
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier: tL4vciV899eu1lFYYnPlql8aYiwR9eA6LKDtdFNZyvA=
Subject key identifier: E4:82:6D:C2:AE:04:85:2E:D5:BE:B0:E9:B1:82:79:B3:94:89:B5:D8
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial: 0A41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number: 0A38
Signing time: Sat 28 Mar 2026 19:37:15 +0000
Manifest this update: Sat 28 Mar 2026 19:37:14 +0000
Manifest next update: Sat 04 Apr 2026 19:37:14 +0000
Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: r9Y7ygBFZDXhshCmcYl4otMXmZCNAAJZ4qr0TCQyfgU=)
2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: VjRNecW0vXmHI7IX4ZkzrAT4JcWtKoRZ3oauY1DQFzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 19:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Validity
Not Before: Mar 28 19:37:14 2026 GMT
Not After : Apr 4 19:37:14 2026 GMT
Subject: CN=69c82dea-fbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:c5:23:5b:e3:1f:a6:66:3f:a5:52:c2:d6:
40:64:9c:53:93:cd:b4:40:cf:2d:98:35:d1:51:73:
72:29:21:46:0d:ef:a6:83:9d:f9:04:38:65:3f:fd:
cf:ec:d1:d7:9f:5f:18:8a:89:6d:ce:21:c6:11:85:
e8:c4:6a:9a:e8:2a:c4:32:f0:84:3f:54:52:3e:82:
9d:78:48:ed:53:28:74:c0:e1:3e:f3:79:8d:7a:15:
3d:c0:c7:ca:d4:2d:05:94:71:63:3c:9f:50:f7:24:
b7:83:e6:b3:0b:24:59:b3:c7:ba:79:44:73:98:84:
9b:6e:48:b0:29:76:4a:16:ea:bb:f7:e2:0e:80:6c:
f5:c3:f4:09:92:45:ef:63:ec:b2:7f:fc:f3:cd:d1:
63:3c:68:62:c5:de:9d:98:28:27:3f:88:9a:d7:9f:
8d:d6:16:b0:6b:82:91:9c:ca:42:49:5d:ed:33:43:
31:d5:9a:f9:3a:dc:ce:3b:a9:d3:32:eb:cb:18:89:
b8:a5:77:91:d2:7b:29:f3:64:1d:d5:31:a6:b6:47:
14:3f:c3:0a:1e:17:5d:f0:a5:93:5f:1b:09:b5:2c:
1c:46:b7:6a:7b:ff:c8:bd:1c:9c:f5:3d:57:85:12:
b4:8a:50:9e:1f:21:e7:42:af:13:a6:ed:37:f8:6d:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:6D:C2:AE:04:85:2E:D5:BE:B0:E9:B1:82:79:B3:94:89:B5:D8
X509v3 Authority Key Identifier:
keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:03:f0:46:04:8f:ae:c3:8b:42:1e:df:b7:48:26:3e:88:40:
91:34:cf:94:88:26:31:48:a5:f3:78:72:0b:08:86:83:23:79:
d8:d0:0b:01:1d:3a:c6:8c:28:0c:77:4b:c8:a9:57:25:1c:8d:
48:75:30:d9:e1:65:61:c6:67:64:16:b9:55:b5:b5:b8:4a:b5:
1b:ef:a7:6a:bc:4e:1c:26:c7:1c:d4:53:bd:88:20:c9:eb:7f:
2a:d7:7a:e7:57:d5:41:5a:8a:2a:14:07:95:dc:79:7b:ab:71:
76:96:4f:31:3b:a7:53:57:7f:93:8b:c7:0d:d6:01:9b:d3:fd:
cd:d8:61:90:86:ee:ef:68:03:f4:d1:a8:61:65:18:a6:aa:d4:
1d:85:76:20:44:87:3a:0d:f6:08:ae:a4:29:24:44:a0:fe:b6:
a1:bf:29:22:ff:dc:af:71:19:c9:a8:32:0c:0e:9c:c2:8f:25:
6e:48:60:ce:fd:35:3f:ca:16:26:a3:52:2b:9f:ec:67:ef:a4:
7d:61:25:ab:60:9c:eb:de:48:b0:e9:d9:1a:62:37:67:25:d3:
93:51:cd:07:ec:7b:41:64:05:7e:7d:d8:fb:71:11:74:2d:87:
0f:2b:20:32:64:1a:84:fb:57:61:86:b3:37:fa:e9:9b:42:f7:
98:3f:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:19 2026 by rpki-client