
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json)
Hash identifier: zRBlBnRFT/3Th0J3K/9EnNSFkXrvOkEs6EYDVAzpWLA=
Subject key identifier: 74:E9:5C:F5:CF:06:F6:A5:41:D5:68:D3:CB:55:05:E8:37:6A:3C:39
Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
Manifest number: 018A
Signing time: Tue 13 Oct 2026 05:04:49 +0000
Manifest this update: Tue 13 Oct 2026 05:04:48 +0000
Manifest next update: Tue 20 Oct 2026 05:04:48 +0000
Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: ReB6vnL98saz4D9MMCihe+Kj7s7vopcyHMq+zGrq+vQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl
rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 05:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Validity
Not Before: Oct 13 05:04:48 2026 GMT
Not After : Oct 20 05:04:48 2026 GMT
Subject: CN=6acdbbf1-679e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:fa:eb:1a:b6:8e:89:12:ad:1b:e4:4d:ca:
ef:83:f7:7e:f0:d6:bd:7f:4f:8e:6a:59:28:81:38:
4c:91:fe:1d:e7:e9:76:8c:4e:7f:dc:0c:4b:62:ed:
1d:70:64:f2:65:36:de:d3:bb:c8:10:a4:37:e6:4d:
d4:51:bc:7f:bb:99:2f:fb:f4:f1:8d:db:6b:58:0a:
28:9c:82:c0:d7:e8:e5:24:47:aa:29:94:76:70:b0:
6d:ce:83:c6:23:33:09:57:15:f2:a5:58:3e:f8:96:
a4:c4:6c:69:5b:4f:1e:b2:b3:08:73:1c:44:ae:56:
e7:0c:6c:1f:70:e3:a0:ae:21:64:19:d0:bc:be:03:
42:93:40:b2:ec:4f:f9:96:3d:0b:c7:e3:36:93:62:
83:9e:7f:ca:34:bd:76:3f:66:46:d9:f8:71:ac:0a:
22:81:a8:ba:13:bb:72:68:26:70:68:ca:9b:59:91:
0a:18:31:ea:a8:f0:02:4b:fb:d2:45:3d:d1:26:70:
5a:98:0b:62:fa:25:8f:49:31:96:f2:70:58:ee:61:
c9:4b:c4:4d:22:36:e2:c7:d1:f4:6c:b1:a0:3a:68:
08:bb:41:2a:8d:56:97:f0:82:86:f8:2d:09:a8:3e:
a2:c3:ee:45:67:1f:25:60:90:8d:4b:8e:06:57:aa:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E9:5C:F5:CF:06:F6:A5:41:D5:68:D3:CB:55:05:E8:37:6A:3C:39
X509v3 Authority Key Identifier:
keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:32:2a:33:55:98:f9:2d:ab:ce:4a:94:48:5b:02:9a:fa:57:
f2:e7:49:f3:a3:6c:93:38:fc:dc:3d:62:2c:41:9b:87:56:ba:
f0:f8:ee:ac:33:db:89:18:fb:c6:52:a0:6c:c4:47:db:0a:c2:
7e:50:96:b0:23:06:39:e6:e2:53:6c:01:4c:5c:cf:2a:20:c3:
77:02:d1:37:a8:9b:5f:21:a1:7f:82:36:eb:f0:c2:60:d0:4f:
91:32:10:90:c8:53:e1:af:58:17:24:9b:97:c9:86:dc:5e:bc:
c3:ab:72:dd:96:4d:63:13:64:e2:b5:89:f3:af:36:4c:2c:63:
c0:fe:15:77:23:14:cc:59:fb:71:80:af:ef:4d:86:97:13:6c:
21:8f:a0:7a:57:1a:ce:41:b9:4b:82:56:82:e9:ff:74:a8:7e:
6a:2c:41:df:21:a6:64:14:72:87:6f:21:a9:15:7a:4e:fa:d8:
9f:1f:7b:7a:18:4e:c2:b2:28:cd:6f:c1:fd:d6:b5:68:58:b9:
91:a9:02:35:6d:b2:21:f3:63:c6:7c:88:28:3f:9c:4e:58:dc:
91:3a:03:b7:4e:4c:45:05:5e:eb:39:33:8d:4b:69:4d:ab:d2:
05:c7:1c:06:06:ae:7e:6f:8f:de:c8:68:28:50:80:db:73:b6:
89:81:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:35:54 2026 by rpki-client