
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
File: jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json)
Hash identifier: NoE4WaDFNYvsRV4oLXfQ8ix05tfeytVNlUq0iE5QdFU=
Subject key identifier: AE:7F:35:E2:71:F4:81:59:23:87:58:CA:29:2F:88:79:FA:5F:9D:06
Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
Certificate issuer: /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
Manifest number: 017C
Signing time: Fri 11 Sep 2026 04:44:47 +0000
Manifest this update: Fri 11 Sep 2026 04:44:46 +0000
Manifest next update: Fri 18 Sep 2026 04:44:46 +0000
Files and hashes: 1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: dvbWSICQAK7c9L7P+TtyKWMxqu6Bes61FWnmGMhfaso=)
2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: n6rNTx4DosyE+NYmhaFLC8L4vDQdHdtdD/uLixXbDGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Validity
Not Before: Sep 11 04:44:46 2026 GMT
Not After : Sep 18 04:44:46 2026 GMT
Subject: CN=6aa3873f-bbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:36:57:61:36:0d:d7:6b:5e:56:a7:e0:9d:
2d:e4:39:cf:13:ef:ab:5b:34:cd:ef:9d:9f:ff:95:
af:6e:a4:80:40:81:40:93:e6:93:de:31:af:57:94:
2b:c8:7d:c3:de:9e:e8:61:98:6a:43:3c:97:2f:af:
de:a4:90:1a:ad:04:91:fa:3a:0f:1c:7a:77:8c:30:
3a:06:22:d5:69:24:3a:59:ae:66:ad:ed:36:35:30:
ab:76:f3:c8:e4:d2:8b:32:a8:58:c7:65:d1:7f:9f:
44:8a:b7:71:a2:9d:89:78:f4:32:ac:3b:fb:5b:e4:
03:84:af:a6:21:bc:9c:3c:e1:65:cb:af:94:1b:97:
36:4b:45:ba:a2:d5:5e:b3:fe:50:d2:de:64:46:f2:
71:b2:23:47:2d:2e:0f:03:34:db:6c:60:63:1f:d2:
ff:bc:7d:50:3f:9f:11:47:a5:a7:78:47:5d:a9:04:
7b:ab:59:45:48:ad:5b:5e:95:12:29:27:6b:39:e5:
e6:21:1b:bd:c7:72:a8:5d:28:e3:f3:f5:a9:0f:b7:
af:8b:c5:5e:57:33:b8:70:d0:e2:f7:6a:15:05:58:
98:51:84:f9:c5:1a:cc:46:e3:2a:a2:cc:ea:48:2c:
09:3d:06:c4:a5:14:eb:4a:b6:12:f6:8b:02:de:08:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:35:E2:71:F4:81:59:23:87:58:CA:29:2F:88:79:FA:5F:9D:06
X509v3 Authority Key Identifier:
keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:c9:af:fb:9b:2d:b2:b9:40:87:f4:26:f1:3f:7e:97:95:
af:a8:b7:0e:ec:f0:64:51:ff:dd:76:c6:34:58:64:a9:0c:d6:
26:e6:43:f0:22:d6:f1:b8:ba:a2:6d:f3:52:cb:40:9b:8c:5a:
e0:a1:07:44:68:fb:10:1e:f6:81:72:50:01:21:ae:c6:7d:47:
30:2c:22:66:17:c4:a8:79:fd:1e:bd:42:15:5a:54:4b:4f:3b:
9f:1b:cd:7c:09:ed:75:3f:bb:64:35:73:2d:b6:2d:5d:fb:8d:
6c:11:1e:a6:c4:ae:92:8a:4c:13:d4:0d:52:de:34:64:0f:d0:
b7:77:b1:c8:3f:7b:b5:9d:38:83:e4:b8:e7:b8:ba:e3:f8:6d:
19:fc:27:c8:a0:0c:33:3d:ce:ac:09:9b:b2:d7:6e:d1:ee:b2:
06:0b:2a:6a:bb:71:85:8b:65:8f:7c:18:6c:ef:ef:96:10:44:
c4:98:3d:0d:ba:78:4b:31:f8:89:47:d5:cc:06:6b:c6:25:9c:
ba:2f:59:5a:04:f7:5c:21:39:00:dc:ef:49:29:ce:ab:a6:03:
92:30:86:e4:97:49:0b:25:71:e6:a2:00:94:15:01:8f:a1:dc:
e5:0c:92:9f:78:66:34:2f:66:d3:be:57:3e:28:42:b7:de:a1:
08:1a:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:10:20 2026 by rpki-client