
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json)
Hash identifier: U56gb/TXCH3pcT7bF/j0IG1cpt01T9XuMDVTPio7R28=
Subject key identifier: 73:27:DE:90:9A:32:D8:D0:F5:C0:0A:83:81:99:68:E4:94:F9:23:85
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 03B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
Manifest number: 0385
Signing time: Sun 25 Oct 2026 00:51:04 +0000
Manifest this update: Sun 25 Oct 2026 00:51:04 +0000
Manifest next update: Sun 01 Nov 2026 00:51:04 +0000
Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: rWH4o3OS2QfoGOqtJ/1FKf+MtnBcEY3/5mF+2713xyE=)
2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: PPilQKcKXmCzfDra94ptz+UOBe/ruKL5vBBrgys75yQ=)
3: 69046BD0ECFE11F0B05C9076386F56BC.roa (hash: YCe2AE1AYEPbcU1s9LwUlVk97WjIwXee65C9XOQSVi0=)
4: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: UazZSGRsaobkFh+uwdDtJ065Ep6bEbys8yH2m9dsJpw=)
5: 35AB985C68B511F18E116D7B7F47A888.roa (hash: zJzm+IxndwR1rSvg7Wy91Pwrmnj3T3uEe3l4l9/HMCw=)
6: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: U6gY9KKT7NSCpx8jpV/iJKW5bvGforRTQeZvJLFkBWs=)
7: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ayI2v9zEaoadhkrRa+ZcLsyQwGLPommiSdSXuXbqNDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Oct 25 00:51:04 2026 GMT
Not After : Nov 1 00:51:04 2026 GMT
Subject: CN=6add5278-cc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:13:be:49:45:b4:6b:3d:b6:f2:90:f0:50:
d0:40:6a:67:21:6d:c6:1b:00:0e:38:fa:39:90:a7:
c4:be:86:f7:c0:e1:27:13:44:49:b0:d6:09:dc:fa:
3e:48:d8:6d:d1:7b:92:6e:bc:4d:61:0d:94:4f:8d:
06:5d:0e:04:fb:c2:ea:f2:48:25:09:63:90:08:9c:
3b:2c:91:4a:63:b9:77:94:8d:8d:2c:bf:3b:4a:eb:
71:46:b2:d0:c3:8e:09:23:bc:e8:eb:0e:f3:15:a1:
aa:cd:22:a4:5b:8e:04:0d:6b:ac:da:b0:c8:e0:48:
3e:05:0d:c3:a4:08:e9:9c:54:36:22:64:84:28:2e:
21:a4:15:3e:bc:33:24:4a:1c:14:df:21:5f:08:91:
32:39:2a:5d:f6:57:1c:be:e1:22:66:a4:2f:36:32:
ed:84:09:86:35:dd:81:e3:0d:30:a7:e0:9a:75:7a:
a5:4a:6a:cd:b2:51:de:9f:6a:16:75:f1:dd:6c:e6:
80:cc:36:7f:df:d8:fc:79:c6:87:91:60:37:39:2c:
3a:85:2a:83:8e:b7:31:cf:56:1a:ee:1f:e5:f0:3e:
39:6b:28:fa:dd:b0:d9:12:ed:40:2f:9a:c4:6b:25:
9f:70:d8:66:a3:a1:db:3c:42:33:e7:23:08:4b:1f:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:DE:90:9A:32:D8:D0:F5:C0:0A:83:81:99:68:E4:94:F9:23:85
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:e9:78:cf:ce:54:3f:e4:0a:f7:7a:63:9b:65:3b:1c:55:
83:a4:90:5a:8c:fa:df:eb:e9:e7:09:73:97:ee:6e:64:7f:88:
f0:5c:51:61:4a:bb:a3:06:37:ef:36:87:7e:d9:d3:b3:56:8a:
b5:a6:47:6b:8d:28:6f:c6:c6:8a:ea:4d:4b:ea:1d:48:78:72:
24:19:83:b1:7b:e4:c7:07:ad:6f:5a:61:13:a1:7b:87:ee:ed:
95:65:d4:47:78:e5:af:1c:5a:89:a2:32:b7:33:06:8a:00:2a:
64:2b:75:71:47:e0:8c:ff:a6:cd:e1:2a:c0:08:cf:dd:df:65:
bc:34:fc:25:f2:20:3c:84:fd:73:84:84:fb:33:80:d5:bc:db:
8c:b8:84:9c:db:1c:cc:67:8a:fa:f2:91:16:db:19:c6:da:4a:
42:f0:51:80:5e:a3:91:fa:dc:a3:9b:93:0f:40:00:c7:d8:c4:
8a:d8:31:f5:c2:93:c5:32:46:58:28:3a:ad:69:61:80:47:bd:
05:a8:12:30:7b:cf:c4:e3:e6:98:02:c7:3d:e1:0c:99:7f:2b:
fe:af:1f:54:3e:02:b6:4f:6e:33:ab:db:03:9f:c4:51:be:81:
ad:79:0a:36:59:1c:23:48:7c:aa:82:f4:84:7d:b0:01:d7:fa:
aa:86:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:59:44 2026 by rpki-client