
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
File: Y06sGbStSypNQSgRX59VZ5TMdSM.mft (raw, json)
Hash identifier: ssW3pEyT8B6Nk1L8LRslJm6aoKmb7j2GPvNuffeyBZQ=
Subject key identifier: 8A:3A:53:07:A5:FF:9E:90:67:28:88:8E:0C:DA:86:F8:F4:E3:19:E3
Authority key identifier: 63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23
Certificate issuer: /CN=A91647ED/serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
Manifest number: 9D
Signing time: Mon 21 Sep 2026 07:22:29 +0000
Manifest this update: Mon 21 Sep 2026 07:22:28 +0000
Manifest next update: Mon 28 Sep 2026 07:22:28 +0000
Files and hashes: 1: Y06sGbStSypNQSgRX59VZ5TMdSM.crl (hash: z4UdPbOvws/PVs9ufxUGJ8D1PgGhOEdSf4ybwIxoy7k=)
2: F479571EA9E811F1B4B821653A11F970.roa (hash: AxdW5DLzXquSXQ5Nrhb4JxNTR1hChqtfyBA1g4oquxM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl
rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91647ED, serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
Validity
Not Before: Sep 21 07:22:28 2026 GMT
Not After : Sep 28 07:22:28 2026 GMT
Subject: CN=6ab0db35-6195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:68:29:d8:82:2a:36:23:f0:62:e7:a7:27:
5c:bb:a5:27:07:1b:ca:31:d1:79:a7:99:6c:d1:4b:
b0:19:06:cb:c9:2a:99:99:92:4a:72:15:24:52:64:
bf:a2:dc:1a:aa:ad:c7:97:f4:19:ef:ee:1f:ee:90:
d0:8e:a4:88:b0:a5:98:fd:18:da:61:37:13:62:28:
f7:b1:92:a4:33:d0:7b:1e:7b:50:b3:89:17:52:28:
20:2c:68:a5:7a:2f:d5:27:fe:64:44:c2:83:ab:dd:
dd:7b:bb:58:ff:d9:bc:c0:7c:9c:bc:1a:24:02:f1:
fc:6f:ee:91:d5:5c:0a:e2:1d:22:c2:ca:5c:33:cc:
79:66:48:3d:db:35:e1:25:e8:45:49:7f:e9:6a:d9:
e0:4b:c6:b9:2c:5e:59:fe:e8:51:2a:1b:b9:44:48:
1a:63:37:e2:e0:3a:2b:f9:17:70:ea:7c:bb:a8:36:
45:86:09:f6:73:13:3e:c3:bd:eb:39:5f:34:5f:d1:
68:bb:9c:d0:b4:f2:17:d4:ec:17:c5:51:9e:a3:a1:
84:d9:fb:64:8e:40:e4:c6:82:fe:ee:af:19:95:a8:
b8:f2:c4:b1:a1:54:3a:2e:96:44:ae:01:c8:f7:e4:
42:b6:33:a5:10:34:cb:c6:39:f7:f9:d5:e4:8d:67:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3A:53:07:A5:FF:9E:90:67:28:88:8E:0C:DA:86:F8:F4:E3:19:E3
X509v3 Authority Key Identifier:
keyid:63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3c:23:7b:cd:e9:a7:d7:ca:1c:22:1c:76:ec:a5:ef:39:0b:
b1:0b:0b:b9:2f:94:33:4e:be:f9:67:5c:14:88:45:c1:b4:bc:
3f:b0:b1:25:77:ba:4a:43:a2:5e:b3:bb:dd:8c:40:20:ee:70:
99:ce:03:ff:73:b8:36:dd:f2:49:9f:df:2f:7b:74:2e:96:73:
b0:fa:96:2c:a8:83:6b:c5:1d:f7:b3:99:ec:f3:f5:70:43:67:
70:73:c6:bb:7f:3e:d5:6b:da:3e:58:8f:bc:5c:45:97:6a:d3:
1b:e3:21:21:ee:d3:3e:64:78:30:4b:0b:7a:14:36:da:27:95:
5a:d0:3e:89:49:7e:ba:ef:b9:7e:f8:f8:02:52:ba:4e:71:24:
5c:2a:18:75:9c:cd:12:6b:a1:26:28:87:4c:17:35:e6:fd:ac:
39:86:26:a6:93:6c:c9:a0:40:bd:39:8c:2e:ea:ff:e2:21:11:
05:c6:e1:55:1f:f7:e7:b2:fe:aa:71:b9:42:9b:07:a5:a5:11:
9a:fa:19:2d:d8:16:40:66:38:bc:a3:4c:42:80:19:4e:61:65:
c1:ec:f0:f7:d0:74:c5:e4:ba:b5:50:a5:c5:03:2c:2b:56:95:
44:33:1b:48:08:dc:e5:33:5e:62:cf:fa:b3:be:25:e9:5b:81:
be:ff:92:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:36:20 2026 by rpki-client