
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File: yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier: TuuSHv+K1M3IE7QVSb3x5rjURroXa6YzwXWtUf4acRg=
Subject key identifier: 5F:1E:4E:CF:5A:A8:7F:64:EE:05:05:73:5A:65:35:8D:34:88:5E:BA
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number: 01AA
Signing time: Fri 16 Oct 2026 21:20:05 +0000
Manifest this update: Fri 16 Oct 2026 21:20:04 +0000
Manifest next update: Fri 23 Oct 2026 21:20:04 +0000
Files and hashes: 1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: 1h+i5eddElyROZP0mIuFNvHA5Vc8nt+AzNsNTJfRqSM=)
2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: OPdh+VvdJ8rvY5Hnhte8AjyqGibUOoE1fm+ikF6YCWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 21:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Validity
Not Before: Oct 16 21:20:04 2026 GMT
Not After : Oct 23 21:20:04 2026 GMT
Subject: CN=6ad29505-5590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:e7:4d:0f:d0:84:ac:0c:19:1f:4e:e2:97:
cc:74:89:43:a6:3c:4a:a1:c7:0c:d2:b5:99:7c:09:
37:b2:e6:4a:55:db:cb:fd:72:e7:67:a5:d6:e2:5e:
bb:86:d5:41:09:27:e8:d7:1f:f2:eb:e9:9e:15:9b:
8c:55:03:06:64:91:d3:ba:24:14:8b:28:91:8a:98:
6f:4a:a7:9c:fb:6d:ea:ee:89:02:35:c3:a1:8d:32:
12:92:50:ae:eb:01:15:d1:b5:c2:a7:3f:2c:72:8b:
70:20:8a:a7:3a:6b:77:a7:fc:8e:65:2a:6f:95:fa:
dd:46:21:05:2b:17:74:84:9a:c5:ac:d1:c4:29:26:
85:80:6b:10:1d:b5:71:17:e9:b0:c3:63:ca:8d:fa:
5b:7a:dd:ea:70:ee:e7:99:c2:3b:7b:4a:f2:e1:06:
1b:3d:48:75:14:89:6e:ec:19:12:36:f4:27:67:cf:
46:7d:d9:9e:26:b7:95:97:b2:6d:01:db:65:9e:1b:
ef:90:ce:37:fb:ca:2e:df:a1:0d:de:62:8d:36:83:
51:b1:0c:8a:05:9d:35:fd:6c:4b:56:74:05:0e:c2:
e4:d6:41:8d:9d:8d:7b:7f:a9:95:b0:a1:42:07:99:
8f:70:e3:b4:ac:e2:ee:f3:5b:97:20:83:0b:d7:1b:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:4E:CF:5A:A8:7F:64:EE:05:05:73:5A:65:35:8D:34:88:5E:BA
X509v3 Authority Key Identifier:
keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:ab:ea:d7:ea:af:b6:49:29:32:7a:f1:a8:af:5d:5d:2d:78:
5b:ca:4a:42:f0:91:e7:6a:5a:88:2a:eb:7d:7a:61:74:f4:63:
46:0a:54:03:8a:a5:16:5f:f4:d2:78:f5:05:5d:d4:fe:76:ac:
82:86:10:4c:45:6f:ae:1b:e9:45:ae:c8:f3:d1:a6:fa:fc:c3:
ac:d1:a4:04:f8:89:56:c5:17:d3:f3:b3:ff:14:bf:7c:93:f6:
63:d2:5e:38:23:55:d1:be:72:99:a6:42:ed:62:fa:09:38:0f:
1e:88:b9:06:26:50:4b:43:67:e3:94:3c:1f:49:90:3c:84:5c:
a9:18:70:6f:5e:72:6b:c0:44:7c:03:84:61:bc:94:e1:3c:42:
68:c9:6c:3c:ae:07:20:d1:c1:12:a5:a4:d4:bf:b9:c5:24:97:
36:c8:2a:8e:9d:f4:28:a6:b7:de:06:2c:6b:25:dc:2c:fd:31:
8b:32:8c:44:3f:a9:9d:5f:04:07:a2:88:9d:75:19:c0:61:53:
37:1e:57:ed:8d:b2:57:3c:64:7b:9e:f1:d8:1a:9f:44:ec:d5:
83:8a:b8:8d:d1:b4:e5:de:f5:86:42:33:a6:56:81:16:85:ee:
0f:ae:1b:fe:45:fb:f1:5c:18:81:bc:42:7e:71:d8:bc:4e:13:
1d:b3:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:16:28 2026 by rpki-client