
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
File: YOVPYFHttB6nqVCJbNm71nASDWM.mft (raw, json)
Hash identifier: UUA+zoGy8yYlvqTVKCX0nF1HiE+tZow7i7IcRE/j4p4=
Subject key identifier: FF:1B:2B:48:B3:83:57:FF:28:00:6E:21:38:CB:D0:CD:F8:28:81:0A
Authority key identifier: 60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63
Certificate issuer: /CN=A91FF89A/serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
Manifest number: 01CF
Signing time: Sat 03 Oct 2026 04:20:47 +0000
Manifest this update: Sat 03 Oct 2026 04:20:46 +0000
Manifest next update: Sat 10 Oct 2026 04:20:46 +0000
Files and hashes: 1: YOVPYFHttB6nqVCJbNm71nASDWM.crl (hash: navmp2ALnFsj+f3ngSP/zs14IaiP/cJ6IF+ju1t02xE=)
2: 99AA3580F88611EE8E9B3E71C4F9AE02.roa (hash: bPEX0dVvMeMHuF9ZTGsIQels0ly/XiaUVU8i8aAIXrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl
rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF89A, serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
Validity
Not Before: Oct 3 04:20:46 2026 GMT
Not After : Oct 10 04:20:46 2026 GMT
Subject: CN=6ac0829e-0d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:cd:2e:81:fc:42:22:f6:b8:bc:eb:3b:cc:
31:60:6c:5a:96:10:fe:8c:7f:34:18:8e:31:9a:c0:
02:42:b7:4b:ec:61:9a:05:b3:6c:7a:a4:42:a8:3e:
36:c1:7b:82:06:33:78:81:e0:b9:b6:a6:1a:dc:9a:
22:12:a7:b8:93:79:47:4d:bb:47:16:ad:36:8c:a8:
61:e5:41:8f:b7:4e:39:ed:83:2e:c2:4c:0a:07:09:
96:a7:4f:e9:35:cb:bc:f3:8d:39:fd:da:02:5b:3a:
12:4b:ae:29:36:6f:57:9d:35:6a:e6:b0:7e:01:d3:
03:9f:fc:a6:2f:99:59:c7:52:25:bb:6e:08:05:25:
5a:e6:71:d2:e3:93:1e:5e:88:bd:76:6b:00:7c:dc:
d5:b3:df:a2:6b:6b:f3:13:8f:f3:84:67:8b:2c:78:
e0:4d:bb:e1:02:82:0f:9e:1e:88:04:0a:70:e5:42:
e6:fe:dc:57:86:cb:5d:2b:1d:34:2c:a0:03:65:f5:
c8:ff:fb:d0:f5:1a:92:24:25:bf:43:57:5a:12:f3:
a0:00:c3:05:ec:fa:b5:a8:a8:63:10:60:aa:6b:68:
50:30:d9:3c:98:55:51:83:3d:af:2d:1e:29:e7:89:
d0:dc:8f:bf:c5:00:49:a3:00:34:34:58:41:c1:6c:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1B:2B:48:B3:83:57:FF:28:00:6E:21:38:CB:D0:CD:F8:28:81:0A
X509v3 Authority Key Identifier:
keyid:60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f7:33:ec:34:f1:a1:4b:b8:32:2a:b8:38:ee:2b:7c:c1:62:
96:c1:2e:a4:6a:b3:8c:dd:20:50:a6:5d:a3:53:79:fc:44:8a:
9c:d9:35:36:6c:75:b6:2a:7c:c6:3d:68:01:e7:a1:2b:b4:db:
46:6f:e1:41:74:2c:84:98:41:83:aa:8b:4d:c4:0e:5f:b6:1b:
24:85:57:b2:6f:4f:4f:d8:71:23:b4:5d:a1:ae:b9:cd:0c:6f:
b1:e3:93:b3:22:47:fd:8c:52:3b:01:9d:45:25:de:ea:3b:56:
01:0c:95:46:7f:42:d7:a4:72:fc:82:a0:2b:9c:34:14:16:6b:
b9:7c:c3:c1:5b:75:e6:32:66:e2:a6:25:ee:56:20:cc:8c:a7:
4c:5a:22:f4:bd:97:87:58:f2:32:73:32:9d:93:8f:e2:14:98:
16:15:ac:dd:ec:8e:a2:3f:9c:7e:8e:8e:e8:53:22:d8:97:91:
70:8b:22:8a:4e:6a:af:eb:76:b6:3d:44:a7:e7:3d:97:01:93:
48:33:34:9c:f4:ab:c7:99:68:f8:ee:bf:76:3d:f4:27:7c:3d:
2d:32:b1:4e:af:32:0d:b7:9f:49:d0:95:76:35:e4:a8:55:53:
45:53:34:76:86:39:9e:3a:46:79:4e:a7:9b:f4:97:50:66:f8:
55:25:4f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:18:01 2026 by rpki-client