
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
File: kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft (raw, json)
Hash identifier: 5jEjCYpSLm3vFJR4HiZwg4Z9nMzCSoqPq8lPEYkaNK0=
Subject key identifier: A0:BC:FD:C6:82:1D:9A:8D:8D:83:7B:78:B8:AD:FD:14:C6:C0:92:52
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Certificate issuer: /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
Manifest number: 12AC
Signing time: Sat 24 Oct 2026 17:04:24 +0000
Manifest this update: Sat 24 Oct 2026 17:04:24 +0000
Manifest next update: Sat 31 Oct 2026 17:04:24 +0000
Files and hashes: 1: kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl (hash: 7uE2zyhqIGYhDBNOQ5bGTZYUg5WJNQPcFqFAiTggMDc=)
2: 5ACD46A25B5011F1A484689580EE528E.roa (hash: /3nrgcWXZ56O1J79Bt7Rp4QcJq7XbMY/jy1oMPLgjcM=)
3: 5A3D22165B5011F1A484689580EE528E.roa (hash: e03XnEPO3o2zr+89RCtKmVF1UA9g/w/QMsdb9CferY4=)
4: 58722CCE5B5011F1A484689580EE528E.roa (hash: ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=)
5: 59142EC05B5011F1A484689580EE528E.roa (hash: /QO8wNozJq4m8L+0sf+XY52fc/jZly2rqPjfRvQ5K9w=)
6: 59ACBA1E5B5011F1A484689580EE528E.roa (hash: zSFiu1yhrWQYfzXu7XQ3kTYOr9VS9WdRx3KYSDFhSHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 17:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Validity
Not Before: Oct 24 17:04:24 2026 GMT
Not After : Oct 31 17:04:24 2026 GMT
Subject: CN=6adce518-0e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:50:4e:9b:e7:b8:a1:00:81:db:79:cb:b6:
25:e2:a4:f0:92:57:60:a2:9e:32:7f:25:42:04:00:
b4:fd:1c:81:fc:0f:b9:19:ec:ab:f1:5d:be:23:58:
3d:fb:cd:25:4a:cb:2f:dc:11:5c:20:91:b0:cf:b4:
6b:cc:71:5e:ba:db:5d:d5:23:3c:e7:f3:69:63:7a:
cd:ac:45:5a:72:28:6f:55:a4:e0:7b:da:e1:17:3d:
3e:c6:82:9b:ed:5d:09:40:8a:0f:6b:e3:49:4f:6b:
57:51:fb:d1:38:54:e0:5f:da:6f:d8:8f:b1:00:82:
63:8a:b6:b0:02:48:ca:26:fd:83:c0:4e:21:92:12:
08:8b:b1:4d:0a:e5:16:73:9b:d7:f8:22:1e:71:3b:
51:01:96:74:d0:a3:10:0d:36:9b:b1:0a:39:24:c4:
e4:2a:2b:b1:5f:b5:1f:19:20:ec:1a:f4:b8:7e:38:
f9:61:08:18:fa:c4:0e:7f:ad:03:33:30:f0:32:5b:
b7:6c:1d:a6:8c:bd:49:9b:d8:e7:9f:65:0a:73:a8:
17:81:bf:fb:fb:2d:15:e2:70:b1:7a:b7:82:d1:4e:
9c:8d:10:1f:3e:3e:2d:c1:f6:14:fa:12:b6:16:07:
1c:b7:f3:63:cc:39:32:76:8d:a2:77:d2:45:92:72:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BC:FD:C6:82:1D:9A:8D:8D:83:7B:78:B8:AD:FD:14:C6:C0:92:52
X509v3 Authority Key Identifier:
keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:00:3d:8f:28:d2:cc:bd:26:ab:dc:38:b0:bb:e5:7a:f7:2a:
22:c4:db:b6:48:14:07:c1:81:8b:5e:b1:66:bb:eb:bc:e6:d0:
81:f4:70:5b:af:c4:37:65:2f:50:83:ee:5d:15:58:34:d4:7e:
25:0f:5a:9d:cc:06:97:33:f1:6f:83:f2:50:21:70:a2:e5:30:
51:6f:1b:42:bd:45:19:a1:9c:b7:2c:a9:ad:6a:f9:e1:eb:af:
c4:2e:09:60:92:90:b2:ab:96:c7:4f:88:5c:a7:23:5e:ba:c7:
0e:f9:9a:ad:b3:65:f8:7d:0e:26:b1:ee:cc:a5:87:db:ab:29:
f6:86:d5:c6:5c:52:69:c1:4d:94:f1:91:2c:be:58:42:34:1b:
5e:28:23:e4:65:f0:7c:ed:ff:01:c2:67:85:95:3a:42:79:28:
9d:68:71:ac:6f:b4:d4:c9:a3:9c:6c:ce:bf:1c:c1:be:b0:06:
76:f6:e1:6e:69:2c:9b:67:83:6b:e7:75:1f:42:0c:4a:0d:fc:
07:b6:fe:42:79:48:ca:73:d0:ed:9b:76:4e:ea:fb:32:08:b2:
fd:eb:bf:82:8f:45:83:95:51:6d:12:37:65:ea:e1:0d:11:c4:
70:66:24:7a:d2:65:5a:9c:0e:82:0b:8a:33:06:7e:36:fb:3e:
85:49:e7:c4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NEZCNTExMC8GA1UEBRMoOTE4NTE2MUY0NkY1NkE4M0JEMThBNUJGMjQ5MDg0RDY4
MzRDQUMxNzAeFw0yNjEwMjQxNzA0MjRaFw0yNjEwMzExNzA0MjRaMBgxFjAUBgNV
BAMTDTZhZGNlNTE4LTBlMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4llBOm+e4oQCB23nLtiXipPCSV2CinjJ/JUIEALT9HIH8D7kZ7KvxXb4jWD37
zSVKyy/cEVwgkbDPtGvMcV66213VIzzn82ljes2sRVpyKG9VpOB72uEXPT7Ggpvt
XQlAig9r40lPa1dR+9E4VOBf2m/Yj7EAgmOKtrACSMom/YPATiGSEgiLsU0K5RZz
m9f4Ih5xO1EBlnTQoxANNpuxCjkkxOQqK7FftR8ZIOwa9Lh+OPlhCBj6xA5/rQMz
MPAyW7dsHaaMvUmb2OefZQpzqBeBv/v7LRXicLF6t4LRTpyNEB8+Pi3B9hT6ErYW
Bxy382PMOTJ2jaJ30kWScmBHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoLz9xoId
mo2Ng3t4uK39FMbAklIwHwYDVR0jBBgwFoAUkYUWH0b1aoO9GKW/JJCE1oNMrBcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0RkI1L0VGOTg3RUUyMDlE
MTExRTk5NTYwN0I1MkM0RjlBRTAyL2tZVVdIMGIxYW9POUdLV19KSkNFMW9OTXJC
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIva1lVV0gwYjFhb085R0tXX0pKQ0Uxb05NckJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0
RkI1L0VGOTg3RUUyMDlEMTExRTk5NTYwN0I1MkM0RjlBRTAyL2tZVVdIMGIxYW9P
OUdLV19KSkNFMW9OTXJCYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB3AD2PKNLMvSar3Diwu+V69yoixNu2SBQHwYGLXrFmu+u85tCB9HBbr8Q3ZS9Q
g+5dFVg01H4lD1qdzAaXM/Fvg/JQIXCi5TBRbxtCvUUZoZy3LKmtavnh66/ELglg
kpCyq5bHT4hcpyNeuscO+Zqts2X4fQ4mse7MpYfbqyn2htXGXFJpwU2U8ZEsvlhC
NBteKCPkZfB87f8BwmeFlTpCeSidaHGsb7TUyaOcbM6/HMG+sAZ29uFuaSybZ4Nr
53UfQgxKDfwHtv5CeUjKc9Dtm3ZO6vsyCLL967+Cj0WDlVFtEjdl6uENEcRwZiR6
0mVanA6CC4ozBn42+z6FSefE
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:41:17 2026 by rpki-client