
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json)
Hash identifier: PxRbkPCBbIXqmQv6+40JfcGFSMvj0+7k1GuBY6jf4mc=
Subject key identifier: C2:9B:DA:BA:37:4F:DF:DD:83:2C:3C:C4:27:8B:8C:2B:E4:94:95:1E
Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
Manifest number: 014E
Signing time: Wed 09 Sep 2026 05:40:41 +0000
Manifest this update: Wed 09 Sep 2026 05:40:40 +0000
Manifest next update: Wed 16 Sep 2026 05:40:40 +0000
Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: ytUHfs8Zyjphrok3eRH6XZ0Vvx5h33SLtdamV56wW+c=)
2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: LtWESLVsvI4cNUF6OZCvjLFJt5pmDgMGBGDr6mSpX1o=)
3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ffvc9baQUhPBkEPNM+Vs7ZdfNHNVe+g2HNSMjZukS2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 05:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Validity
Not Before: Sep 9 05:40:40 2026 GMT
Not After : Sep 16 05:40:40 2026 GMT
Subject: CN=6aa0f159-0d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:0b:98:86:c6:77:f2:1d:ef:c6:09:47:de:
29:19:60:12:f1:bd:af:e6:98:49:60:2a:9f:97:19:
c4:55:e4:b1:c4:cd:a4:9c:9f:7e:10:6a:ce:ba:69:
01:0f:fe:d8:9f:a9:8e:ff:3e:10:4d:3d:a4:9c:02:
7b:04:d9:c1:f7:af:16:65:f7:b9:5c:ab:dd:fd:d6:
d1:b9:a7:a8:74:7b:33:e2:6a:5f:27:2a:46:25:98:
42:74:65:ea:e5:c2:3f:de:df:d4:20:ba:0c:82:3e:
f7:00:e5:01:47:46:68:46:6c:12:f0:ab:96:da:e9:
27:1e:5d:fe:a4:f8:21:c8:5d:fa:bd:57:26:06:e1:
10:70:64:33:28:80:f4:74:88:71:fb:de:29:0d:59:
ed:31:36:14:da:ef:35:c2:d2:00:14:00:a2:28:db:
11:e7:47:74:00:22:b1:8f:f9:f5:e8:1d:41:25:74:
b9:63:fa:c7:d4:21:8f:8f:ad:76:8e:21:16:0b:4c:
42:a3:c8:b3:ec:a4:36:ec:c5:e5:26:86:be:5c:e2:
5e:90:48:87:ae:dd:59:a8:6c:24:2f:2d:c8:84:ad:
4c:86:71:93:da:e3:29:51:09:b5:73:94:5a:12:e5:
21:10:13:94:d6:3d:fe:ad:52:0c:e2:a5:37:3e:4a:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:DA:BA:37:4F:DF:DD:83:2C:3C:C4:27:8B:8C:2B:E4:94:95:1E
X509v3 Authority Key Identifier:
keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:11:bf:3a:ab:46:a7:ee:47:ce:67:ce:fe:dd:95:57:c8:0b:
20:19:be:4b:6a:5b:22:83:2b:40:66:94:13:8e:df:95:0d:86:
d4:98:d2:00:d2:28:b9:00:ac:aa:fe:1c:3f:db:19:90:34:25:
16:dc:82:14:05:00:24:44:01:de:a8:c9:17:a2:62:f9:46:8c:
0f:1c:55:97:a4:9e:81:4e:3c:a8:95:2f:fb:d3:72:56:e2:16:
4a:6c:9e:45:e7:a4:ac:41:41:26:2c:85:1a:32:8a:73:6b:d4:
31:1e:29:86:01:ab:f8:23:9f:5e:25:4a:8c:20:f5:84:08:c6:
f0:ea:ad:02:b3:65:4d:95:2d:dd:e1:b6:d9:b4:3a:50:ae:d2:
91:30:53:40:a7:6a:a0:fb:23:4e:39:c9:fa:d3:3c:54:a7:df:
05:14:d8:a1:fb:ea:9c:81:b4:06:84:61:9c:bb:b1:1e:d8:8b:
78:d3:94:c6:55:8b:d2:73:a7:18:b8:61:db:e8:98:f9:cf:44:
b7:ba:52:c4:53:70:75:d0:17:45:79:97:7a:ad:d8:c7:31:da:
f2:6c:ed:57:c2:c2:49:dc:69:31:40:43:54:3e:19:fc:d3:de:
b5:94:b0:e2:1b:75:0b:35:ac:67:71:c6:ef:c6:22:6c:ec:1a:
d5:b9:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:18:41 2026 by rpki-client