
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json)
Hash identifier: SW6bLn1qEG4Pf+P95AeOGltd+mw3P+EjurO6s9HnZxw=
Subject key identifier: E9:72:F4:45:63:BF:E3:35:BC:53:60:0E:1B:EF:E3:8B:6F:6A:D2:0A
Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
Manifest number: 0250
Signing time: Mon 27 Jul 2026 03:47:56 +0000
Manifest this update: Mon 27 Jul 2026 03:47:56 +0000
Manifest next update: Mon 03 Aug 2026 03:47:56 +0000
Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: VzmZTDDM5NC5epChpXK1xUeryC5bZXSMJDzS/ASMcK8=)
2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: Cd3ka8bb5R3DYUTF/v0b6ivGnboKPrlUrUoM7/Vgbdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Validity
Not Before: Jul 27 03:47:56 2026 GMT
Not After : Aug 3 03:47:56 2026 GMT
Subject: CN=6a66d4ec-90b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:0d:b9:5f:5c:cb:59:75:77:8d:78:78:73:
b0:a2:2c:e1:61:e1:31:56:15:76:c4:34:34:03:d7:
64:2b:4d:eb:0d:83:4b:14:29:a9:37:95:d3:ec:e6:
a6:fd:6d:0d:1c:68:aa:f9:0e:fa:34:34:42:4a:8b:
a8:25:ee:ac:2d:48:61:c5:2b:f7:be:42:f0:2d:d8:
2f:77:4b:c2:94:71:d0:22:75:45:a1:a5:26:1f:6a:
95:42:75:42:0f:12:fc:88:85:c8:92:a4:92:d9:1d:
94:b8:42:e7:8b:5a:5a:2d:f2:a4:6b:c4:a6:ee:4b:
1f:4c:1d:2a:df:3a:ce:30:e8:44:a4:b3:7b:7e:b1:
26:54:5d:43:97:5a:a7:d7:87:86:23:e7:c5:90:f2:
be:94:c7:c7:64:87:3e:70:86:25:ee:57:f8:0c:23:
e1:3b:5a:e3:ed:f9:1c:af:ce:ab:7c:26:a1:2c:cd:
02:63:95:f8:77:67:30:e0:94:8d:72:b0:f1:de:f7:
9a:23:8e:fe:01:af:f5:92:aa:6b:41:a3:9f:eb:d2:
e2:0b:6c:fd:a3:0b:13:24:d2:f4:3f:fe:15:fd:95:
fc:35:13:20:de:b1:68:c2:8f:6b:13:30:98:f5:61:
78:52:da:13:51:11:ea:a8:cf:9e:52:e1:53:a4:17:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:72:F4:45:63:BF:E3:35:BC:53:60:0E:1B:EF:E3:8B:6F:6A:D2:0A
X509v3 Authority Key Identifier:
keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:f9:37:e8:26:52:79:1e:c1:c9:58:87:29:83:39:ea:8a:
40:87:f5:fb:ed:e1:8e:c2:02:bd:c7:97:9e:81:90:e4:7f:d7:
13:60:3b:da:c5:b5:84:9b:59:21:54:c3:58:97:bc:ab:92:5b:
e4:c3:de:61:3e:8f:01:5d:5e:54:67:06:7c:1b:e7:97:9f:c1:
4f:e2:6d:99:1c:bc:b0:1e:53:c5:96:f9:7f:8d:be:ba:3d:4b:
99:86:1e:0f:7a:51:6e:41:2d:e8:18:b8:50:00:0b:b8:14:f3:
48:f9:5e:dd:87:d5:f2:bd:47:55:9d:4d:e9:2e:9b:a1:59:4b:
82:02:87:9a:7d:24:41:f7:fe:7c:60:99:bb:30:8f:f0:c1:6d:
10:b5:89:dc:ba:e8:72:c6:40:26:ea:7b:4b:3b:9f:d2:2f:eb:
b1:3b:d3:a0:6b:7d:d9:52:6b:8b:15:36:aa:cd:b0:84:1a:ea:
7e:2a:d1:24:53:e6:39:9c:75:7f:06:c3:8b:05:66:7f:d0:4d:
f1:6b:84:ef:68:8e:b0:e8:04:b2:a3:c9:c7:7a:dd:79:e1:60:
81:fe:8e:13:4c:f7:65:89:34:70:79:8c:55:91:1b:99:33:5d:
11:d7:88:7c:5e:93:81:39:ec:00:32:01:cd:15:a8:56:19:f5:
ca:02:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:56:37 2026 by rpki-client