
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
File: yAlz0WzMyeGME6aIAz3E0PDmHEo.mft (raw, json)
Hash identifier: apj4VLiKiKb1TWcNVf+e3TUHA0oKPHmgJI/J742IfE0=
Subject key identifier: 1A:CA:7E:5C:96:F1:E8:30:0E:48:52:DF:64:01:7A:18:6E:8F:A1:F1
Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
Manifest number: F5
Signing time: Sat 03 Oct 2026 07:02:10 +0000
Manifest this update: Sat 03 Oct 2026 07:02:10 +0000
Manifest next update: Sat 10 Oct 2026 07:02:10 +0000
Files and hashes: 1: yAlz0WzMyeGME6aIAz3E0PDmHEo.crl (hash: 7xzQ8JRlcH+9zB0IshT6kE2xnVCpI9hxzPxALJgwf9Y=)
2: BFEE74284D9811F0930F6465C4F9AE02.roa (hash: 40BbeTseOH9cOE/V8iDSe91ozItNcwOvKSn/Wv2JFTU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Validity
Not Before: Oct 3 07:02:10 2026 GMT
Not After : Oct 10 07:02:10 2026 GMT
Subject: CN=6ac0a872-efb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:64:20:dd:f3:5e:15:76:ba:de:40:2a:cc:
e5:0b:a6:f9:d4:51:23:c7:9e:26:98:b2:94:5a:d5:
2a:ed:3d:ea:0d:9f:80:1e:3a:92:67:10:05:55:45:
76:8f:cc:83:59:21:29:bb:3c:85:a3:ce:46:b8:17:
3f:90:0c:f3:4a:66:a2:75:f0:72:6f:c1:a9:92:6f:
76:b9:53:45:3d:82:b7:fb:95:8c:24:9c:42:05:bc:
7c:f3:3d:6f:c7:fb:05:d5:df:c3:d9:6d:9b:8a:04:
08:26:cb:e0:1f:5a:ef:fa:f3:74:8d:37:ff:e8:54:
fc:1d:30:6a:b5:f7:32:f5:f8:e3:ef:8f:47:00:3a:
db:bc:2c:02:4d:0b:7d:07:13:ba:bd:ee:e7:52:70:
dd:86:cf:c6:13:29:6f:a8:a0:5e:d6:c9:83:ca:aa:
e7:27:63:6e:e4:c3:63:88:ec:a6:69:44:ec:a0:3a:
0d:84:97:d1:59:60:a5:6a:71:a3:b1:85:bc:36:df:
c3:58:d2:69:e9:58:4a:d6:3d:eb:4f:a5:dd:78:ee:
03:97:6e:a1:99:f5:b6:7e:72:02:f4:d4:7c:83:78:
bf:4b:b8:a6:6d:93:67:73:18:e8:61:e7:b2:46:d9:
d3:99:31:97:a3:ad:83:3b:28:d5:70:39:23:20:1a:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CA:7E:5C:96:F1:E8:30:0E:48:52:DF:64:01:7A:18:6E:8F:A1:F1
X509v3 Authority Key Identifier:
keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0f:82:b3:1f:14:08:05:ba:09:37:be:d2:ea:71:b0:94:fc:
36:4a:9c:03:1c:3c:8d:da:75:4d:bb:df:bd:d7:45:4c:72:19:
3b:97:13:09:9e:fc:d5:a8:cc:cb:5f:93:bb:9d:52:cf:9e:e4:
e0:e0:b8:14:cf:d8:cb:b9:c5:8c:6b:de:9e:00:2c:db:25:b1:
54:e4:9c:cd:6c:a5:01:b7:d7:da:c8:b5:19:c6:4b:8e:19:70:
98:18:e8:dd:eb:28:d3:61:9f:1a:a5:01:7d:b2:76:3c:d5:97:
ea:35:79:b4:d8:fc:e8:65:67:5f:7e:ca:e5:b1:e1:36:e0:ca:
ac:eb:9e:63:99:83:9a:c7:62:5b:f2:4b:d4:e7:db:c0:ee:54:
a8:24:ba:50:b9:cc:72:40:62:cd:33:5c:16:db:cc:fb:9a:6f:
f1:c6:14:d5:75:e5:bb:f7:83:ef:28:e9:5b:44:da:db:5f:ee:
0d:c3:26:c2:33:b1:17:82:67:17:22:84:41:99:0d:17:b1:a3:
6d:44:67:bd:cd:16:36:b6:7e:0e:7f:ec:20:28:38:ff:28:8d:
ab:68:f6:ff:ea:04:d2:8c:c4:ba:dc:80:6f:ef:35:1f:db:4f:
7b:a4:af:e1:22:e5:f8:80:0c:50:99:63:1b:e0:31:3d:de:71:
d8:13:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:01 2026 by rpki-client