
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json)
Hash identifier: yEw/HKSfYjh0Bv0BRpKcxjSscBHDhKmhiFsExKbiAa0=
Subject key identifier: 4E:B9:3C:DE:1B:68:7A:8A:BA:6B:F1:A6:0D:85:6E:6E:A7:01:BD:2C
Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Certificate serial: 0B48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
Manifest number: 1312
Signing time: Tue 18 Aug 2026 19:29:36 +0000
Manifest this update: Tue 18 Aug 2026 19:29:36 +0000
Manifest next update: Tue 25 Aug 2026 19:29:36 +0000
Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: zylBdPIBVhuFuS1NHah6N3T9kmr9frT15eQT5vk/T3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2888 (0xb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Validity
Not Before: Aug 18 19:29:36 2026 GMT
Not After : Aug 25 19:29:36 2026 GMT
Subject: CN=6a84b2a0-a986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:95:3f:b4:da:fb:62:3f:c3:0f:2c:5e:ec:
f6:67:05:22:c0:e5:35:d2:97:33:1a:4b:25:d7:64:
a6:e9:f7:1f:2c:b3:cd:2d:92:e2:88:8c:25:d9:31:
1e:3f:6f:12:87:23:ea:fc:f1:fd:7a:d8:55:5e:9e:
77:cb:d8:29:e6:81:32:a2:57:3e:61:90:b7:65:8a:
9e:61:72:b0:3d:06:cb:a8:ed:83:ae:33:b0:81:e4:
e8:54:83:40:4c:31:16:97:51:5a:bf:9c:ff:f4:fc:
cd:65:77:7f:a7:92:3f:4a:2b:c9:bb:7d:02:ad:55:
5f:ec:58:35:bc:62:bd:04:f9:e2:1b:c6:62:0a:42:
11:0e:e0:5a:04:ed:60:57:ba:c1:17:10:50:de:4f:
2a:b3:1f:30:68:5e:0f:3b:f8:8c:ce:01:73:e4:df:
12:8a:59:91:fc:de:52:1c:ac:67:73:44:f4:c8:ae:
cb:d2:0b:87:95:c8:b6:94:8b:3a:b4:6d:b9:68:b6:
a2:e7:da:0e:2f:52:e7:fc:d3:ee:6b:19:10:d0:30:
60:50:b5:ce:b2:85:8e:aa:27:10:b6:a9:5e:5a:9d:
d9:1d:a7:4f:91:84:32:50:1e:99:e1:27:3d:6d:69:
21:70:5b:4a:76:b2:ce:77:d4:74:78:ff:98:e8:22:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:3C:DE:1B:68:7A:8A:BA:6B:F1:A6:0D:85:6E:6E:A7:01:BD:2C
X509v3 Authority Key Identifier:
keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b0:72:da:54:1d:f8:10:cc:6a:e8:a9:f9:5e:7d:35:ce:cd:
56:bf:ec:a1:95:35:97:0e:0e:14:9b:6a:17:a6:ba:87:38:5f:
66:0f:f9:4e:86:c8:de:df:67:51:27:ce:09:2e:2e:ad:37:2b:
ee:58:e8:cb:62:53:da:c2:1e:e5:b1:2b:b6:a9:50:66:e7:10:
b5:80:04:b3:2a:29:81:cd:c4:d4:7c:47:8d:d0:bc:cf:08:14:
e4:b9:a7:e6:ad:6b:a2:06:f4:4a:d6:dd:54:75:41:60:03:b8:
f6:49:03:ac:03:c9:61:8e:9d:f8:e5:13:a6:e3:93:d3:15:93:
d2:e2:94:97:31:2f:34:e0:03:3e:87:c7:60:91:db:3f:f9:b7:
82:83:41:c8:eb:ca:d9:c0:2b:af:00:a0:e6:34:e3:f7:47:20:
1b:2c:d7:1c:09:66:3b:86:d2:83:bb:2d:a2:4a:2f:13:e6:de:
0a:de:e9:f0:cd:09:c7:eb:95:fb:8e:a8:d1:34:c8:27:3e:6d:
41:35:dc:55:58:23:ca:e2:fb:0b:35:b8:e1:1b:04:8c:c6:1e:
cf:e7:60:b9:ae:21:6c:a8:5b:aa:12:d6:54:b8:6c:71:07:68:
9e:6a:6a:bd:3d:4c:0f:92:ff:16:7b:f5:a4:c0:b5:21:fd:06:
aa:01:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:11 2026 by rpki-client