
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier: 58onCobnecQlXE50ghqoz46/t1LooHJ0YJbTuw9q5Ag=
Subject key identifier: 14:52:B5:DF:32:73:58:38:47:AB:E5:A2:C7:66:96:06:F1:80:43:78
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number: 029C
Signing time: Wed 23 Sep 2026 01:28:49 +0000
Manifest this update: Wed 23 Sep 2026 01:28:49 +0000
Manifest next update: Wed 30 Sep 2026 01:28:49 +0000
Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: yabPjHsTdUeCRjDgPJUtf99V/ug4S7HM0bXjWK0uMCk=)
2: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: ZJ1JXD8OMZ1/bFwQ4CUwNfMJD2mA1nTwWCd7m4pPBcY=)
3: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: IQ7wQrkp6KFdnuD/CeQ1UB+HAtSyDPflLHSW+K88QUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Validity
Not Before: Sep 23 01:28:49 2026 GMT
Not After : Sep 30 01:28:49 2026 GMT
Subject: CN=6ab32b51-29c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:3d:f6:6d:ef:32:bd:5f:16:0d:88:6a:ab:
15:0e:b7:cb:6f:1a:77:f1:b3:e2:22:a6:18:9b:ee:
ff:52:76:c3:c2:f2:86:be:bb:78:98:f1:5d:91:f0:
4a:1e:61:34:57:30:5b:e3:10:26:9e:17:c5:a7:fe:
33:88:d8:d1:7c:9a:e4:c7:89:b9:02:fe:cd:b7:f3:
67:35:a4:8e:b3:7c:a0:9c:ec:9b:6f:99:31:8b:df:
1e:4a:37:98:a6:cb:84:70:9d:c0:fd:37:2f:e5:fb:
5a:32:8f:99:ca:cd:40:54:2b:7d:c7:c5:ed:42:b4:
83:96:6a:c3:c5:cb:2d:85:d7:65:94:9d:65:04:a6:
a8:05:4b:c9:5d:c3:65:c2:b7:19:70:a0:9e:7c:67:
f4:5f:53:d6:41:23:7c:c7:7a:c1:ef:89:ff:ac:2b:
1b:50:48:48:43:f4:98:3b:44:66:26:73:cb:37:0b:
f7:23:de:45:81:3f:a4:07:b8:cc:9c:89:1f:5b:48:
3b:05:9f:c1:cc:3d:f3:20:ef:fb:58:57:c1:04:c5:
e8:4d:55:59:51:b5:56:61:6d:30:5f:81:83:b4:4d:
a9:56:3a:9e:0b:d6:c7:13:e9:84:f0:01:14:33:12:
53:5b:06:b6:71:e9:26:03:6f:24:c4:d8:b0:6f:fe:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:B5:DF:32:73:58:38:47:AB:E5:A2:C7:66:96:06:F1:80:43:78
X509v3 Authority Key Identifier:
keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:14:0d:c7:65:76:9b:32:05:67:a3:4b:c6:fe:be:d7:21:e8:
30:0a:c9:b4:26:cc:b1:87:7b:ee:87:56:34:39:3f:23:13:c1:
91:52:b8:03:3f:15:49:16:f4:12:47:27:25:24:33:81:4b:3f:
06:9b:75:97:64:9e:6e:dd:88:5a:67:3c:00:8d:2d:32:c6:b6:
df:06:f4:9c:16:b8:fd:0d:54:11:15:03:93:cd:4d:6d:cb:49:
77:ef:04:83:07:0c:05:5f:b9:0d:78:4f:f9:18:dc:bc:6c:6a:
9d:73:86:d6:fd:38:78:99:22:4d:a2:72:52:48:e3:15:c0:81:
39:a0:9f:ab:83:18:2e:3a:0d:4b:cd:32:04:9f:dc:45:41:b7:
f6:2f:93:58:f9:c8:d2:4c:e7:6d:df:ed:96:f4:e4:b4:f0:32:
1c:72:d7:48:d0:19:1d:7e:1f:89:b0:28:9d:bf:bc:49:d8:96:
10:9f:c2:f1:38:0a:9a:c1:86:fb:f4:a8:6a:4f:b9:69:b9:86:
eb:c5:80:02:0a:47:79:6a:f2:25:49:21:03:49:0f:0e:c1:c3:
0b:d4:02:89:d1:82:06:2c:1c:e5:4b:67:5e:d6:87:25:b3:72:
34:2a:7f:97:22:3a:73:00:e4:b7:45:44:af:1a:20:88:a4:14:
ea:e3:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:06:51 2026 by rpki-client