
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json)
Hash identifier: k5Zi6bI7BQHMx3k8/UWFO6ZAOqU3QozqhttyXEvx5dY=
Subject key identifier: E8:9C:14:FE:BB:6C:C4:39:8E:C1:AB:B9:F0:16:C4:A8:3A:27:49:E8
Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Certificate serial: 0469
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
Manifest number: 0462
Signing time: Tue 22 Sep 2026 23:45:30 +0000
Manifest this update: Tue 22 Sep 2026 23:45:30 +0000
Manifest next update: Tue 29 Sep 2026 23:45:30 +0000
Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: hWk9rwelktJiuIinAX7WiK4AyAni8iO0n53DuQiwPcE=)
2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: Wrx7+0yyE0y6mHBZKupTJpJMKjJY9lireuqMWBGxSlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Validity
Not Before: Sep 22 23:45:30 2026 GMT
Not After : Sep 29 23:45:30 2026 GMT
Subject: CN=6ab3131a-fa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:20:03:08:67:ed:16:8a:38:6d:70:d8:dd:
97:9e:64:cd:da:1c:0e:66:bd:5f:f0:8a:5c:04:25:
ef:c1:d7:d3:24:c3:6b:15:dc:e4:43:ad:1f:12:56:
ea:49:2b:f3:d8:a6:6a:c1:08:cc:bf:78:62:ce:c5:
1e:bb:c0:e0:a5:a5:ec:61:ff:56:f7:83:12:32:74:
de:54:59:f1:d6:a5:8d:73:fe:6b:39:0a:cc:e2:34:
c0:d8:4e:6f:21:48:1b:2d:13:92:60:a1:28:ba:c6:
42:66:2e:06:fe:3a:30:53:59:8f:a1:5c:56:61:f8:
46:f3:8d:e1:30:96:e9:18:fa:ca:83:40:b4:17:2b:
35:f3:58:3d:29:f1:66:bf:41:fb:48:59:ac:c4:88:
dc:fd:96:70:b5:9a:1a:cf:64:88:19:d4:29:6d:0c:
c9:ef:6f:5f:9b:e7:c2:f4:70:b0:be:45:14:cd:ba:
99:af:ab:8e:ff:e2:71:d8:e9:21:0e:0e:10:f0:8a:
7f:28:35:92:05:54:16:e5:b7:2c:0c:7c:d3:29:2e:
02:4e:43:81:71:bb:da:15:f2:5d:94:8f:ba:83:f5:
00:34:98:20:f8:ba:7c:6d:81:12:6c:c2:1d:79:a4:
c1:5a:7f:b4:2a:92:9a:18:d4:01:f4:92:fe:9a:68:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:14:FE:BB:6C:C4:39:8E:C1:AB:B9:F0:16:C4:A8:3A:27:49:E8
X509v3 Authority Key Identifier:
keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:0c:83:9f:d5:d3:12:6e:6c:81:8e:63:b0:b3:40:f9:69:
84:82:7c:65:a1:17:5e:1b:f9:43:4d:d6:17:b1:8e:cc:2d:bd:
d2:e5:d7:7a:77:ff:a9:c8:ec:1f:da:a1:a8:eb:e5:51:da:2d:
5a:a1:af:55:72:97:b9:ca:ca:f5:58:70:5d:ba:1f:d1:83:ae:
bf:02:23:53:1b:2d:ed:82:22:59:17:cd:a2:1a:a0:15:2d:66:
fa:74:5e:93:a5:c9:e5:90:bf:8b:4b:0d:19:84:ef:5f:1e:33:
6b:e5:1a:0e:68:90:4c:d3:1f:9c:31:e0:ca:c9:22:38:98:1c:
61:c2:d8:6c:4e:c8:d2:28:82:03:cb:f0:32:fb:da:65:fa:15:
cf:05:d1:5c:6f:bb:7c:e1:cd:54:e6:bb:35:47:0b:f7:fa:04:
5d:e0:58:46:d4:d7:cd:51:2d:75:7e:8a:12:30:56:2a:b3:fd:
fe:de:6d:27:5f:97:e7:4d:6c:71:3e:4e:76:f9:de:6b:6b:e2:
e7:4b:d8:b2:b6:49:47:ef:59:a6:a2:60:c5:19:48:0b:27:fe:
d7:3e:63:60:4f:ec:71:2f:32:3e:9a:0b:01:7f:f8:66:bc:80:
5b:2e:d0:5f:d4:bb:6d:e7:4d:87:81:56:be:c9:01:be:93:7e:
ce:d5:db:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:26 2026 by rpki-client