
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json)
Hash identifier: lh/vQkTw7vBDQy8u7s036ae35CVP/5N+zQwCu1jMK2s=
Subject key identifier: 89:B9:C6:44:EE:27:B3:3B:4D:AA:DC:7B:07:F4:95:FE:9A:D8:AF:82
Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
Manifest number: 0160
Signing time: Wed 19 Aug 2026 05:35:05 +0000
Manifest this update: Wed 19 Aug 2026 05:35:04 +0000
Manifest next update: Wed 26 Aug 2026 05:35:04 +0000
Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: vpSxFQnWY5ZAY3mVZSzQFOV9Vlx+Gl9eC6uu2zaIOVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Validity
Not Before: Aug 19 05:35:04 2026 GMT
Not After : Aug 26 05:35:04 2026 GMT
Subject: CN=6a854089-c2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:a5:21:e6:37:96:3c:4f:8c:5e:25:f3:c0:
d4:7c:58:2a:6c:07:b4:90:26:4d:6f:54:7b:ca:63:
a1:fa:bc:be:fd:bb:32:72:44:61:d8:1b:bf:21:44:
3e:2c:6b:f8:0f:9c:da:f3:22:d6:47:c2:b2:55:5a:
12:b4:47:f9:b4:b2:31:89:33:3f:8f:41:6b:5c:0a:
b9:a5:db:8b:e2:18:5f:7e:2d:44:89:f2:9a:9c:6c:
38:77:e8:36:0f:bf:d1:dc:ab:f1:42:ef:29:6b:fb:
12:b5:63:ec:3c:22:59:b3:20:5d:2c:9f:54:97:67:
93:83:99:3f:e4:b3:83:70:3a:86:bf:b4:46:5c:7b:
36:6d:73:61:a6:e8:bf:0d:41:87:0f:7e:30:a4:5b:
eb:43:85:30:0f:0f:a4:98:53:4b:2d:81:60:a1:cb:
54:1c:44:2f:17:ec:02:c6:01:cc:d9:d2:cf:f6:28:
a7:e6:8d:85:17:85:99:7d:cf:87:7b:b2:6c:62:4a:
2a:b8:a5:3d:0b:5d:6e:ac:51:7c:43:4a:15:be:51:
51:39:a2:be:f4:17:8a:a8:1c:18:ed:a2:6a:d9:a4:
ab:c8:ed:c7:66:67:c5:84:fc:4b:41:bc:5f:7d:f2:
0f:a9:85:7a:7c:b7:02:d5:33:b5:97:91:40:53:4f:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B9:C6:44:EE:27:B3:3B:4D:AA:DC:7B:07:F4:95:FE:9A:D8:AF:82
X509v3 Authority Key Identifier:
keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ae:53:f7:80:3f:94:a2:22:eb:3b:29:41:2f:ca:1f:23:90:
da:05:e9:99:e6:88:f3:e6:ab:32:d4:b1:5d:fe:d9:6b:67:5e:
79:6f:a8:56:61:6a:26:be:c5:dd:08:23:66:d4:0d:76:7f:15:
e7:89:b4:3f:b6:8f:cb:a6:dc:c8:a0:85:6d:23:04:da:e1:09:
56:3f:6f:e9:23:03:cc:5c:e7:46:40:c3:94:16:cb:91:40:1b:
c9:f1:6e:f3:06:4e:f2:a2:e5:98:f5:94:5c:8e:50:2c:06:c0:
b3:82:95:e1:c1:61:d6:b1:8a:23:7f:3a:66:08:d2:17:b0:ca:
b6:98:0f:b8:6a:1c:9a:06:e7:9b:87:a9:61:5a:e2:e3:7b:a7:
52:09:96:c0:d8:ba:1a:15:38:e4:2a:58:fa:43:a9:d5:b9:e0:
46:bc:6f:cb:17:f4:77:f4:78:5b:e8:ed:cf:9d:85:d4:d5:fd:
f3:37:63:a6:3f:c4:d5:3b:9f:11:12:6b:8f:60:60:5a:8b:de:
46:de:a4:3e:b6:4b:a4:33:40:9a:82:60:e7:85:15:84:f9:c5:
5f:f6:20:df:34:4b:60:16:0b:78:78:27:bd:c5:77:45:a6:03:
f6:a8:dc:74:c7:16:71:b5:b5:6b:23:3b:c9:e2:b7:2c:43:af:
21:bc:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:57 2026 by rpki-client