
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json)
Hash identifier: kYSBe0TrQpUotk2uwzSHQtoucoC2Qr+Ykp4r0lPUFCE=
Subject key identifier: 17:E3:B1:90:2B:FB:5E:80:28:0D:FE:B2:19:98:DA:8B:CB:6A:49:9E
Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Certificate serial: 045B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
Manifest number: 0454
Signing time: Wed 26 Aug 2026 23:57:45 +0000
Manifest this update: Wed 26 Aug 2026 23:57:45 +0000
Manifest next update: Wed 02 Sep 2026 23:57:45 +0000
Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: sA5ARHHGoS054nNGsAAiLKmBLkxDC3XTOS4JdussKYg=)
2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: Wrx7+0yyE0y6mHBZKupTJpJMKjJY9lireuqMWBGxSlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 23:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Validity
Not Before: Aug 26 23:57:45 2026 GMT
Not After : Sep 2 23:57:45 2026 GMT
Subject: CN=6a8f7d79-4451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:c0:e2:e5:61:66:2e:b0:d3:8b:ae:ee:b9:
3c:57:6e:f0:d8:28:a0:40:61:f7:f6:83:ee:aa:ca:
ab:2e:9f:1c:e4:69:82:93:f4:51:20:8c:02:29:1f:
26:d1:9e:c4:17:42:ce:2b:94:9a:79:5c:7e:7c:d9:
6e:84:e8:c9:84:e2:d4:af:b4:a6:bf:f3:bd:e3:07:
e3:9c:9a:f1:1d:c5:21:fc:fd:c2:e7:24:43:d7:5d:
4d:9a:9c:bc:9c:7d:d1:08:b0:5f:b7:fe:1a:78:27:
5e:1a:ad:ae:93:cf:79:ef:6d:1f:a9:29:fb:27:2c:
61:35:e3:76:cd:5e:7e:03:fe:b9:e6:ea:44:81:b8:
25:a3:9a:df:83:55:03:72:0f:14:0b:cc:5a:39:57:
95:c2:09:a7:3b:6e:6f:a6:d5:f2:b5:d7:0f:2e:34:
b7:fb:37:c5:e7:e3:94:77:9b:4c:9e:cc:c5:13:dd:
4d:bd:bd:16:23:aa:5f:a1:34:e7:da:ea:f9:1a:03:
2c:65:c5:ea:88:42:f0:a0:92:23:b4:aa:e1:cd:47:
35:66:eb:41:c4:eb:bf:61:e3:6d:73:74:98:d2:44:
7d:f7:18:d8:aa:b3:37:23:7c:5a:f7:df:0b:93:ec:
0d:83:97:40:4d:2a:43:b2:52:3b:5b:67:a6:1d:6f:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:B1:90:2B:FB:5E:80:28:0D:FE:B2:19:98:DA:8B:CB:6A:49:9E
X509v3 Authority Key Identifier:
keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:79:4c:8b:da:e7:f6:23:73:b4:84:de:ac:cb:87:6d:ee:b2:
6a:51:dd:2e:c1:38:a7:48:86:a3:ab:5a:0a:6c:2d:3c:1e:a6:
7a:53:2b:72:91:92:6f:d1:11:af:52:c7:79:3a:57:a3:96:dc:
3d:3a:1f:bd:dd:73:6d:fe:99:02:b3:8a:45:27:da:05:90:f8:
73:b1:ec:91:c3:6e:11:ab:50:bd:86:0f:9f:9e:ff:ec:76:ae:
15:fe:28:48:20:ec:58:73:da:05:a9:8b:1e:9c:2b:44:d1:f4:
9e:69:ba:00:a4:71:28:f5:15:87:d9:56:7c:ee:09:97:e5:47:
ed:b5:49:a6:2e:79:0a:f1:74:a1:6d:b2:cc:8b:95:2b:d9:ec:
ba:ed:5f:bc:05:83:03:79:a6:3e:76:ae:35:da:96:4f:5c:ee:
91:a6:69:c6:4d:2d:0a:7c:34:57:97:26:55:42:e9:32:6e:a0:
ca:e7:86:05:ae:de:79:e7:b1:c4:d0:63:85:de:c3:9c:18:5d:
39:c3:e2:93:be:07:9e:0e:19:7d:aa:96:37:5d:e3:6e:70:dd:
b0:72:d9:6a:81:e1:e7:5c:46:c0:53:7f:fa:fa:01:c0:9d:f8:
3e:9e:1c:e5:51:53:68:88:4c:d7:5c:3b:1a:e6:b5:9c:e9:c7:
14:05:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:44:25 2026 by rpki-client