
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json)
Hash identifier: aNx9FWEOlFaeisYtxZ8LTjISsdOPUpFobUzVgUq16TM=
Subject key identifier: 78:09:3C:AA:5B:9C:E2:AD:DC:7E:1F:EF:88:A0:54:25:85:CC:44:90
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
Manifest number: 0151
Signing time: Fri 23 Oct 2026 05:56:41 +0000
Manifest this update: Fri 23 Oct 2026 05:56:41 +0000
Manifest next update: Fri 30 Oct 2026 05:56:41 +0000
Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: p6FlM2VTKhNmW4Rb5vfZxAeaWGt778GpmHLsnMLqSL0=)
2: 5CBA651212B211F19AC313AEB5EE528E.roa (hash: OY4Fet8xm/rFRe8wVg+u3YFnbkKRJHlvjCIrVFg7MQ4=)
3: 5DB76F8212B211F19AC313AEB5EE528E.roa (hash: 2NaYNjJ6qjcaM0sXuJIClT+/B4+Xci+4D5hsnMlJddw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Validity
Not Before: Oct 23 05:56:41 2026 GMT
Not After : Oct 30 05:56:41 2026 GMT
Subject: CN=6adaf719-de33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:71:f4:9e:5d:f9:29:64:d1:c2:12:45:3c:
71:7e:ec:2e:a2:45:2b:d3:bb:07:54:c0:b4:11:a4:
28:56:18:01:f5:b1:78:2c:b1:be:68:63:3b:4a:f0:
3e:46:51:a2:35:87:9d:fa:2d:ff:e5:dd:8e:f1:b9:
db:c9:cf:b0:4f:34:1f:90:05:4f:ce:ed:ce:b8:e5:
c5:fd:1e:ae:be:c1:a0:67:d2:bd:64:d3:7f:91:72:
9f:54:5c:da:38:6b:90:6a:b9:ba:fe:be:c1:f9:ce:
86:e3:65:e9:1f:63:46:f0:6c:f1:43:69:3a:6e:66:
a4:51:80:98:aa:17:36:a4:15:ad:c3:09:2d:22:04:
67:d5:f0:a3:f4:53:36:7f:51:8b:18:e9:18:ec:a0:
3e:dc:3d:f0:90:b5:6a:d0:0b:56:75:5a:b3:9a:94:
44:2c:46:bb:32:c8:fe:66:c5:d0:63:2d:e5:12:84:
b8:2d:2f:f4:47:d5:2e:88:2d:d0:24:c9:c3:2e:eb:
67:d2:53:8b:ff:f7:2e:12:a6:a7:2d:b4:37:5c:8b:
11:a0:b3:b7:24:b8:96:83:ff:ce:c8:92:7f:4c:77:
7b:14:6c:6e:59:a7:fc:a2:36:2d:1f:46:33:01:ee:
bd:c2:e7:03:a9:99:7c:fe:35:9e:3a:de:73:02:cb:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:09:3C:AA:5B:9C:E2:AD:DC:7E:1F:EF:88:A0:54:25:85:CC:44:90
X509v3 Authority Key Identifier:
keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d9:05:62:f2:3c:e9:f8:c0:ac:ab:44:1f:73:8b:6e:8d:3b:
39:df:bb:40:5f:e7:14:19:ef:d3:30:b5:b1:fb:bb:fe:bb:58:
63:04:6b:f7:2a:e2:83:9b:a5:3b:42:df:7e:91:4a:44:50:4e:
c9:ff:fb:8f:d4:de:02:45:74:dd:78:95:37:3a:2e:92:57:1e:
66:dc:69:24:6a:2c:4d:69:cd:78:dd:79:a7:8c:f6:67:db:e3:
9b:1c:e9:ee:91:2a:b6:8a:02:b8:66:09:c1:10:66:a2:5d:3e:
11:f7:fc:fc:c7:e3:78:51:da:65:a2:df:19:da:5a:83:79:55:
67:f9:88:21:ec:f1:a9:e5:07:a7:93:9f:b4:5e:e8:1b:de:0f:
ac:21:40:8d:61:af:ee:24:94:83:4d:a7:33:7e:67:ee:e0:88:
ac:52:e9:58:b4:2c:f2:18:ec:7f:3e:0b:a5:6f:9e:c9:58:b4:
20:cc:64:5a:e1:e4:cf:de:7c:e1:00:89:6d:63:1c:10:a5:92:
95:98:8f:c0:fd:4d:e1:f7:73:f3:dd:9f:e3:f2:85:b5:fe:f3:
06:62:5a:88:c1:2a:9e:24:be:9a:a1:00:8d:1f:00:ba:e5:f7:
4d:68:3e:bc:6b:f8:c0:6d:a2:bc:bc:20:fb:f2:e3:45:33:cd:
fc:81:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:41:58 2026 by rpki-client