
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File: YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier: SZb3jJM9EN2jquDBZInxsIEjKPBAktPq8niSwcJvp88=
Subject key identifier: 03:BA:9F:3A:E7:78:A7:35:DF:50:CF:2D:C4:3C:5D:03:0D:B7:DC:05
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer: /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number: 01DF
Signing time: Wed 07 Oct 2026 03:59:45 +0000
Manifest this update: Wed 07 Oct 2026 03:59:45 +0000
Manifest next update: Wed 14 Oct 2026 03:59:45 +0000
Files and hashes: 1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: 0r6e03FcjroDX2TmLOkiepx/ylXudvf3T2m479RWlvI=)
2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: eGXhWTghID7LXCNSIEK8G8iUBL46dL5mXlz39bqNtkc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Validity
Not Before: Oct 7 03:59:45 2026 GMT
Not After : Oct 14 03:59:45 2026 GMT
Subject: CN=6ac5c3b1-9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:36:03:a8:5d:ca:32:68:f5:a1:6b:72:6f:
5a:6b:f3:1d:98:f2:8e:c1:34:a9:e9:4c:3c:79:41:
d9:cb:e0:d5:ec:52:5b:83:e5:9a:a1:f1:85:7a:98:
18:8e:9c:2f:2b:47:c2:19:e1:c6:cb:bb:0e:3c:55:
1b:54:60:d8:95:fa:1d:39:a1:d3:76:8d:65:dd:62:
f2:9e:10:3d:15:c8:e0:22:d5:ce:60:ca:fd:df:ea:
8f:27:ef:a2:73:da:8d:66:e9:9b:f0:4c:74:1f:e4:
c1:21:4c:73:ef:c7:1d:5b:03:b5:eb:61:e4:1c:18:
70:69:51:75:e8:9f:f9:37:1e:99:90:ff:1c:0a:95:
b9:0d:97:00:5b:91:fd:a8:da:22:37:d2:17:7b:03:
99:e1:3c:8b:26:69:50:13:d3:71:ab:47:8d:66:0f:
eb:02:d1:22:4f:62:17:f8:2c:66:fc:25:43:b8:67:
8b:bd:01:c3:8e:ac:9e:79:25:8b:1a:b1:6e:ce:1f:
0c:7e:07:c0:5d:6d:66:f3:a7:97:9f:90:02:da:11:
61:9b:ab:4e:57:21:8c:87:14:48:72:33:9b:8f:93:
c4:c7:cf:5f:a3:75:67:ed:ac:09:d4:ce:ad:ae:52:
5e:11:44:e6:1e:d7:48:e2:85:a6:2d:04:f5:20:41:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:9F:3A:E7:78:A7:35:DF:50:CF:2D:C4:3C:5D:03:0D:B7:DC:05
X509v3 Authority Key Identifier:
keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ee:a6:fd:46:82:03:7b:8a:b4:86:70:fd:fb:2f:24:09:e4:
70:54:75:5a:3c:61:af:e6:c2:68:2d:9a:ba:ac:36:03:9a:29:
72:cd:42:8d:90:a9:ed:22:09:1e:12:48:3d:a5:97:33:04:fa:
3f:3a:6b:03:66:52:0e:00:0e:a9:da:61:60:75:a8:19:f4:31:
f8:e3:33:fa:72:6d:e0:e0:9a:d5:25:9b:08:7e:69:fc:f7:fc:
40:d3:1d:3a:65:a0:3a:8d:72:d2:93:8f:db:c4:6a:54:86:b3:
63:cb:6d:de:24:af:58:fb:ad:e5:72:bb:f2:1d:8c:77:f4:ac:
77:61:ed:06:cb:6b:87:e8:2d:62:53:b1:ba:5d:ed:21:e3:46:
3e:f1:56:eb:fa:e0:23:5d:49:43:1f:53:9e:7b:1a:7a:be:ec:
c1:dc:d0:94:d5:51:20:0c:04:57:07:0a:c4:9c:13:76:99:74:
d2:34:05:41:4e:dd:32:e7:92:6a:9a:6e:0e:8c:4c:62:c3:bf:
2e:e6:04:7b:55:d2:60:89:6f:9a:96:f1:4f:23:ae:3e:a3:fc:
32:e3:aa:88:c4:51:f1:07:4f:2f:90:17:96:4e:5b:ba:ed:ff:
36:d4:05:c5:00:58:5b:5b:b4:05:93:b1:80:aa:bc:5d:be:0a:
36:bb:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:41:23 2026 by rpki-client