
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json)
Hash identifier: +Boin75hASD9EcylCyZVWynOHqwsCYHJXZQ4W9YKeP4=
Subject key identifier: 31:C0:BD:93:F8:04:58:0D:4A:D8:90:76:FC:5F:A6:97:FE:62:1C:03
Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Certificate serial: 08C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
Manifest number: 08B8
Signing time: Sat 26 Sep 2026 20:40:26 +0000
Manifest this update: Sat 26 Sep 2026 20:40:25 +0000
Manifest next update: Sat 03 Oct 2026 20:40:25 +0000
Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: P7p06rD5wLoMgkF0OesT+rRkcHWc8StlbpBi6GVlFEY=)
2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: jge7X+MNv7ydTsqhAul87mOGnW+YO1JzoDIYM4IKKXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 20:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Validity
Not Before: Sep 26 20:40:25 2026 GMT
Not After : Oct 3 20:40:25 2026 GMT
Subject: CN=6ab82dba-d2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:59:86:d8:78:26:14:6b:35:28:5a:d8:77:
b1:99:fc:bc:e5:21:b8:84:2b:81:49:9c:4e:1f:c5:
b0:9f:63:ab:fe:cb:31:11:a5:aa:d3:df:2d:9d:c4:
5d:de:a2:91:6d:56:9e:f7:8e:36:90:8f:9d:9f:af:
6d:c1:38:07:b8:b8:df:83:e3:13:ca:7b:73:5d:d6:
69:33:58:5a:a9:fd:e7:8a:1c:84:fc:42:95:3e:be:
dc:5b:79:e6:09:05:b2:9b:54:80:89:60:6a:45:00:
9e:0f:f1:45:3f:5f:a7:58:5d:b7:a4:be:3f:16:35:
df:60:49:9e:62:85:e4:e8:c1:c1:c9:82:fd:53:71:
1a:68:fa:78:43:a9:05:a1:af:82:f8:7c:66:73:be:
f1:8d:7e:3b:fa:c9:aa:8c:63:b1:54:56:4c:80:0d:
30:34:fc:f1:5d:d0:34:40:03:c4:c1:97:58:2f:46:
72:59:e7:e0:0b:3e:45:96:87:03:66:cd:d5:d0:1b:
a5:da:6b:b5:5b:11:84:6a:c9:81:a4:79:d1:6b:db:
7e:bb:56:c9:88:ee:42:81:dc:4b:cf:67:eb:1b:93:
f7:f7:d5:ef:d3:96:b0:50:a5:a9:78:21:a9:54:81:
aa:73:a5:3e:71:d7:d7:f5:45:ff:83:59:5f:50:a1:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C0:BD:93:F8:04:58:0D:4A:D8:90:76:FC:5F:A6:97:FE:62:1C:03
X509v3 Authority Key Identifier:
keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2d:6c:55:de:48:2c:6b:8a:51:33:b4:0c:bf:a3:88:f4:53:
e8:97:8c:17:21:0b:9d:e7:10:1b:0e:29:17:c4:36:4e:00:56:
59:be:6a:c5:79:8a:99:22:0a:d3:e1:79:dd:3e:6d:e5:56:13:
d3:21:fb:d7:e3:81:55:40:71:14:d0:3b:db:ba:b8:ce:b3:78:
aa:3a:eb:13:a2:b2:8c:3c:0c:1e:82:e6:a4:f7:ce:31:23:be:
1b:3a:9e:9d:56:e2:b9:78:87:ba:43:23:56:6b:01:d9:43:85:
fc:48:f3:e9:6c:12:34:40:6c:49:ad:de:0e:4f:3d:7b:82:66:
50:ec:c8:6d:f5:6d:f1:ca:e5:84:76:ee:c7:1f:2a:0e:43:9a:
10:69:d9:58:c6:85:46:2e:c7:78:27:95:f3:d6:94:e0:4e:74:
ef:f8:eb:9f:66:0a:3d:63:a7:c6:bc:06:95:a7:6c:63:0f:7a:
36:48:3a:91:4d:1d:24:a7:1e:ba:f7:e3:22:ec:68:1b:69:04:
c8:b2:0b:c8:63:c8:fb:40:4c:5e:7f:0f:a8:46:d8:64:34:aa:
05:5e:81:c5:94:8a:9a:ad:34:08:8f:05:38:31:d2:87:cf:d0:
2d:d3:9c:d1:3a:32:4b:36:49:03:18:28:e5:58:9b:39:51:85:
32:d2:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:24:03 2026 by rpki-client