3d:b6:fd:b0:63:e3:67:7a:cb:60:9b:2b:b8:da:25:
99:73:a7:a1:7c:6c:04:ac:20:b7:32:e3:15:c0:82:
ab:74:19:53:4e:87:15:0b:c5:16:7b:3b:d2:3d:9f:
8b:b1:0d:67:09:d7:c1:d7:9d:e8:69:c5:f0:4b:c7:
61:14:9a:eb:7f:64:50:bb:66:5d:64:d4:3f:d0:d8:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:40:64:BD:5E:F6:2D:DA:73:C5:7B:AE:FE:39:70:51:FD:BF:DB:F6
X509v3 Authority Key Identifier:
keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:4e:f8:95:19:e9:8c:52:fc:96:05:33:00:c9:88:d1:df:
ee:af:52:04:10:a6:c0:5b:c4:74:ea:9f:f3:00:1a:4c:39:20:
d3:69:da:20:a4:dd:ce:e9:12:2a:6a:b1:ed:43:41:4b:f8:aa:
2c:2a:cc:b4:4b:90:29:82:e6:8f:11:54:43:a8:9b:bd:34:ec:
42:f4:91:f0:81:62:0d:18:3c:1b:c7:23:37:12:bd:ef:c9:31:
1d:cf:46:1f:4c:98:0b:db:81:54:8a:56:f1:52:f2:f6:96:65:
e1:0f:06:43:90:f4:df:9c:7c:75:a2:a7:42:39:d0:7d:c6:11:
61:67:0c:b1:ff:34:4d:15:69:ad:1c:ac:49:e7:dc:fc:28:63:
b1:c9:c9:76:29:84:f3:c9:bb:e5:b5:89:ca:14:a5:5a:ed:35:
92:85:29:50:1d:e8:de:01:ca:51:88:0a:50:29:bd:92:58:a6:
5d:97:f9:7d:0e:42:a7:56:20:90:85:3d:a5:71:cc:15:b1:e9:
0f:2c:64:5f:da:1c:01:07:cf:61:80:65:f0:db:46:9d:84:bd:
d9:c4:3a:5a:ec:28:2e:24:75:2f:ca:f9:85:bd:57:0c:93:dc:
f9:64:a8:56:d5:7c:95:02:12:f0:dc:8d:48:2c:bb:c3:8c:2a:
90:2c:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:45:10 2026 by rpki-client