
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
File: YpYWXDbflgVmse01DqfefzOLOpk.mft (raw, json)
Hash identifier: mFHKIo17Bj1qjNg+KIQGn+g8r0X4WKTZ5441WEsDG/w=
Subject key identifier: AD:C4:E4:A0:2C:B2:E3:00:9F:51:AE:4B:15:B3:21:83:DB:32:74:B9
Authority key identifier: 62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99
Certificate issuer: /CN=A91456CD/serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
Manifest number: 5A
Signing time: Mon 05 Oct 2026 08:38:37 +0000
Manifest this update: Mon 05 Oct 2026 08:38:36 +0000
Manifest next update: Mon 12 Oct 2026 08:38:36 +0000
Files and hashes: 1: YpYWXDbflgVmse01DqfefzOLOpk.crl (hash: ZK5DZxXUKXLd4F334FeOWx98Jp/epq7ZNgtvOxrMH3U=)
2: E70D393E3E1211F1B8544D87AE833773.roa (hash: Z710cYgmQWNlK2XY5ROXVcJ51fvGqWY2ndR1PnZkmtQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl
rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91456CD, serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99
Validity
Not Before: Oct 5 08:38:36 2026 GMT
Not After : Oct 12 08:38:36 2026 GMT
Subject: CN=6ac3620d-0b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:4a:7e:bf:75:00:73:15:08:41:87:fb:5f:
d4:5e:b9:d1:ac:e1:aa:6d:75:20:f5:31:a8:44:0c:
cd:3b:b1:16:81:24:4d:00:dd:55:03:14:94:61:64:
2d:a2:f2:5e:87:6a:c6:d6:fa:3f:88:09:31:af:77:
05:04:c6:be:66:4f:43:89:c6:46:65:ac:32:4d:0c:
89:6d:d3:84:fc:b2:f4:54:34:2a:65:ea:b1:fb:6c:
b2:d0:7e:49:ae:5e:05:87:ec:ad:18:16:da:fa:1c:
86:5b:35:74:4d:8d:ef:1c:6c:16:51:61:08:fa:93:
30:a0:9b:25:f1:9f:17:1c:ab:25:21:6b:da:03:bc:
5a:ec:60:df:aa:3b:e5:01:ca:fb:65:72:c1:c4:37:
1f:6d:4c:22:75:a1:f4:d3:b2:19:96:00:ee:45:ea:
05:e8:af:7b:f0:bb:c7:9a:e8:24:0b:66:0c:c8:c7:
31:2d:26:c0:28:e1:69:22:f0:75:96:56:51:c0:c8:
d6:bd:92:d0:6c:18:ee:23:97:6d:1d:17:d5:24:73:
4c:83:c1:01:ea:81:d1:f6:34:36:2f:74:47:b9:5d:
a3:65:96:51:2c:52:f8:70:11:a6:cc:1b:01:c8:92:
69:de:82:9b:66:ba:c6:e9:7c:25:6c:c5:2b:96:58:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C4:E4:A0:2C:B2:E3:00:9F:51:AE:4B:15:B3:21:83:DB:32:74:B9
X509v3 Authority Key Identifier:
keyid:62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ca:bc:f7:41:68:35:c1:62:55:2c:88:c8:df:03:c2:cf:02:
9f:b8:25:40:bc:43:1c:f6:e8:04:03:e5:4e:5b:8b:9a:ed:3b:
f5:7c:98:af:28:6a:0e:ad:d0:bf:a7:4e:46:e4:46:cf:8c:85:
1a:2a:6c:05:51:8d:a4:7e:d5:c3:2e:26:f8:92:99:d7:28:0c:
0a:27:99:56:c6:33:8f:a3:58:9b:4a:7c:15:be:58:3d:93:c1:
77:d6:16:ab:49:a6:2c:b1:d7:7a:a0:ae:fb:d3:aa:15:29:02:
0e:1a:59:86:ca:91:47:f3:12:c7:38:8e:a4:49:07:7b:ad:6b:
a6:9f:c7:00:2a:ce:3a:21:57:e5:f2:fb:2f:be:c7:6b:fe:73:
3c:eb:8d:ce:9a:15:2d:f9:b4:6f:aa:21:f0:58:dd:55:f8:09:
e1:8c:55:37:27:ce:17:29:46:17:80:6d:47:68:39:7b:ec:f9:
0a:1b:87:06:08:a2:01:70:30:37:33:a0:ab:42:7b:0a:f5:f4:
3e:66:32:d1:92:57:5e:49:c0:93:ab:d9:74:17:fb:10:99:49:
62:8d:a0:49:3d:14:16:12:d4:78:ca:c1:36:9a:85:03:5d:53:
0f:63:c6:41:f6:82:f9:d7:08:7b:3c:73:8e:85:73:94:93:53:
ac:ba:2d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:56:05 2026 by rpki-client