
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
File: YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json)
Hash identifier: tJ2xDT9ostcGvy8opLjFjf9iWex9sQl2xnu+UUtMIB4=
Subject key identifier: 83:65:42:CA:B0:07:6E:2C:B9:D8:B9:B7:A6:5F:A9:41:CE:2C:6D:0D
Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Certificate serial: 053F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
Manifest number: 0536
Signing time: Sat 10 Oct 2026 23:35:33 +0000
Manifest this update: Sat 10 Oct 2026 23:35:33 +0000
Manifest next update: Sat 17 Oct 2026 23:35:33 +0000
Files and hashes: 1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: /ctyhzrSof3QAIWTKw9raK1saxj/3YC0wlZXEQ0/WTI=)
2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: QGxKWKuwU4koWUT3cHCTo7iWv57eqY9PU0NUcULxizU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1343 (0x53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Validity
Not Before: Oct 10 23:35:33 2026 GMT
Not After : Oct 17 23:35:33 2026 GMT
Subject: CN=6acacbc5-7dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:70:19:00:50:2c:a7:4d:42:06:92:9e:40:
fa:09:2c:17:ca:1a:15:3c:b3:ff:cb:3f:7e:1a:fe:
41:f4:0c:90:be:5d:c2:77:66:5d:bc:09:54:71:61:
36:c5:fd:7f:28:75:84:66:5e:ad:df:a6:95:41:f6:
73:13:18:34:ef:06:c4:58:cf:88:de:59:74:25:6f:
46:00:37:25:fb:f2:80:bc:3c:fb:68:65:74:a4:8f:
52:92:7e:97:39:e0:08:33:eb:53:9c:7e:a9:4f:c3:
b3:3c:66:e9:28:58:35:dc:6e:c7:c2:61:9e:d3:ea:
08:19:d8:29:c0:79:3d:08:41:88:13:31:72:86:de:
5f:c4:f2:80:21:b8:f3:d7:b4:89:f5:50:e6:5c:92:
2a:18:bb:44:60:d7:51:55:7f:17:b7:b2:ce:40:fb:
41:38:99:c1:7e:68:02:a0:4e:95:0a:f5:76:ba:bc:
c8:78:79:33:e4:59:8e:5a:3d:c0:1e:8e:a6:7a:f8:
ea:0c:7f:c9:2a:69:15:31:7b:f7:5a:e1:f1:c6:f5:
21:1d:07:d6:57:50:75:92:a6:a2:fb:e9:aa:36:06:
e3:2c:d9:6b:da:b2:27:51:2b:8c:3e:bc:c4:05:36:
c9:2c:b7:e5:ff:9b:88:db:4d:2b:28:9c:52:09:ed:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:42:CA:B0:07:6E:2C:B9:D8:B9:B7:A6:5F:A9:41:CE:2C:6D:0D
X509v3 Authority Key Identifier:
keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9d:76:69:a5:44:c2:4a:d4:08:df:c0:83:94:75:99:0f:ba:
65:ed:4c:a6:be:74:20:bb:ae:11:22:d4:17:62:18:1d:da:18:
3d:01:c6:1b:51:52:02:d9:a7:a8:e4:a2:d7:a4:d2:cc:4b:5d:
e2:fa:a7:a8:fd:67:6c:fb:95:d3:51:88:b4:92:ed:e1:3e:38:
d0:ab:74:62:03:57:0e:91:c3:37:55:84:e7:62:34:81:0c:c3:
c9:73:e8:20:8e:9a:51:bd:3c:69:92:14:f1:82:cb:a2:9f:ba:
da:8f:1c:62:66:65:2c:90:b8:08:c0:ad:14:ff:8d:16:7a:c2:
24:cb:fb:65:98:f1:ce:21:98:4f:74:1c:0e:87:51:7f:04:f1:
f0:6f:46:1e:36:6d:2a:53:e4:ee:a7:3b:7b:48:b9:9f:87:0e:
3c:8b:ef:0e:06:46:9c:7c:cb:27:50:0c:20:1d:7e:96:29:ce:
17:41:a5:31:58:f4:1a:72:d7:42:e4:fd:f7:ba:d0:b3:2c:50:
14:b4:fb:a7:21:5d:54:e4:4f:e9:c7:ed:9f:4e:12:70:5a:f1:
b1:22:de:e6:96:34:b7:f4:89:86:5d:ba:27:cc:d1:28:f1:23:
14:2f:db:71:61:06:c8:95:56:c4:65:0f:79:53:d7:3c:b6:59:
cb:96:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:35:50 2026 by rpki-client