
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
File: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json)
Hash identifier: +UYFXgPXcD+gcmw5aqjbiCDdiC+umL4OyzSg5pEpIh8=
Subject key identifier: 42:0B:76:89:FC:E0:1C:F9:47:F4:1B:FA:EF:27:3E:7C:BE:E4:EF:14
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Certificate issuer: /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
Manifest number: 98
Signing time: Mon 21 Sep 2026 07:30:46 +0000
Manifest this update: Mon 21 Sep 2026 07:30:45 +0000
Manifest next update: Mon 28 Sep 2026 07:30:45 +0000
Files and hashes: 1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: C14Af3e+eiEnPPIhwbg9oh9EKYTZHvmcBlr5JssVf4g=)
2: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=)
3: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: 77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Validity
Not Before: Sep 21 07:30:45 2026 GMT
Not After : Sep 28 07:30:45 2026 GMT
Subject: CN=6ab0dd25-dfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:73:ec:12:04:43:d2:98:c6:a8:6d:c3:b8:
c9:7a:da:a2:57:56:3d:34:64:2f:f8:2f:11:43:b9:
aa:7f:d6:21:e3:71:7a:ba:ed:06:15:8b:8f:26:a2:
a0:59:ac:7c:fa:f3:a7:bf:d4:68:13:8e:da:74:ca:
03:99:9d:e3:fe:b4:1e:65:ad:d1:51:f9:a8:91:24:
a1:58:90:3d:10:b2:0a:d2:54:0c:4e:e8:ac:bf:f4:
d6:97:78:70:c8:e8:a4:b5:ca:b3:5a:87:73:03:44:
a6:ba:d9:f9:14:56:33:33:6d:c5:6b:d8:b2:33:54:
c7:ba:4c:16:86:eb:45:ad:3b:91:43:0d:af:d1:de:
88:b8:7e:f3:1d:32:1d:c2:d3:e2:ff:2e:92:b5:81:
a0:99:5f:46:e0:2b:08:66:f3:b9:ae:c2:1c:53:e6:
c8:5c:db:e0:9b:33:33:d6:be:12:43:fd:e2:43:28:
55:df:fc:d6:73:97:17:00:eb:a1:e5:4d:78:c9:9f:
09:3e:b1:27:4d:32:0f:67:da:82:b6:f2:e8:33:be:
ec:42:54:db:c2:b4:55:71:2c:1c:6a:4d:2d:10:f4:
d1:50:fd:65:01:53:ee:3e:b7:59:f4:eb:c9:dc:ec:
eb:ce:27:3f:17:58:81:ce:34:06:09:9d:53:aa:0e:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:76:89:FC:E0:1C:F9:47:F4:1B:FA:EF:27:3E:7C:BE:E4:EF:14
X509v3 Authority Key Identifier:
keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:30:43:9b:d0:a3:01:45:fd:da:7e:b5:c7:ac:67:4a:74:0c:
74:e6:5d:c7:02:1e:4e:e6:78:35:e9:4e:2a:ee:56:6f:82:56:
64:e5:66:b6:ab:b1:65:e4:a0:13:f9:a3:0e:83:16:da:0b:e3:
90:da:5f:f2:fa:e3:ed:2f:b9:49:e7:76:7c:37:8c:d7:30:39:
16:93:b4:e4:ae:da:c6:c1:57:4f:fb:1e:ac:07:6e:dd:e2:5d:
e9:1b:b4:5d:0a:57:5b:2d:65:f3:84:22:4b:af:94:8b:7a:cf:
c9:36:c2:1b:ab:b5:58:68:67:aa:63:86:94:d5:81:89:45:ec:
87:39:be:89:ca:61:e9:25:f0:c4:94:b7:4d:8d:24:fb:21:fb:
81:18:1d:54:4f:08:40:2f:12:0f:1e:72:7f:45:76:09:e3:db:
27:c2:7e:c2:5f:92:65:4f:b0:ae:f8:c4:3a:d8:e6:10:12:22:
98:2e:c5:55:5d:a9:1b:a2:25:73:81:00:9e:08:89:a1:ee:6a:
ee:8f:f6:12:cf:31:85:44:f2:35:8a:f7:3f:c3:59:e8:f1:8b:
a8:bd:76:68:c2:75:96:59:ac:00:03:a8:b4:83:04:ba:c9:64:
2c:c8:09:d5:2a:40:19:8e:2f:02:3c:8c:1e:2e:34:01:05:a4:
66:71:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:54:20 2026 by rpki-client