
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft
File: yhZXNMEc1wu3iaHSw6DpTtuULUo.mft (raw, json)
Hash identifier: Z8JCwBPOc1JVnRTyYExXKBPCkhUCHbSpnpuZ3sFCyvE=
Subject key identifier: 25:6D:51:F1:F3:91:54:CA:42:69:D4:A5:C6:61:66:44:99:C8:1B:F6
Authority key identifier: CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A
Certificate issuer: /CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A
Certificate serial: 0A2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft
Manifest number: 0A74
Signing time: Sun 04 Oct 2026 19:46:19 +0000
Manifest this update: Sun 04 Oct 2026 19:46:18 +0000
Manifest next update: Sun 11 Oct 2026 19:46:18 +0000
Files and hashes: 1: yhZXNMEc1wu3iaHSw6DpTtuULUo.crl (hash: GQdbPBe7hq7GOvEjy496EbVk2NEK9cYNd0QQtGjgrag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl
rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2607 (0xa2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE179, serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A
Validity
Not Before: Oct 4 19:46:18 2026 GMT
Not After : Oct 11 19:46:18 2026 GMT
Subject: CN=6ac2ad0b-f72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:3a:95:f1:8f:6d:0b:95:a8:19:9d:56:f2:
94:7d:58:3f:d5:fa:2a:e1:25:9e:36:e8:70:c6:22:
13:81:e6:bc:c5:50:6a:9d:65:97:67:8f:4a:86:13:
3c:37:d4:f4:1c:a0:db:ba:b2:d8:5e:94:04:11:54:
f5:62:68:e9:27:2c:00:bc:79:05:a6:85:9c:ba:9a:
9d:d9:ed:82:18:b7:9a:16:5b:b7:67:24:95:c0:41:
f4:68:84:e5:0e:8f:50:8d:b6:b5:3f:d1:3e:28:4e:
27:bd:c7:9a:d1:23:bd:ba:92:49:1d:1f:c3:2c:3f:
c9:d3:d7:ba:72:5b:f6:41:04:81:13:f7:14:ca:9b:
2e:0c:cf:8a:c2:bf:05:1d:60:44:dd:73:85:c4:0f:
b0:51:ac:e5:f3:19:5a:59:12:82:62:fd:48:ac:fc:
99:ac:2b:04:de:42:2e:ec:2e:ca:d1:cc:0d:ee:03:
8c:05:05:a2:db:51:ee:f1:ac:d2:66:a3:20:dc:4f:
74:be:c7:4e:7b:17:3e:d7:ec:94:39:35:62:b9:9c:
76:84:ec:07:a0:6d:78:20:e0:0b:97:9e:09:95:28:
eb:4f:b8:dc:44:53:03:ed:e2:91:f0:f4:b1:1f:b0:
3b:b6:e1:73:f4:ac:ba:20:44:64:f8:71:09:25:12:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:51:F1:F3:91:54:CA:42:69:D4:A5:C6:61:66:44:99:C8:1B:F6
X509v3 Authority Key Identifier:
keyid:CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:b0:d3:4f:f6:ba:f5:b9:c1:bf:26:bf:22:6c:03:14:d6:f9:
1c:67:0e:c6:ba:c7:15:76:24:19:e5:2f:ea:ee:fd:72:a3:c0:
e4:29:15:f3:28:c5:88:cc:6c:65:1d:64:58:39:34:dd:33:cf:
b2:23:10:02:20:21:b7:45:a8:23:05:ad:43:51:ec:b9:11:e8:
95:de:fb:0e:6c:ca:95:d4:cf:d0:d2:e5:02:f6:03:52:97:02:
58:1d:d3:fe:85:87:67:fc:cd:20:20:71:7f:ee:1f:ba:cd:e8:
0c:ef:93:81:d2:db:ef:fa:b1:59:7d:23:58:82:d4:fc:85:c1:
d8:39:96:ca:a6:f5:a4:61:d2:66:a0:2b:68:f0:7d:57:27:4f:
02:b7:79:17:fa:3b:a0:cd:89:81:53:72:e2:4a:ab:d9:9f:fa:
6e:c9:77:a3:eb:d6:33:fc:ec:45:56:68:e8:b9:79:d2:a6:57:
fa:93:e1:f6:db:79:b0:e5:86:53:75:7d:24:c4:83:f6:33:b4:
29:92:a9:bc:a8:a5:99:6a:16:31:bd:e3:8d:42:3c:01:28:0a:
8c:73:b4:67:11:e2:ee:3f:75:67:bb:90:02:e0:f7:e3:b0:12:
68:69:94:a3:a3:a5:fc:27:93:b1:2f:da:0f:ab:e8:00:61:df:
93:a6:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:39:53 2026 by rpki-client