
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json)
Hash identifier: 9g4oXZ9WyeuGd8qkN0V8Mjrnq8bCJ5Oztf3IokSDxyM=
Subject key identifier: 5C:05:42:11:C6:79:E0:D3:19:36:5A:8E:3B:C2:9E:0A:29:D4:42:2F
Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Certificate serial: 0D87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
Manifest number: 0D74
Signing time: Mon 26 Oct 2026 18:03:06 +0000
Manifest this update: Mon 26 Oct 2026 18:03:05 +0000
Manifest next update: Mon 02 Nov 2026 18:03:05 +0000
Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: ixoe9f6g2WjWsgk+6W0LFI21EBlPegWMEJKXsA2i9Vk=)
2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: KQXQWVKvFfDKiZ/mb3rYBqHTBLYMAEaG90VtAXLATr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 18:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3463 (0xd87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Validity
Not Before: Oct 26 18:03:05 2026 GMT
Not After : Nov 2 18:03:05 2026 GMT
Subject: CN=6adf95da-42f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:c2:89:a5:17:53:6a:35:6f:dd:fc:b6:b9:
a5:b3:a8:cc:7b:b8:c5:4d:10:26:ab:f1:3a:4b:b2:
4d:0e:dd:bf:0a:fe:06:23:de:67:34:73:4f:51:a1:
5e:ba:66:de:f2:07:29:6d:2f:4d:77:c0:f3:21:ca:
b1:13:6c:ae:12:17:55:5d:c9:d8:ac:c9:f3:70:17:
cc:49:de:1c:3a:6b:ac:c6:c4:84:e2:fe:9e:34:a9:
45:9f:fc:fa:98:5e:e1:dd:cf:48:5d:68:2d:15:41:
b5:5b:94:7a:f9:70:8e:a7:6c:18:83:25:71:7e:24:
67:87:75:07:12:e5:34:5c:ab:cf:ef:62:ef:04:f2:
70:af:15:85:c5:f8:49:07:da:e8:a0:81:c4:8c:28:
cd:f3:54:07:13:29:d8:e4:46:b7:aa:c7:11:48:57:
12:d3:c4:83:d4:d3:ad:db:4b:db:c1:ee:01:d3:da:
c4:e6:27:06:58:69:46:12:a1:a7:4e:f8:7c:23:d5:
7f:68:83:9b:21:23:89:fd:0d:45:11:7a:77:ff:06:
67:c2:24:9b:fe:04:80:56:14:d8:97:df:20:03:1e:
9b:5d:95:7c:09:48:61:52:80:92:8c:5d:89:18:fb:
f8:28:f1:d9:eb:03:0d:cd:1f:66:26:04:01:e2:49:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:42:11:C6:79:E0:D3:19:36:5A:8E:3B:C2:9E:0A:29:D4:42:2F
X509v3 Authority Key Identifier:
keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:86:70:8d:6b:2f:13:16:74:7c:f6:d6:f4:f3:f9:90:1d:3b:
c7:5b:02:76:23:50:9a:ba:d3:ae:b4:96:e8:21:c7:fa:9e:07:
7a:05:c1:13:17:61:22:d6:d9:57:0b:a7:c0:e5:94:14:8b:0e:
59:fd:61:d2:ba:c7:6e:cc:ef:93:b0:91:25:52:b7:9d:a1:e1:
a2:f6:35:72:9c:83:b5:3a:d7:ca:de:5c:b6:d7:fe:c1:af:93:
c9:65:93:4a:21:11:96:6a:c4:f2:37:0a:03:3e:b1:b1:aa:a8:
47:c3:70:1c:84:61:7d:5c:fd:ba:88:7b:a9:66:88:6b:72:44:
b9:54:f4:76:c5:59:59:ac:98:bd:9d:0f:92:57:fb:47:f0:89:
66:79:0e:b4:e8:1d:f5:4b:3c:d3:7b:49:98:bb:85:66:bc:ad:
dd:fc:27:f4:0f:58:82:c9:cd:4b:7f:32:6f:22:e3:19:7e:88:
27:27:66:ef:80:c8:93:5e:10:01:6e:a5:18:44:a7:05:4c:ad:
52:bf:bd:ff:67:0a:8f:3c:99:be:48:78:a3:9f:2e:bf:84:e5:
91:f4:3b:2a:03:a2:bd:79:fa:b1:b9:04:14:46:56:9f:26:64:
aa:6a:da:99:8e:d1:3e:68:37:04:08:c8:1f:21:92:b0:d5:d5:
4a:42:54:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:18 2026 by rpki-client