
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
File: YBqj_Udwv8aa8kBvLoDtCOfca0M.mft (raw, json)
Hash identifier: ASLtGp2P6bi3luO2pLbSro/dF8jZz4tHxrIO0poj0E0=
Subject key identifier: DA:3E:FC:6C:6F:F7:6D:83:2C:65:76:E8:F9:C4:0F:43:66:BA:04:D2
Authority key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43
Certificate issuer: /CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
Manifest number: 01AC
Signing time: Wed 07 Oct 2026 04:33:29 +0000
Manifest this update: Wed 07 Oct 2026 04:33:28 +0000
Manifest next update: Wed 14 Oct 2026 04:33:28 +0000
Files and hashes: 1: YBqj_Udwv8aa8kBvLoDtCOfca0M.crl (hash: ZINmqsiM2bhxNFTpnQuNAmj1Agk9bpYqsu1M/ASaA8o=)
2: CC8E710C347011EF9F04CE66C4F9AE02.roa (hash: X1FdTZreaYzPMLMjzCOoJBeITWWNKAQhsJsRuSe7wy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl
rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954E2, serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43
Validity
Not Before: Oct 7 04:33:28 2026 GMT
Not After : Oct 14 04:33:28 2026 GMT
Subject: CN=6ac5cb99-dbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:55:f3:64:4c:fd:93:6d:51:42:6b:5b:06:
25:bb:0f:ac:0b:54:fa:5c:5f:6c:57:d4:a5:f5:14:
18:02:42:a6:97:5d:8b:e0:cd:be:22:35:1b:e2:dd:
d5:4d:e8:42:89:fe:77:ed:b5:80:30:62:62:c4:69:
2e:82:f6:83:6a:ca:b1:fc:ef:95:fa:91:86:7b:0e:
b9:c7:e6:6a:70:24:00:65:78:ca:8b:cb:12:0a:30:
13:68:e6:da:45:9b:9f:b9:39:f0:a3:99:54:28:22:
8b:34:f1:c5:90:ef:d5:f5:55:46:a8:9c:39:7f:5b:
40:62:ee:11:8d:1d:b6:a0:1e:c6:94:e6:1d:af:1c:
17:06:9e:cf:7f:92:de:4d:c0:a0:d4:11:f8:44:ff:
70:e7:04:ef:f9:0e:9f:d0:9f:cc:7a:db:19:ad:0a:
ec:35:b2:c9:f5:2c:fe:45:dc:c7:f1:39:83:17:52:
98:ea:6c:2f:f1:b4:9c:42:52:45:2e:af:8c:e9:2e:
6d:91:9d:32:35:6b:20:02:db:7c:59:45:19:1e:60:
2c:09:13:11:f2:95:ad:05:93:73:ef:fd:7c:42:c1:
a1:60:19:85:b7:19:93:94:55:37:51:93:87:44:ce:
a1:a2:c3:23:a9:15:d1:b6:61:0e:ca:39:08:46:c6:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3E:FC:6C:6F:F7:6D:83:2C:65:76:E8:F9:C4:0F:43:66:BA:04:D2
X509v3 Authority Key Identifier:
keyid:60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f4:91:82:f9:64:ea:99:a8:ef:07:94:c8:63:55:e0:b5:de:
71:8c:eb:d8:ff:27:90:cd:06:18:d9:ce:3c:0c:99:27:f2:83:
3d:ae:9f:6f:eb:29:88:c5:f8:04:6c:db:42:92:8c:8f:63:5f:
23:a7:f6:30:7d:e2:e6:bf:4a:bc:ca:99:f8:53:f1:a9:03:ac:
ad:7a:8f:4b:d4:19:eb:d0:e8:b6:42:7b:01:db:1e:c6:83:4a:
f3:85:68:c6:92:fc:1e:24:61:70:9c:86:9b:78:93:15:ce:26:
4c:0c:35:4d:f9:42:43:ec:7c:c3:90:b8:61:d1:ba:15:e0:0d:
58:e4:a9:b7:01:de:1b:33:1a:42:8e:76:06:02:66:51:e9:c7:
a8:9d:15:0c:cd:f6:c3:3f:79:96:ab:a9:e1:87:8c:11:77:7d:
d7:05:37:55:cb:47:a0:a6:09:1c:27:9e:bc:c0:ce:3f:7f:e4:
c6:d7:cd:21:8f:b8:b9:95:f8:b7:04:9d:7a:3c:da:49:b6:5b:
0c:53:81:a0:97:63:b0:22:db:f6:04:48:ff:1c:03:aa:20:41:
29:0f:5a:0b:59:11:19:81:7c:35:01:f1:84:9d:10:5b:d0:bb:
46:1f:6d:fd:98:95:9c:70:0d:d1:52:08:ef:fc:71:b1:36:ca:
4f:09:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:07:35 2026 by rpki-client