
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File: Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier: y/Np4bZ1o8ofu+YgNpTnITjnpY2Dwz8sQUQCyHrmfVk=
Subject key identifier: 06:E8:94:12:CC:A2:C5:F2:3A:24:21:83:0B:DC:4D:FB:24:99:29:32
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer: /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number: 0288
Signing time: Mon 27 Jul 2026 03:13:50 +0000
Manifest this update: Mon 27 Jul 2026 03:13:50 +0000
Manifest next update: Mon 03 Aug 2026 03:13:50 +0000
Files and hashes: 1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: c01B77ApY7mAYYwnbQQnytY8Zs6//Vsp/ceJXt3e3UI=)
2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: IMnX87QNvHpbvo82n1RR69kUclsVgTYA0yTOvxNI1Gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Validity
Not Before: Jul 27 03:13:50 2026 GMT
Not After : Aug 3 03:13:50 2026 GMT
Subject: CN=6a66ccee-73d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:2f:fa:39:ef:c1:74:a5:8d:ea:fa:d2:8e:
1a:29:5b:19:4e:f9:80:b5:57:fd:45:19:28:2a:db:
b7:68:e5:08:df:d5:22:59:01:9f:38:89:ea:dd:5e:
32:4f:6a:2f:6a:53:f6:0c:ab:56:7f:a0:80:82:2a:
fe:5a:8b:3d:19:5c:06:fe:38:d3:49:2e:49:1c:2e:
e9:25:cc:30:fe:78:92:66:1c:ca:67:16:f6:d0:5c:
4a:b8:f0:85:1f:6b:b4:f0:26:37:5e:54:14:ec:6e:
95:f1:bc:fa:3a:e5:84:78:79:7c:be:03:f9:58:e6:
a1:97:45:24:44:3d:77:00:8e:e6:7d:85:43:ff:b5:
4c:ec:61:1a:cf:0e:bc:76:cc:5e:c7:25:9b:26:d6:
91:c3:2f:ab:12:4d:5b:76:07:41:74:4b:b3:fe:7f:
ba:5d:fa:26:5e:8a:b5:88:4c:bf:a7:ce:8c:30:8c:
f5:15:93:c1:41:f4:33:d1:92:79:86:d4:55:68:d5:
94:82:88:fb:ae:54:03:91:77:ef:78:5a:5a:81:67:
af:22:2c:eb:2c:29:37:a4:8b:86:f7:1d:57:8b:be:
0a:a1:06:59:0c:50:b6:c1:98:7b:97:9f:64:55:75:
b4:01:9d:36:f3:0c:6d:4c:aa:5a:2e:bd:02:51:5c:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:94:12:CC:A2:C5:F2:3A:24:21:83:0B:DC:4D:FB:24:99:29:32
X509v3 Authority Key Identifier:
keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e4:a5:62:1a:55:42:87:5e:48:9c:41:63:69:ec:56:5b:23:
c7:65:41:04:b5:8f:d6:c3:cd:61:78:47:a4:97:ce:94:b2:68:
f9:60:92:0b:e5:90:18:9f:7c:cc:34:79:86:e0:98:7b:ab:6b:
a8:4f:20:fe:d7:1c:56:89:1c:ad:a3:bf:06:5e:5d:43:ee:8b:
16:be:4f:2e:8c:e9:70:bf:1e:d4:ba:71:6b:e9:39:54:c0:99:
e8:bc:9f:31:ea:22:26:15:8f:f2:5d:b6:01:c9:76:ae:f1:ce:
f2:6d:7a:13:8e:c3:9c:a4:3e:95:96:b3:48:25:25:a6:68:e3:
48:af:85:02:1e:d5:50:8b:4f:5f:32:4a:f6:fd:89:ee:74:24:
17:19:e6:91:93:1b:94:b0:24:4e:ea:7d:9a:dd:75:19:4e:46:
03:c7:98:b1:c9:9e:05:12:b2:67:5f:cd:84:95:30:bb:2d:74:
8e:bc:d1:cc:6e:4d:5d:7e:2a:f7:5f:a5:ae:df:61:8f:a7:99:
b4:4f:3f:36:c1:6c:ab:e0:fc:ba:bf:58:d7:37:a8:27:f9:53:
f9:2c:6c:b8:2e:92:5f:2c:cd:21:31:44:a3:06:43:f4:c3:32:
74:4b:7b:60:82:a1:c0:a5:9f:f7:a2:04:3b:96:bf:b6:91:12:
01:1c:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:55:56 2026 by rpki-client