
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
File: yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft (raw, json)
Hash identifier: qFUEVj7ELiKxM1B2vluYrcyOSGpk2koffvnDeXpgr4c=
Subject key identifier: 82:0A:37:AB:22:B3:23:E9:69:8D:A8:E6:78:19:F2:8D:F5:49:8E:15
Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
Certificate issuer: /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Certificate serial: 02BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
Manifest number: 02B5
Signing time: Wed 07 Oct 2026 01:49:29 +0000
Manifest this update: Wed 07 Oct 2026 01:49:28 +0000
Manifest next update: Wed 14 Oct 2026 01:49:28 +0000
Files and hashes: 1: yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl (hash: /1/dJcmG1nktafGFlKYKKgveQHHhnveFjwmT3SrAWDQ=)
2: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (hash: 0zxYrdPrMBfjgPj6RJV7ZvcXItqtU0NYSlHoSwv7daw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Validity
Not Before: Oct 7 01:49:28 2026 GMT
Not After : Oct 14 01:49:28 2026 GMT
Subject: CN=6ac5a528-605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:b4:31:33:f7:80:af:a5:1f:e9:2c:ee:62:
1e:b6:b2:77:91:56:97:11:e8:16:84:88:3b:c9:48:
c7:c4:bb:f4:89:c8:4f:4d:a8:f0:c7:d0:cb:b6:31:
0c:00:f9:d6:19:98:d5:eb:44:b9:ba:57:b2:32:a3:
ad:88:34:51:0f:83:8e:48:21:48:f6:f3:44:3b:8a:
56:9a:41:ba:13:b3:07:d6:2f:e4:c2:aa:31:22:18:
98:59:9c:19:8d:6f:48:3c:0e:8e:28:ff:fa:b6:16:
40:55:2a:cd:06:66:f8:09:b2:01:dc:c5:d4:b8:38:
34:d6:26:cc:e5:62:41:af:ad:bd:2f:ec:d3:10:df:
4b:89:f1:64:49:65:9d:06:19:87:9f:31:7a:b2:3a:
1d:18:32:b2:7d:88:22:ea:cf:30:5b:16:2f:18:a8:
d9:1c:d8:a5:02:d0:f6:96:cc:5f:7a:fd:7e:87:f2:
43:fe:dd:75:8e:2f:f9:95:c5:95:ea:2c:d9:b5:36:
1d:49:64:c7:76:ea:69:34:6a:88:01:58:38:11:23:
24:2c:55:9c:d1:87:98:54:c7:4f:41:f9:cf:f3:5b:
56:8d:bd:91:6d:72:bd:c2:08:dd:87:ff:99:dd:d0:
d8:13:c4:11:19:28:b6:32:da:0f:b7:83:0e:0d:5f:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:37:AB:22:B3:23:E9:69:8D:A8:E6:78:19:F2:8D:F5:49:8E:15
X509v3 Authority Key Identifier:
keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ef:81:01:c3:28:ef:6a:9d:74:f4:d0:63:72:34:0b:e1:28:
fb:b5:d3:65:9d:68:74:34:6f:d9:ed:39:c4:52:85:36:d5:87:
90:a0:8a:c7:51:e2:fa:5d:94:4d:28:fe:f8:78:3a:21:94:37:
57:d8:06:a9:8f:86:70:75:e2:72:b7:e5:b9:4b:fa:00:9d:90:
6e:9a:02:42:84:6b:58:aa:83:fa:e5:b5:6d:88:2e:a2:64:32:
86:ca:01:fd:11:18:59:05:38:6b:3b:67:0b:ff:26:f9:e9:ca:
e0:56:72:4c:4a:7c:5f:1f:e0:db:7f:97:05:87:2d:eb:ab:78:
d9:68:9b:e5:9a:17:66:95:09:c5:52:fa:a9:16:64:69:68:28:
67:56:57:6a:45:06:79:26:f9:69:24:16:30:f3:cf:b9:6f:bd:
61:0c:46:5a:a9:c8:11:f4:35:9a:20:3a:3a:92:45:77:07:14:
da:a8:94:d5:9c:e4:d9:a9:03:0f:fa:bd:75:a8:c0:d7:bb:01:
7d:65:0f:08:e7:bb:38:ce:ef:92:8b:f1:4c:e4:e1:45:eb:76:
f2:76:31:51:b7:b6:b4:36:f8:c1:78:d9:b4:95:48:51:6a:b9:
2c:aa:25:20:88:84:fa:b2:3f:d5:6a:48:46:dc:e8:8a:c5:0d:
ca:61:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:00:18 2026 by rpki-client