
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json)
Hash identifier: aj/mPZmV0mGt6xIn3dz9h++hqc80SlCsw/ikrYiiun4=
Subject key identifier: 36:B3:84:6D:EE:1F:58:B3:BD:EA:A7:23:9C:9E:B1:44:43:D3:5F:3F
Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Certificate serial: 087B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
Manifest number: 1101
Signing time: Thu 24 Sep 2026 20:43:46 +0000
Manifest this update: Thu 24 Sep 2026 20:43:45 +0000
Manifest next update: Thu 01 Oct 2026 20:43:45 +0000
Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: M7uN8JLrsgzrc/9ZVfL+4IkYp0zremvMMQJf2eYUqXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl
rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171 (0x87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Validity
Not Before: Sep 24 20:43:45 2026 GMT
Not After : Oct 1 20:43:45 2026 GMT
Subject: CN=6ab58b81-27a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:ba:7b:8e:a6:8e:e1:e8:bb:6e:69:57:74:
78:24:d3:d6:b4:65:5b:78:17:2c:2c:96:36:c4:9f:
f0:fc:b5:ff:e2:94:a7:5c:90:92:5b:72:3f:4c:51:
45:be:39:96:e1:41:82:08:6c:15:5c:61:85:35:97:
91:7a:04:2c:5b:7b:c1:f6:51:6b:26:21:0a:46:e3:
c7:be:58:29:ec:e8:9b:cd:d1:ec:24:58:28:fe:41:
e2:8e:e2:5a:36:bf:6e:5b:70:44:ed:2b:59:5c:57:
61:8c:d8:83:c7:c0:d6:7c:ec:54:68:c0:b9:8f:03:
78:18:a1:45:2d:65:7a:58:30:29:6f:9b:42:f0:96:
5d:04:5d:5b:e8:f8:63:0a:a4:75:78:21:e8:8f:99:
0b:03:62:3b:db:ad:15:d1:2c:b4:4d:15:a9:89:09:
6b:57:81:93:15:92:26:2d:eb:f5:f8:53:26:06:1b:
96:69:a9:93:bb:c9:1b:79:db:f8:cb:49:3d:87:72:
7d:49:17:af:c1:4f:13:da:45:03:a8:71:66:85:42:
83:05:95:ff:eb:5b:31:b9:8a:30:26:30:b3:4f:de:
3d:e3:dc:7d:4f:65:dd:43:68:fa:7a:f6:74:01:39:
e7:02:c7:dd:17:5e:ab:44:a6:85:a7:01:ed:eb:c9:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:84:6D:EE:1F:58:B3:BD:EA:A7:23:9C:9E:B1:44:43:D3:5F:3F
X509v3 Authority Key Identifier:
keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:89:19:06:f6:1c:d5:53:9a:17:9f:7a:1f:4e:39:19:a0:50:
69:1e:a4:2a:20:f3:9d:e4:fe:c4:6b:ce:01:1b:29:82:13:30:
07:c7:5e:0c:da:d2:c6:2c:74:16:62:a1:d2:0a:02:1c:c2:6c:
6c:fc:05:55:5d:d6:98:6c:21:c4:05:57:7f:61:f4:dc:f6:e0:
d5:5f:36:cb:fc:29:83:b5:e4:87:43:52:7d:11:0a:7f:50:1d:
84:7d:5d:cd:e6:42:2e:bb:cd:fb:f5:d8:74:0f:b7:94:08:be:
e1:35:f2:d9:33:c5:ce:61:04:e4:b6:bd:d9:83:a8:c0:3f:27:
86:5a:89:d4:dd:a8:9b:91:2b:85:68:b4:92:a1:60:df:ef:8e:
5e:19:3e:7f:e6:a8:84:59:e0:d8:6e:5b:13:f4:c2:42:0e:c5:
5f:fe:fe:da:50:f4:98:22:e0:93:07:79:9b:94:64:8d:e5:93:
d8:c2:25:3b:0a:b2:3f:91:eb:c5:5b:93:1f:34:25:3b:a1:f6:
e5:94:fc:c2:9f:01:66:71:c7:f8:36:34:56:a9:12:d3:19:8d:
13:a6:52:25:8b:aa:fb:ae:cf:25:3f:47:6f:26:99:bc:54:11:
ab:7f:46:e6:3a:07:8a:08:31:86:ba:81:cd:e2:26:19:31:c4:
7c:e0:1d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:27:03 2026 by rpki-client