
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft (raw, json)
Hash identifier: AP4MePplazQDJR7tmN1qaN3FHdhVydKvMaPDRZTIJWg=
Subject key identifier: 94:56:F2:E7:2F:7F:5B:33:24:96:6C:50:24:B3:7D:B0:9D:43:54:66
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial: 059A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
Manifest number: 056B
Signing time: Wed 02 Sep 2026 23:19:24 +0000
Manifest this update: Wed 02 Sep 2026 23:19:23 +0000
Manifest next update: Wed 09 Sep 2026 23:19:23 +0000
Files and hashes: 1: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl (hash: vzI3hLwE4mzkQu47noVZlU2Uv6PKDjNXtz1CO3cKECQ=)
2: 351AC73E45AE11ECB857890EC4F9AE02.roa (hash: 1fMszEVclnRMOM/POK57IbuTqKPaZ6i1HdvWDw7RSC4=)
3: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (hash: xY/esRTHmVcSEnmni9qKfYB8APe7aNUaqGzW5UYshQs=)
4: FBB1514E370111F1AC489D14BF833773.roa (hash: ZkDSUGhIzcmjSgjRJZ9cZlXr5/YHk19HP0IIMCiijuA=)
5: FB03729A370111F1AC489D14BF833773.roa (hash: AU9dHXjHqTNme6QysdUZa4PCsHy+4a87mRqErQXJ6iA=)
6: 89631CA886F211F1B8F66003A7EE528E.roa (hash: T9tejqo/viZ84AtMFih/yCchWtoB4a3/6YsZxvnzzj4=)
7: 9896BA2EB6DE11EC8DB17172C4F9AE02.roa (hash: dG9p093s1Ue0rrA4RBzIOjl2As439gOH8sz6VM6eiUQ=)
8: FC94057A370111F1AC489D14BF833773.roa (hash: JZJalDSQr/IoFea9NxLBWN3ZOZ/DgJ84ZBHO9Nd0bsM=)
9: 35A2418C45AE11ECB857890EC4F9AE02.roa (hash: 1S4BYpNOabN3d/LnYoJIPgaMIRT82AJo33zkA94dJ9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 23:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Validity
Not Before: Sep 2 23:19:23 2026 GMT
Not After : Sep 9 23:19:23 2026 GMT
Subject: CN=6a98aefb-807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:64:9b:f4:3a:79:ff:d5:de:92:a3:65:be:
d0:a9:fb:3e:92:cc:26:93:50:d4:d0:34:87:60:58:
34:41:70:2c:89:61:1a:f1:39:50:0d:e7:3d:9b:5d:
29:62:69:4e:3a:19:39:20:33:47:2e:c1:c2:c6:2d:
c5:19:74:04:db:af:bf:5b:a8:f6:d9:85:61:7e:f2:
3e:52:f5:4f:63:70:fe:8d:9d:5e:c8:6c:a1:c2:ee:
7b:c1:6f:95:40:0a:bc:47:56:c6:54:4a:17:9f:e4:
f3:f4:0b:a0:47:df:7a:6d:c9:9f:e8:5f:b6:5c:81:
14:b3:92:ba:47:c1:79:65:78:54:85:7d:f4:bf:90:
e8:7a:2b:33:78:b4:52:45:ee:a3:93:6b:52:3c:ba:
9a:b0:44:e0:72:4b:01:fc:ba:2d:84:39:ef:2d:92:
8e:54:dd:54:28:90:9c:22:d0:17:5f:33:1c:81:0a:
bc:81:a6:12:c6:56:b5:bf:81:3e:a0:01:03:3e:82:
a2:85:bb:d9:b6:ca:86:06:70:6b:ab:22:e6:eb:b6:
2e:7a:ae:78:77:a9:98:c7:45:08:02:ca:72:c4:b3:
f0:7a:9f:a3:09:04:9b:04:7a:13:38:27:e5:81:d2:
54:5d:29:4d:76:7b:51:0a:14:e9:29:54:48:7a:d1:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:F2:E7:2F:7F:5B:33:24:96:6C:50:24:B3:7D:B0:9D:43:54:66
X509v3 Authority Key Identifier:
keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:dc:41:9a:11:d2:0d:2e:e1:c4:b3:dc:b0:eb:33:54:f7:cb:
ca:38:15:e1:cd:dc:ad:c8:32:11:ef:b0:7f:65:66:39:2b:c3:
6a:0f:f9:85:fc:99:a6:e3:68:92:a1:ae:8c:d7:f0:9c:53:23:
87:6a:58:98:74:0d:2d:74:57:6c:c8:03:60:02:81:6c:0d:96:
d5:52:6b:f7:f2:6a:c8:3b:2f:ef:95:ec:1a:b6:2c:52:ee:11:
95:08:5c:96:00:5a:a7:29:1b:97:93:80:73:80:b7:90:0c:e8:
99:ff:da:37:d3:d5:6d:26:94:16:e3:ff:71:6c:11:0a:61:8f:
f8:17:e1:7f:b0:1d:21:69:e7:43:96:5a:90:2b:a7:dc:87:c1:
51:94:f3:54:dd:e5:35:d5:ec:6f:b6:e0:98:1f:95:e1:1b:23:
ae:10:6f:c2:f2:a9:f8:ae:19:6e:cc:2c:24:05:3d:23:23:f7:
80:c8:89:7a:e0:78:ae:02:a9:c7:b2:47:69:55:ad:0f:42:33:
db:f7:25:0a:54:ba:6e:0e:c9:96:52:a8:8f:a3:0a:13:ab:51:
d5:fd:3c:44:62:82:2d:3e:3d:13:86:3c:95:fe:20:3d:78:82:
02:ea:d5:dd:bf:ab:c7:46:f8:b7:2f:28:4b:9d:31:ef:38:57:
b9:e5:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 13:43:30 2026 by rpki-client