
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json)
Hash identifier: dLVI90ICGSRhID/OPzMqaLcQVsFMaxXQdWyTFhJQs34=
Subject key identifier: AC:B0:37:48:34:87:22:9E:9D:5A:6E:32:24:2F:15:90:BC:7C:EB:3A
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
Manifest number: 0259
Signing time: Sat 17 Oct 2026 02:54:17 +0000
Manifest this update: Sat 17 Oct 2026 02:54:17 +0000
Manifest next update: Sat 24 Oct 2026 02:54:17 +0000
Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: pM+BGRsh5Ug88JcmvC8xdNA3Rz0HXLIw0xBvd8LBisM=)
2: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=)
3: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=)
4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 02:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Oct 17 02:54:17 2026 GMT
Not After : Oct 24 02:54:17 2026 GMT
Subject: CN=6ad2e359-6f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:9f:f9:d0:8e:3e:c4:31:82:76:09:60:cf:
5c:db:c5:5e:43:84:2c:8f:c3:d2:2b:de:c0:ed:22:
d5:c5:fd:e9:48:d9:23:22:62:16:22:eb:67:4b:68:
0e:bd:64:11:f3:67:7e:4f:22:f1:57:6d:9d:39:3d:
63:93:72:8b:6c:6f:e5:51:bf:b9:f0:e6:d8:fe:0f:
cb:ca:37:3a:d5:d9:67:40:ab:65:d0:1d:01:5e:68:
d7:88:31:10:a0:aa:45:91:e7:25:d3:24:3b:d6:09:
e8:d4:1a:f8:7f:0c:5a:59:24:49:59:55:ce:81:81:
a6:01:e8:4c:06:7d:c4:1f:6f:08:a7:cf:7b:a8:d2:
a2:63:58:98:04:28:36:70:c2:4d:a9:53:0e:ba:34:
85:5e:da:45:35:1f:3f:22:f6:25:11:d7:3c:15:dc:
fe:bf:21:99:ad:f6:f4:f5:35:f7:0d:e4:4e:90:ba:
3f:58:c3:ac:45:10:f8:c6:2b:81:fa:8f:e3:4b:4c:
ff:6b:9c:3d:a2:c4:d0:6d:bd:92:4f:e3:15:03:c4:
4f:cb:96:16:2e:7f:ed:c5:56:71:56:8b:4e:0c:12:
f9:0e:68:4a:89:8d:42:d1:f8:7d:82:87:42:c4:b8:
f0:b6:bd:b6:04:2c:f9:e4:fa:0b:a7:55:a2:1d:44:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B0:37:48:34:87:22:9E:9D:5A:6E:32:24:2F:15:90:BC:7C:EB:3A
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:64:c0:29:75:d4:10:7c:e6:c6:49:ee:43:df:06:5a:26:80:
6b:ae:ed:e6:29:94:00:a0:85:ad:10:09:c6:b3:20:e3:f0:52:
73:12:a6:b0:15:20:1e:68:04:26:c2:37:45:38:d9:c2:c5:ae:
4b:88:92:47:30:6b:29:54:0c:a2:e8:82:91:64:b3:75:f0:1b:
1e:b9:b9:21:be:5d:66:0c:00:14:33:e5:6d:71:4b:e9:d5:1f:
1c:b6:d6:d7:10:a7:f0:94:fb:03:a9:56:99:54:00:8d:c5:f5:
20:0f:ee:9c:a9:9f:a8:b1:b8:d8:fe:6b:e1:9e:97:a5:42:28:
d9:7b:ed:3f:50:55:82:b0:66:43:c2:69:90:f1:9c:77:86:d5:
e7:d8:1c:61:67:c3:e5:d1:10:32:2c:44:c5:42:06:dc:47:d8:
41:21:2b:8c:5f:52:42:13:83:83:5a:94:f8:22:7a:36:f9:ce:
96:2b:2e:69:79:9b:bc:36:1c:0b:44:0f:29:27:a6:c2:ca:e2:
00:3b:2a:fe:59:9a:4d:99:b8:39:c9:2d:98:b4:4f:41:7c:82:
81:91:95:c8:48:9e:4e:d3:32:21:05:24:69:6f:9b:83:61:c5:
ca:30:e2:44:6c:ef:9e:1b:b9:7a:f8:3b:9b:25:2a:50:60:0e:
5b:14:60:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE
RjAzRDcyNDcwHhcNMjYxMDE3MDI1NDE3WhcNMjYxMDI0MDI1NDE3WjAYMRYwFAYD
VQQDEw02YWQyZTM1OS02ZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq4Sf+dCOPsQxgnYJYM9c28VeQ4Qsj8PSK97A7SLVxf3pSNkjImIWIutnS2gO
vWQR82d+TyLxV22dOT1jk3KLbG/lUb+58ObY/g/Lyjc61dlnQKtl0B0BXmjXiDEQ
oKpFkecl0yQ71gno1Br4fwxaWSRJWVXOgYGmAehMBn3EH28Ip897qNKiY1iYBCg2
cMJNqVMOujSFXtpFNR8/IvYlEdc8Fdz+vyGZrfb09TX3DeROkLo/WMOsRRD4xiuB
+o/jS0z/a5w9osTQbb2ST+MVA8RPy5YWLn/txVZxVotODBL5DmhKiY1C0fh9godC
xLjwtr22BCz55PoLp1WiHURzhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKywN0g0
hyKenVpuMiQvFZC8fOs6MB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw
MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ
bUVKcFBUaGhHVkxmQTlja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaGTAKXXUEHzmxknuQ98GWiaAa67t5imUAKCFrRAJxrMg4/BScxKmsBUgHmgE
JsI3RTjZwsWuS4iSRzBrKVQMouiCkWSzdfAbHrm5Ib5dZgwAFDPlbXFL6dUfHLbW
1xCn8JT7A6lWmVQAjcX1IA/unKmfqLG42P5r4Z6XpUIo2XvtP1BVgrBmQ8JpkPGc
d4bV59gcYWfD5dEQMixExUIG3EfYQSErjF9SQhODg1qU+CJ6NvnOlisuaXmbvDYc
C0QPKSemwsriADsq/lmaTZm4OcktmLRPQXyCgZGVyEieTtMyIQUkaW+bg2HFyjDi
RGzvnhu5evg7myUqUGAOWxRghQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:07:10 2026 by rpki-client