
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft
File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json)
Hash identifier: hpuz01HDbhJ4RLLkRA786qIFi1zyYJExDQHo/1ZFghE=
Subject key identifier: FB:6D:3D:10:9B:07:45:BF:05:B7:E5:E1:75:78:FB:6B:11:38:FA:0C
Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82
Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
Certificate serial: 0C8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft
Manifest number: 0C6F
Signing time: Sat 04 Apr 2026 18:31:55 +0000
Manifest this update: Sat 04 Apr 2026 18:31:54 +0000
Manifest next update: Sat 11 Apr 2026 18:31:54 +0000
Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: XYkZLcgLEJcUzVCM2tilCCba3nU43hbgS+yHLiuvKGA=)
2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: EHjk/F86ucLzY9sYVqsytzQA1yeTqJoqFn2Dz1cc9Fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl
rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
Validity
Not Before: Apr 4 18:31:54 2026 GMT
Not After : Apr 11 18:31:54 2026 GMT
Subject: CN=69d1591b-7616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:bf:b2:01:42:4c:ac:de:e2:a8:4d:11:09:
f0:ea:4c:17:40:51:f5:ae:ca:13:ff:0d:36:dc:c5:
f2:43:af:15:8f:ea:09:26:17:41:27:be:40:94:e8:
ab:1a:b2:cf:cd:8b:c9:5f:3b:38:a0:df:16:b9:f5:
e6:41:d9:cb:26:de:78:e8:50:85:d3:bf:1d:9b:92:
bf:af:f3:13:3c:10:ae:de:9d:74:2c:ea:04:75:d3:
d3:68:ca:2a:84:50:2b:d3:62:34:6b:93:e1:23:dc:
86:6c:1b:40:3b:90:ce:87:33:7b:2c:cd:c2:3a:22:
15:40:e8:a9:57:4e:19:75:fb:31:4d:62:fa:8b:21:
3a:d6:e7:1c:c1:00:18:f8:d8:97:31:6f:ae:6d:00:
08:0b:4d:a6:ed:59:97:76:31:ea:9f:c4:f7:e9:79:
8e:62:0f:78:31:49:4e:ea:bd:22:13:61:b6:84:21:
31:e3:88:53:05:d8:6b:f5:25:9d:a4:1d:ee:2d:3e:
b1:e3:73:c5:72:a0:10:31:87:6c:15:25:9b:31:dd:
33:36:17:8d:cf:d0:a6:83:e6:c5:a5:7d:54:64:d6:
c4:5a:46:6a:c0:85:74:28:66:1d:f2:0b:5c:b1:81:
50:4e:4e:55:18:33:40:dd:6e:33:d8:c6:ee:f9:6a:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6D:3D:10:9B:07:45:BF:05:B7:E5:E1:75:78:FB:6B:11:38:FA:0C
X509v3 Authority Key Identifier:
keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:56:5c:71:55:b2:ee:87:b4:7d:fb:54:fa:4c:34:05:1d:04:
ff:ae:ed:b7:9f:f4:44:02:63:ef:e8:d8:d7:cf:55:cb:30:9a:
cf:ae:2d:4c:5d:87:c6:62:ab:e3:e4:94:bb:20:4b:5b:f6:09:
a9:c7:64:0d:99:a6:fd:ac:6b:ef:b1:72:f2:16:ef:a5:ee:30:
46:ab:b1:53:b0:08:f8:82:b8:6f:88:40:f0:1c:9f:83:57:32:
c5:84:49:02:00:05:1f:6b:78:56:d3:d1:76:ac:b2:99:75:2c:
8b:c3:52:bc:36:9b:ea:d6:cd:93:e0:ea:36:30:79:ee:76:9e:
cd:0f:65:f3:90:d5:29:25:45:49:7e:94:0e:90:a3:6d:dc:d0:
cb:75:0e:d9:1f:1b:29:8f:3b:34:6c:d2:73:c1:37:0c:fc:a8:
ce:2c:e3:06:8b:d4:dd:c7:46:4c:da:8e:27:b5:bb:76:80:f5:
9d:ae:b3:1e:56:1d:3c:58:ab:c1:9f:83:b8:b8:6b:e2:c4:60:
7a:ef:84:82:21:0d:f7:5a:87:6c:b6:03:e1:9f:8a:bf:59:ed:
d0:b4:d7:d8:0a:81:e2:42:d9:1e:3a:ff:c5:b7:79:5f:9b:09:
9c:32:47:f8:e9:3f:0c:22:a1:2a:a4:dc:39:1c:82:29:80:92:
6f:93:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:46 2026 by rpki-client