
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
File: YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft (raw, json)
Hash identifier: PVshupxGja1lR+38DU/zUXOLskQSAFW0lf6wOxKKDvQ=
Subject key identifier: 53:C1:7C:7C:9B:C9:B5:7B:A9:18:28:27:A7:3C:91:05:7C:83:0A:85
Authority key identifier: 60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68
Certificate issuer: /CN=A91E5A08/serialNumber=6006B9658313D864991619D6979B0F7E01E4B668
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
Manifest number: 0288
Signing time: Wed 07 Oct 2026 02:14:27 +0000
Manifest this update: Wed 07 Oct 2026 02:14:27 +0000
Manifest next update: Wed 14 Oct 2026 02:14:27 +0000
Files and hashes: 1: YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl (hash: Np3SMm2BYnuKQ36+2BRGotPkB7cOebMu1JFEj8nsVT4=)
2: EC9A7C9EE26811EDBB19B85EC4F9AE02.roa (hash: kXMMTzpfUp5tzsj3ErSeWyi6kiUv6/A6nv/Z2vTJWmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl
rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5A08, serialNumber=6006B9658313D864991619D6979B0F7E01E4B668
Validity
Not Before: Oct 7 02:14:27 2026 GMT
Not After : Oct 14 02:14:27 2026 GMT
Subject: CN=6ac5ab03-2309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:5f:fe:1b:3f:9e:26:14:3f:27:e8:90:01:
08:6d:86:38:12:c9:85:06:45:16:b7:37:ba:95:ee:
c2:b1:5c:3f:cd:5a:a5:65:02:11:94:51:d5:b0:14:
b4:4f:05:05:1c:73:d2:27:a8:76:46:f6:8e:74:bb:
e7:1c:db:db:88:9b:cb:46:10:5a:07:cf:a9:e0:27:
77:1c:9f:85:07:b0:b5:40:de:1a:2e:8d:9b:e8:1e:
07:1e:b6:74:f7:97:14:ec:6d:ea:fb:fb:fd:c7:2e:
ae:6e:07:1a:5a:e9:3a:f9:b0:e6:92:a5:f7:0f:0a:
c0:e4:39:80:3e:e0:c4:c2:ac:00:db:11:19:bb:80:
d1:58:34:17:61:fc:cd:cb:2c:fa:00:db:6f:41:fe:
8c:e5:cb:3c:ec:65:09:c6:72:86:1a:4d:b8:ba:c6:
e8:65:38:e7:61:ba:a8:43:0b:48:9d:35:28:51:dd:
68:bf:a0:cc:5b:40:3a:bc:2b:eb:5b:8d:55:2f:4d:
e5:9b:9d:81:be:02:39:88:25:b6:bf:ce:8d:54:6f:
c2:54:08:a4:31:f2:4e:90:ce:31:94:05:6a:01:ce:
d5:77:fb:0c:04:97:70:ff:ed:4e:1b:04:9a:79:d5:
46:a9:19:e6:da:b0:1f:28:bf:62:bc:30:47:8d:0c:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C1:7C:7C:9B:C9:B5:7B:A9:18:28:27:A7:3C:91:05:7C:83:0A:85
X509v3 Authority Key Identifier:
keyid:60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:72:11:3f:2a:08:46:37:26:2b:11:c1:19:f3:5e:88:d9:0b:
4f:55:3c:6b:80:93:bc:f9:b7:51:6b:56:2a:49:88:e1:92:0e:
52:b9:47:3f:d2:5e:aa:78:3c:dc:ce:c1:8d:7c:5c:6c:e0:4d:
45:0d:de:8b:f1:17:54:de:ae:ba:20:96:8e:20:19:13:0f:ad:
37:f9:62:6c:34:a3:61:19:5c:72:e9:81:5a:7a:57:a1:4b:00:
29:87:d0:ce:77:c6:35:b1:b9:e1:b6:61:14:2c:df:ae:6c:9d:
14:14:f3:e6:9f:d5:5d:51:48:8b:70:8e:de:fc:85:b4:9f:7b:
44:eb:1b:ab:0d:dd:8c:77:e7:66:3e:6b:a8:73:6f:4d:b3:8a:
7c:b9:2b:c9:20:65:f4:8d:b3:68:40:67:58:86:a2:98:f5:59:
53:38:92:ce:30:3c:44:d6:c5:a2:cb:b1:61:e1:4c:4c:e6:28:
e3:f8:54:0b:c4:98:f3:a0:88:fe:19:85:99:79:82:b4:19:f5:
43:ae:6f:a5:e0:bb:c3:92:c9:81:67:3e:e1:94:b3:ee:97:50:
0c:f3:cd:b3:4b:bf:1c:e3:b4:57:34:50:9c:86:33:93:d7:67:
9c:e0:b4:7b:af:33:92:2b:c7:f6:96:51:6b:a5:6c:9d:79:47:
50:aa:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:02:20 2026 by rpki-client