
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json)
Hash identifier: bxwF8sPKIQZFWMkk3yDA8mrfZYgY8uzYoHnkFhp2vWU=
Subject key identifier: 9D:EB:27:22:DC:4C:59:5E:9E:1E:BB:8E:F3:30:D2:8D:9A:27:9D:91
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 1161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
Manifest number: 1146
Signing time: Thu 20 Aug 2026 17:13:23 +0000
Manifest this update: Thu 20 Aug 2026 17:13:23 +0000
Manifest next update: Thu 27 Aug 2026 17:13:23 +0000
Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: 8q5TpyVN8eflHpWiAksY7WpzFqDnP9gQnI3E/gpRorU=)
2: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: aScypq58ma32Blk4gXAn5hRCMA++RlRKUglRyBdAIIU=)
3: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: MInSGZWk/+V+/O784VPQkOPEvkikcYw1hh5xAfaMy+Y=)
4: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: QNd+7yoJE7XGdb3l9stbVIXGPJdYrSjK5lDsTdFfmX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4449 (0x1161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: Aug 20 17:13:23 2026 GMT
Not After : Aug 27 17:13:23 2026 GMT
Subject: CN=6a8735b3-9af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:ec:5d:8c:d1:5d:88:70:19:17:6e:63:ca:
74:f1:bd:73:5b:48:24:05:0f:97:45:50:e2:c7:80:
82:2c:b9:c4:09:b8:8f:64:92:dc:53:5b:89:a7:99:
7e:3a:f2:65:21:ac:52:80:d0:e3:f4:8c:0c:19:e0:
95:70:56:c5:cf:2c:8b:a2:71:c8:40:1e:9d:72:08:
26:c3:f0:e6:ad:3c:c9:a2:e1:41:7c:4d:28:3b:c3:
0d:ef:0e:82:6f:21:24:17:76:8f:99:7c:f9:80:4c:
cb:49:90:f2:de:6a:63:50:d2:4e:d7:1d:75:d5:53:
26:61:ef:12:1b:3c:08:f9:f5:e6:4d:47:44:90:78:
cb:63:91:98:54:57:41:a0:e0:27:c5:e0:0f:f2:8e:
37:ad:3e:68:bf:96:c4:36:75:ed:46:96:21:1f:29:
a6:2d:bf:5f:15:bb:28:25:f7:b1:76:32:87:ea:0f:
08:12:de:f8:98:b2:f9:cc:eb:26:eb:6d:90:5c:2c:
20:97:85:c0:a8:9d:de:f9:69:e1:c2:4f:de:2c:ee:
ef:25:7b:5e:8a:34:8b:97:cc:01:d8:da:9d:64:49:
b7:61:1e:78:f2:90:42:1e:b2:f9:83:82:c0:10:43:
88:c0:68:45:46:08:af:f6:13:10:26:3e:19:87:34:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EB:27:22:DC:4C:59:5E:9E:1E:BB:8E:F3:30:D2:8D:9A:27:9D:91
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:8b:eb:6e:c5:70:ee:e6:4d:d0:a9:0b:13:45:05:0e:85:8a:
79:98:ca:e2:91:1d:5e:13:77:b1:a8:71:72:38:21:95:c0:ac:
b1:d3:15:78:2f:4a:25:39:91:8b:08:09:6d:a6:35:ae:f9:fd:
2b:4c:8b:b1:58:d0:27:3e:f4:b1:03:93:ca:3a:aa:04:88:9a:
e4:d4:99:6b:4d:31:76:3b:6a:e9:44:5d:70:b9:ef:04:4d:5e:
f2:b0:56:19:09:27:89:dd:9d:c1:21:22:a9:f2:84:05:d3:17:
21:c6:64:66:10:0b:0d:b2:bc:8d:69:e5:72:02:c9:0a:d8:4a:
ea:3b:93:fb:4d:af:82:56:00:12:ad:4d:13:7f:43:9b:3b:83:
4f:1a:9f:9b:a3:cd:56:a5:f5:14:e9:d9:9d:b3:46:a0:73:1f:
26:72:ec:ec:ce:16:b0:42:90:75:1d:6d:28:66:66:5e:ec:7f:
58:42:e6:76:dc:c4:66:29:a5:fd:65:ef:0d:7e:09:8b:7e:2d:
c7:fa:5a:14:01:61:2d:00:27:22:42:21:67:95:24:de:27:9c:
c4:3f:4b:3e:90:18:3f:55:21:6f:10:df:6c:d5:3d:16:b6:30:
3d:7d:b3:97:a2:db:3a:6d:69:fb:de:7d:e2:60:1d:95:66:70:
52:2f:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:56:43 2026 by rpki-client