
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier: 2AWhX+6zW7+D13ikwoQOpzmyP/Nm7Mnm371H7l8vBmo=
Subject key identifier: A4:6E:C7:E4:40:43:99:15:59:1A:8B:1C:CC:C9:06:39:19:06:7C:8B
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial: 0A8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number: 0A81
Signing time: Tue 18 Aug 2026 19:52:14 +0000
Manifest this update: Tue 18 Aug 2026 19:52:14 +0000
Manifest next update: Tue 25 Aug 2026 19:52:14 +0000
Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: moPgjbXmHPIMcFJF7JLoGvm4XNkf41EFeYEvqjTnrk0=)
2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: VjRNecW0vXmHI7IX4ZkzrAT4JcWtKoRZ3oauY1DQFzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Validity
Not Before: Aug 18 19:52:14 2026 GMT
Not After : Aug 25 19:52:14 2026 GMT
Subject: CN=6a84b7ee-f035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:8b:93:fa:5a:a6:1b:81:a3:e8:94:24:1b:
52:a2:0e:6a:13:b0:47:76:a3:cb:31:8b:fa:64:1a:
c3:80:18:65:f2:e6:a1:d4:ca:99:01:f0:ae:7b:ab:
90:2b:10:85:8b:ab:38:69:b1:58:a2:a6:a4:cb:31:
35:00:24:b2:42:45:ae:c8:eb:0b:ca:e2:03:a4:80:
8a:71:2b:2e:27:13:ad:61:59:f9:c3:46:bf:15:16:
1f:96:5f:75:6b:ee:34:95:34:b1:ff:86:7b:fb:c5:
76:63:37:51:21:b3:88:8d:64:09:c5:65:83:48:ae:
e8:04:3f:bf:6a:fb:e4:44:37:c4:5e:10:51:27:9c:
0a:79:6b:b8:bf:41:d9:21:ad:a7:b3:a0:d7:de:bb:
60:8b:cc:96:43:1e:f3:21:e9:66:bc:09:e9:c4:c5:
56:17:c5:05:2a:1e:e1:c8:5a:8e:b2:32:00:0a:a7:
e0:ac:49:56:0a:bf:31:b0:39:40:5d:9f:2c:ad:a8:
a3:ce:12:af:66:4c:5d:9c:8d:4c:56:df:fa:4c:4f:
c8:9c:d6:0c:14:15:7f:a8:80:0b:87:57:d2:a7:e7:
67:02:00:30:59:66:8c:b4:ae:5a:ab:87:ed:c1:a7:
cd:3b:9f:54:d2:4f:46:0c:f8:4d:ce:95:6a:a0:9a:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6E:C7:E4:40:43:99:15:59:1A:8B:1C:CC:C9:06:39:19:06:7C:8B
X509v3 Authority Key Identifier:
keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:30:4d:b4:74:d3:f3:63:43:c3:71:0d:73:0f:32:58:bd:47:
48:4e:4c:0e:6a:c2:57:e8:e4:d8:a6:f6:5e:1a:74:e2:4d:b6:
79:03:03:fc:45:bd:05:27:b9:61:da:6f:61:bd:08:ab:2f:d1:
3e:ed:94:99:4b:21:30:05:7b:c7:d5:89:67:9e:aa:bd:78:97:
8b:1e:b7:f0:72:b8:dc:8c:45:3c:8c:5d:d9:88:0b:55:03:5f:
8d:2b:4c:d2:8c:21:7b:c7:b1:4f:d6:1c:d2:c4:fa:89:28:aa:
9b:d6:29:c9:30:32:b6:86:b0:18:97:f3:16:a5:db:24:df:35:
a9:d8:be:66:67:66:22:a5:ab:f0:2f:cd:c1:b6:a5:fb:ca:86:
4d:48:96:2f:d4:d0:6d:ba:7a:95:22:b2:f2:78:17:24:f3:98:
dd:13:9d:33:7e:05:24:ba:c9:e6:16:7d:53:1f:0b:98:22:69:
00:c5:81:cc:da:c8:fa:41:8f:7f:88:02:d5:b2:53:a6:4b:f5:
77:19:a9:ae:8b:90:53:b3:24:31:5e:78:cf:ab:d1:d3:91:94:
b6:12:2d:e0:74:0b:4d:85:9c:d8:71:78:dc:4e:d5:9d:80:88:
f0:fe:33:21:43:b1:f6:4c:4d:0e:f3:d8:c6:4b:bf:bd:f2:6c:
f3:05:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:48 2026 by rpki-client