
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier: yR33qC4tBNVzG/tvS/IG7fkAcLvVid+oMCylaFIo9Bg=
Subject key identifier: 91:60:00:49:31:23:AC:F0:23:96:0D:84:27:AC:90:A6:8A:C4:07:80
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial: 07AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number: 17ED
Signing time: Tue 18 Aug 2026 17:36:29 +0000
Manifest this update: Tue 18 Aug 2026 17:36:29 +0000
Manifest next update: Tue 25 Aug 2026 17:36:29 +0000
Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: 9xkmEA91gBFLK+VZ/Zg6HfPgV7RhDeWrfNbreKqfUwU=)
2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: 9Zoz24dEkJzt6FtyKQFuBZJoAm4QCrA8VXW1adYN8sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Validity
Not Before: Aug 18 17:36:29 2026 GMT
Not After : Aug 25 17:36:29 2026 GMT
Subject: CN=6a84981d-6af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:71:e0:10:38:48:34:58:55:72:42:4f:d9:
16:cd:fa:f0:40:5f:b5:9d:e5:7b:62:37:45:8f:c1:
a0:b6:8c:5a:f9:07:bb:72:64:af:6f:bd:19:8c:ad:
12:73:58:62:67:ef:96:13:3f:26:55:9b:c5:21:48:
5c:4b:ef:d7:59:51:63:fa:d8:2b:1b:4c:14:53:24:
ad:f0:2c:3e:9b:e0:ee:e0:52:f1:7b:68:97:19:38:
f8:62:6d:54:47:26:56:a1:01:2f:a2:62:87:2c:96:
56:30:e4:89:09:60:ea:ac:a2:05:62:6b:89:5c:f5:
7e:18:64:6d:dd:20:20:d1:f2:4e:2c:9a:f3:ff:0a:
23:22:dc:43:ac:9c:ca:d9:dc:79:92:eb:a7:86:f1:
c1:28:19:0e:83:f7:08:cb:e7:2c:c3:c0:f4:ef:75:
79:78:bf:fe:57:99:6e:67:24:28:f3:af:74:4b:bd:
59:a2:00:21:8b:3b:a4:dd:9b:02:6b:03:58:a6:09:
6e:f3:f3:53:46:10:65:c2:1e:ed:5f:11:d7:bd:31:
95:6a:ae:5d:81:11:a6:1b:80:9b:47:b5:24:bc:e0:
74:b3:c9:1f:0e:24:f6:6e:0e:b3:18:16:56:0a:70:
b9:8d:87:3f:19:ed:e3:02:5c:01:24:c4:ae:ed:65:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:60:00:49:31:23:AC:F0:23:96:0D:84:27:AC:90:A6:8A:C4:07:80
X509v3 Authority Key Identifier:
keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:47:68:0b:2d:69:38:55:a9:4e:f1:a6:2c:23:c3:89:b5:9a:
48:cf:c0:6d:47:57:52:8e:61:84:8b:88:4e:10:1d:5e:32:e8:
51:42:f5:ae:eb:ba:5c:f0:36:d2:02:bd:39:b9:41:56:5d:52:
37:44:9c:54:64:01:e4:6e:0e:23:de:6a:1f:5f:7f:95:af:e9:
82:42:71:7c:f0:5e:30:0d:e9:30:f9:f3:04:7c:74:c4:7a:b1:
2f:b3:ac:23:4a:7b:27:b4:22:19:1b:7c:8f:de:8c:0c:c0:c9:
55:34:e6:c7:2e:96:c2:6a:5d:95:0e:c0:f2:ae:7f:71:c9:b2:
83:1d:75:15:0f:90:b2:d8:4c:a3:07:66:b5:9d:dc:36:9b:3a:
d9:e1:18:cb:d7:c5:ab:4c:ca:27:be:80:66:78:b4:e7:09:ba:
92:56:ce:b1:79:e9:02:30:9a:e8:a7:27:c0:35:68:1b:fb:25:
a5:a7:55:97:77:79:1f:e0:dd:47:80:ae:d6:5e:27:3a:be:08:
44:d9:1d:95:4d:30:81:dc:84:e1:f9:4d:ca:2f:30:28:da:a3:
f1:ff:47:83:96:ec:78:85:68:6b:23:4e:24:c7:9b:19:01:56:
50:da:61:fb:e1:9c:ea:e5:95:cd:56:4d:b9:15:40:80:e9:be:
2b:b7:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:19 2026 by rpki-client