
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier: ktZUyx/4Bfz6PE2UjgBBHSJb+QdACjPOB3cBjP8JEME=
Subject key identifier: 45:9B:2B:2F:59:04:B6:42:E7:2E:0B:2B:A8:AD:85:5F:19:F6:DE:B4
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial: 0AA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number: 0A9A
Signing time: Tue 06 Oct 2026 19:39:00 +0000
Manifest this update: Tue 06 Oct 2026 19:38:59 +0000
Manifest next update: Tue 13 Oct 2026 19:38:59 +0000
Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: eFji+zniHn6kWtBTPdF7QszyjYuyYZDMoYjVfZ2muMk=)
2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: VjRNecW0vXmHI7IX4ZkzrAT4JcWtKoRZ3oauY1DQFzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Validity
Not Before: Oct 6 19:38:59 2026 GMT
Not After : Oct 13 19:38:59 2026 GMT
Subject: CN=6ac54e53-cdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:7c:1b:29:d4:50:ef:36:cd:c4:b6:a4:03:
1c:86:6e:df:f0:5a:b2:1f:0c:36:77:bb:7c:79:76:
cc:69:db:1e:e7:2b:a5:65:3d:19:2b:de:68:09:28:
70:66:a1:bf:52:7c:71:36:18:34:5e:33:c8:00:12:
69:be:06:c1:75:ce:7b:f3:bc:85:c1:da:2f:91:58:
14:5a:ab:52:e4:40:85:ad:b9:66:32:03:e6:49:9a:
5c:76:14:ba:46:93:e2:29:e8:ed:28:ca:e1:07:7f:
76:a1:a5:73:e3:d5:ab:e0:86:1d:2e:19:72:ed:d5:
82:bd:d5:4a:eb:4f:c2:6c:e2:b5:a8:65:c6:76:f3:
43:bc:9d:d9:0c:3d:3f:df:24:48:45:77:d6:21:12:
5b:c0:cc:5e:da:f9:a2:04:c2:b7:ce:7f:a3:6b:95:
90:9a:0d:c4:59:49:df:ec:8d:0f:66:e5:4d:d2:60:
18:64:4f:31:ec:81:45:ee:33:07:10:74:b6:e7:f5:
09:d8:e1:e0:58:02:2a:e8:06:2e:23:ea:30:8a:cf:
da:2f:05:6f:a9:51:27:1e:b7:7e:fc:28:67:30:48:
49:29:36:d7:95:6c:96:15:66:1d:19:72:a5:e8:23:
a2:85:1f:03:69:7e:e3:c4:d7:34:b0:ea:eb:e0:6c:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:2B:2F:59:04:B6:42:E7:2E:0B:2B:A8:AD:85:5F:19:F6:DE:B4
X509v3 Authority Key Identifier:
keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:91:13:5a:04:62:fc:31:61:68:72:da:7c:b0:79:5c:08:fa:
79:38:53:e7:f2:83:8f:58:54:5d:f3:8f:84:e4:ce:25:9c:05:
5b:77:06:67:be:1b:d3:64:d0:25:b5:a2:78:85:0f:9b:8a:24:
73:f2:35:7d:cf:00:4a:d1:e0:d7:9f:6c:a4:d0:a2:8e:e6:22:
40:9c:11:32:81:ff:8d:80:95:b8:1c:d4:fb:34:75:49:d1:88:
44:2e:6b:09:d1:47:08:db:b8:e0:83:94:ea:7b:20:d2:29:6d:
9f:4e:72:f1:32:01:20:aa:d1:c6:26:d9:d4:9f:93:a4:91:61:
e6:b4:50:29:90:fa:35:f2:ac:59:31:a3:06:47:50:a1:3f:ec:
db:c9:53:e5:34:d8:73:00:02:82:e9:a7:2e:f9:74:2c:58:d2:
cb:44:87:28:dc:eb:38:53:32:0c:d8:e4:eb:84:dd:d5:03:cb:
bb:d7:ab:c5:50:31:5c:b4:39:8a:14:99:da:67:68:08:0d:dd:
e6:f6:2e:78:35:ab:d2:c7:14:a0:3e:76:fc:bc:ea:93:5e:34:
92:db:5f:67:d0:e8:c4:30:40:9e:53:35:c9:ba:91:a7:e4:54:
10:87:2d:ed:da:f8:69:a3:82:c2:69:51:1e:b9:4b:87:5f:48:
76:ff:98:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENDQjMxMTAvBgNVBAUTKENBQURDQkFDQzUxQjJBNDY1MkRENzMwNzRGMjgyQzMz
NEQwMTAyNzcwHhcNMjYxMDA2MTkzODU5WhcNMjYxMDEzMTkzODU5WjAYMRYwFAYD
VQQDEw02YWM1NGU1My1jZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtrR8GynUUO82zcS2pAMchm7f8FqyHww2d7t8eXbMadse5yulZT0ZK95oCShw
ZqG/UnxxNhg0XjPIABJpvgbBdc5787yFwdovkVgUWqtS5ECFrblmMgPmSZpcdhS6
RpPiKejtKMrhB392oaVz49Wr4IYdLhly7dWCvdVK60/CbOK1qGXGdvNDvJ3ZDD0/
3yRIRXfWIRJbwMxe2vmiBMK3zn+ja5WQmg3EWUnf7I0PZuVN0mAYZE8x7IFF7jMH
EHS25/UJ2OHgWAIq6AYuI+owis/aLwVvqVEnHrd+/ChnMEhJKTbXlWyWFWYdGXKl
6COihR8DaX7jxNc0sOrr4GzcOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWbKy9Z
BLZC5y4LK6ithV8Z9t60MB8GA1UdIwQYMBaAFMqty6zFGypGUt1zB08oLDNNAQJ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0NCMy80MUZENjAxNjg5
NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktrWlMzWE1IVHlnc00wMEJB
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lxM0xyTVViS2taUzNYTUhUeWdzTTAwQkFuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0NCMy80MUZENjAxNjg5NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktr
WlMzWE1IVHlnc00wMEJBbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGZETWgRi/DFhaHLafLB5XAj6eThT5/KDj1hUXfOPhOTOJZwFW3cGZ74b02TQ
JbWieIUPm4okc/I1fc8AStHg159spNCijuYiQJwRMoH/jYCVuBzU+zR1SdGIRC5r
CdFHCNu44IOU6nsg0iltn05y8TIBIKrRxibZ1J+TpJFh5rRQKZD6NfKsWTGjBkdQ
oT/s28lT5TTYcwACgumnLvl0LFjSy0SHKNzrOFMyDNjk64Td1QPLu9erxVAxXLQ5
ihSZ2mdoCA3d5vYueDWr0scUoD52/Lzqk140kttfZ9DoxDBAnlM1ybqRp+RUEIct
7dr4aaOCwmlRHrlLh19Idv+Y4w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:46:03 2026 by rpki-client