
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json)
Hash identifier: tRIdOO4qp4jk6NBlw+hddGO11LutYQQdChY0b1qjwEk=
Subject key identifier: CA:A2:C3:4D:5B:35:F1:E8:EA:98:B5:A9:83:9F:75:BD:28:46:16:00
Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB
Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
Certificate serial: 0849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
Manifest number: 0840
Signing time: Tue 18 Aug 2026 21:22:31 +0000
Manifest this update: Tue 18 Aug 2026 21:22:30 +0000
Manifest next update: Tue 25 Aug 2026 21:22:30 +0000
Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: hB6dSihwcPDGAxtgF6QJidjLeoA2AgDI1ZRxK3SJ/yQ=)
2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: //kyIlIYFX3+08S3h9a7dEmLAcY3BX1jLjRJO0SJN6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl
rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
Validity
Not Before: Aug 18 21:22:30 2026 GMT
Not After : Aug 25 21:22:30 2026 GMT
Subject: CN=6a84cd17-c712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:97:e6:ca:9b:e2:fa:c2:d7:27:18:e6:b7:
fb:7d:c0:f3:bf:cb:42:b7:16:f9:14:66:77:8b:53:
64:4e:ce:b2:e2:78:27:b7:6c:97:ed:f1:47:37:ea:
d6:52:ef:6f:de:66:8b:e6:cc:9f:b0:df:b5:4e:44:
e8:e7:94:6e:a9:31:09:5e:73:e9:5f:48:c2:22:e2:
d3:25:73:c2:32:c4:2b:b5:4b:39:75:06:d0:fc:33:
d3:ad:fd:c6:6c:17:0f:6e:b0:6c:f9:d9:64:b9:6e:
02:c7:ed:83:90:fc:5c:f4:88:d1:f3:66:1b:d2:53:
a5:44:d3:64:74:4b:d3:37:8c:5c:5a:b4:45:ee:3d:
3d:1d:01:8b:92:8a:cf:0e:af:39:a7:3d:d8:fd:13:
d7:03:68:d0:9f:80:c9:53:7d:3e:42:49:52:9f:75:
f4:d3:e2:da:91:ce:91:12:4e:0d:94:2c:27:49:52:
42:b8:82:f3:dd:29:24:48:d0:26:f5:22:b7:09:1b:
3a:7b:bc:98:fa:0d:ca:1b:ab:06:52:0d:d8:5c:ec:
7d:04:af:01:c6:74:5c:71:2c:c8:21:20:53:1d:d3:
2c:32:b6:cf:72:b5:f6:65:7d:5c:6f:0d:9b:04:28:
14:2c:e6:d6:5a:6f:05:46:a9:b0:77:43:b3:bc:16:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A2:C3:4D:5B:35:F1:E8:EA:98:B5:A9:83:9F:75:BD:28:46:16:00
X509v3 Authority Key Identifier:
keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:3c:9c:c6:6d:5e:4c:9a:e6:ac:87:8a:5a:84:5f:34:eb:20:
ee:2d:cd:a5:d5:9e:c8:ce:51:5f:ac:dd:df:7c:37:13:72:95:
8d:48:96:d5:b4:15:11:c2:ef:5a:5f:17:dd:63:62:8c:d6:61:
23:44:90:d6:83:25:20:da:8a:5c:9b:85:c4:32:ea:4d:50:50:
06:34:6d:6a:01:5a:db:8c:7c:8c:c2:df:5c:47:df:a5:c8:15:
96:df:16:e9:f0:9e:4d:0c:ae:a6:6f:1d:e2:52:33:8b:f5:c2:
18:60:67:62:5c:4b:86:6f:8c:44:78:18:e4:ef:07:5d:3b:08:
a4:73:b3:f0:bf:88:ec:06:cf:a1:b9:6c:55:40:d0:7e:60:55:
ef:c7:cf:31:e8:f4:99:b5:d2:f5:92:a3:04:16:df:b4:57:19:
2a:b8:f5:e2:87:19:51:a3:f4:7a:fd:b5:2f:e5:df:14:ee:ff:
66:23:89:1f:f5:82:a0:89:2f:8e:18:ec:ee:eb:2e:11:66:db:
1b:34:a5:7c:34:1c:71:c5:c8:1d:e6:d0:e4:1e:fb:13:14:11:
1a:ba:b6:fe:cf:2e:49:91:c5:60:f5:e9:d7:72:20:57:33:16:
52:98:2f:c0:3e:b4:bb:8b:fa:b3:c5:d1:03:ea:b4:71:17:d4:
26:0f:6d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:08 2026 by rpki-client