
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier: 6tmV+2amFaOXuZoVpyODZIzoaCVtB9gTr7rYRsiu2+o=
Subject key identifier: E8:39:9B:41:53:AF:4A:36:63:34:3E:0F:4D:91:74:56:EE:74:44:18
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial: 0D4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number: 0D41
Signing time: Sun 20 Sep 2026 18:05:22 +0000
Manifest this update: Sun 20 Sep 2026 18:05:22 +0000
Manifest next update: Sun 27 Sep 2026 18:05:22 +0000
Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: iP/LcFFabKbm0U1lhg1cqMKGMiktoUipht9iTARfHZw=)
2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: QMrRwT38xYy+ZuGesyjfpnO2OKgW20cjOQ+RUcdn94k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Validity
Not Before: Sep 20 18:05:22 2026 GMT
Not After : Sep 27 18:05:22 2026 GMT
Subject: CN=6ab02062-8ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:e9:3d:c4:73:90:d2:ea:85:43:fa:c7:34:
07:65:e5:a6:98:1c:62:74:ac:4d:04:cc:e6:de:f7:
15:ec:22:d9:8d:e0:d6:ee:2f:96:bb:a3:3d:c3:db:
44:68:6b:0e:ac:0d:81:aa:bb:d0:7f:d0:93:68:1e:
32:19:00:4c:50:3f:c0:df:48:4e:64:27:fa:8a:5e:
56:6b:84:69:5b:56:3a:a6:c9:47:74:7c:9d:f3:1d:
c4:5b:51:a5:dd:fd:c0:d6:3c:46:63:84:e8:fd:7b:
8b:6b:ab:01:37:e5:d9:ac:28:dd:f2:2b:e8:17:de:
e5:d5:e6:72:77:16:8e:f7:2f:e6:f3:07:1e:b9:be:
ea:83:cb:69:ef:24:52:0c:77:13:69:a7:0c:1c:a0:
99:23:6e:63:07:4f:da:23:39:73:1c:81:64:4f:45:
d6:f5:ea:d2:f7:b1:40:14:2a:92:52:39:0f:d7:72:
7f:ed:bb:96:74:d1:34:9b:97:cc:78:7e:f9:19:c0:
d1:34:9f:05:c1:67:63:ac:bb:bc:cf:a4:d9:9b:79:
05:e4:2e:71:8c:d3:2a:6f:bf:e5:27:75:9c:88:4f:
a8:7f:71:70:88:90:2e:01:87:24:05:74:75:2b:35:
da:73:d3:09:13:ce:c4:e4:61:3f:2d:c6:0a:f5:cc:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:39:9B:41:53:AF:4A:36:63:34:3E:0F:4D:91:74:56:EE:74:44:18
X509v3 Authority Key Identifier:
keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:93:e8:7c:38:76:e4:26:3e:b5:48:37:cc:b2:12:35:67:f6:
75:eb:ec:90:71:db:f3:5f:4a:1f:68:6a:8e:ad:6e:98:7e:d5:
a6:1f:d4:75:43:f4:30:4a:91:17:fb:62:c8:ab:09:6f:88:06:
11:38:3c:98:52:26:84:c4:56:f8:12:a7:52:29:31:9f:4c:e6:
71:55:1e:0c:24:ab:f0:f3:9a:9c:15:74:a6:30:9b:2c:a4:b3:
ae:77:ae:3e:0e:ec:48:05:51:93:3b:1f:d5:ac:eb:2c:c5:83:
28:2b:a0:93:b6:ee:72:6c:c1:c7:1e:21:82:47:e2:db:89:29:
b9:f7:ea:c8:72:c2:a8:2b:6a:30:8d:a0:dc:23:a2:6c:65:52:
39:92:bf:27:0e:37:f0:68:20:43:c9:d5:3b:43:f0:47:79:c6:
73:94:ae:cf:15:be:e0:32:56:cb:e7:58:f4:9e:4d:6b:7c:9d:
7f:b4:ed:36:60:a4:ef:1b:f9:49:11:e1:b2:82:56:75:be:26:
5e:e5:b5:ca:3c:40:69:61:c3:a5:72:5d:5a:de:21:7a:50:c6:
d5:c6:90:30:7e:96:a3:20:06:20:23:be:7b:60:79:dd:dd:0e:
ec:c0:3e:99:4d:61:3d:10:0e:47:07:c4:cc:ff:18:eb:a5:ec:
f4:32:bb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:03 2026 by rpki-client