
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File: Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier: xzFgF1bv7Zzulc3NPkfPHZTCxtHiJcQqFtKEUGmKyS4=
Subject key identifier: A2:E9:49:97:EE:19:CE:69:81:15:94:05:3D:77:49:45:A0:B4:D3:66
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer: /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number: 02A5
Signing time: Mon 21 Sep 2026 01:36:20 +0000
Manifest this update: Mon 21 Sep 2026 01:36:19 +0000
Manifest next update: Mon 28 Sep 2026 01:36:19 +0000
Files and hashes: 1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: /S6n61lYyiqOI8bf5vcCazdRkjyUdnV1X5pZd6YjrwQ=)
2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: IMnX87QNvHpbvo82n1RR69kUclsVgTYA0yTOvxNI1Gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Validity
Not Before: Sep 21 01:36:19 2026 GMT
Not After : Sep 28 01:36:19 2026 GMT
Subject: CN=6ab08a14-10f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:04:84:ec:91:b5:93:3e:52:0f:6a:9d:6c:
3b:50:79:0c:fb:8e:2a:3b:f5:27:e8:b7:0e:f8:ab:
88:b9:39:86:35:83:13:73:36:a2:21:67:2a:8d:20:
6d:f0:75:1b:5e:5c:b6:54:91:3b:06:55:55:3c:af:
e2:ed:33:18:b9:fe:4c:9a:41:72:15:d1:97:82:c1:
88:77:66:82:e6:22:96:4b:03:00:ad:dc:da:bf:94:
fe:a7:83:17:66:2d:be:c6:a8:56:e8:db:34:e5:8b:
1a:94:d7:a4:9b:ce:70:db:b0:12:8d:4c:a0:15:52:
e6:1c:8e:0a:67:da:e3:23:74:a0:3c:c1:c3:24:bd:
a0:e6:b7:3b:7d:a4:81:8b:99:5e:41:ba:aa:58:fe:
01:f0:8d:e3:48:61:a6:24:e3:44:4a:58:a8:5b:ec:
3f:da:c5:db:3a:33:49:b0:ce:c1:60:7c:78:a9:15:
93:c0:2a:2b:93:8a:84:24:56:3f:91:78:e8:ae:f5:
27:d3:67:1c:4b:15:c7:b0:07:f1:05:28:4d:ab:c6:
bc:6d:2b:d4:05:f3:c3:68:7e:77:fd:b1:3d:4a:f7:
ef:c7:cd:0c:41:83:33:e4:c5:34:8e:12:ae:c5:3d:
0b:41:b1:85:14:a4:b4:40:eb:7f:e9:b5:7a:1b:7c:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:49:97:EE:19:CE:69:81:15:94:05:3D:77:49:45:A0:B4:D3:66
X509v3 Authority Key Identifier:
keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:95:27:7f:eb:33:d8:c6:2b:4b:6c:40:ca:39:54:57:85:5c:
b6:2e:2c:70:70:d1:af:2f:7b:6a:40:8c:76:f7:73:56:9e:6a:
4f:13:af:71:6c:b4:38:49:15:1b:63:2a:e2:7d:60:d2:23:a6:
a9:78:91:55:44:d7:e4:99:6d:c2:bd:4c:bf:47:4d:67:cf:08:
ae:70:ed:ce:41:41:51:cb:1a:b6:7c:33:6f:55:7b:01:e5:19:
0a:8c:51:3c:bd:63:62:cb:36:55:47:03:5b:2f:2c:5d:85:e7:
8d:16:96:74:cf:83:63:aa:22:f3:53:f5:70:16:c8:62:8b:47:
4b:4b:99:45:26:a1:3e:b7:22:37:9b:6f:c4:18:98:0c:e8:bc:
f3:9e:9d:25:77:43:66:4b:de:d1:40:bc:cb:6b:2e:55:76:24:
23:24:a0:f6:5a:7d:2b:44:e6:aa:d9:0a:ec:ae:e6:0b:b6:60:
bb:c9:3f:a6:33:7e:94:22:a5:ad:13:c2:eb:bc:9d:d3:77:b2:
07:77:17:0d:0c:72:93:be:f1:32:74:0d:cc:0b:c4:39:66:2a:
25:77:f9:c3:e2:c1:66:1a:82:e0:77:26:b4:a0:fa:61:58:6f:
74:78:bb:1b:23:01:e6:d5:b9:5d:58:fc:f2:a9:4a:10:d3:b3:
57:0e:c0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:35:06 2026 by rpki-client