
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json)
Hash identifier: lZfrE7SP7UR5kyLkrg4pwgVnviLP35Te/4K7W1N3gBU=
Subject key identifier: A2:8F:29:E4:02:14:98:87:13:09:87:A0:D2:97:41:65:1B:E1:62:6B
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial: 06AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
Manifest number: 06A5
Signing time: Sun 20 Sep 2026 22:19:27 +0000
Manifest this update: Sun 20 Sep 2026 22:19:26 +0000
Manifest next update: Sun 27 Sep 2026 22:19:26 +0000
Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: sIH0EBBHsXL+4cN78i3dK2bPXeFi0En99BU2GFnL2ao=)
2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: 4mnGG9mctkzjRMjeZiJm8EP2Ry3MqPxpfShzQMCXH5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Validity
Not Before: Sep 20 22:19:26 2026 GMT
Not After : Sep 27 22:19:26 2026 GMT
Subject: CN=6ab05bef-c48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:8d:38:53:bb:70:67:23:dd:a3:69:bd:5f:
e6:15:94:e7:1e:02:9c:20:ca:d0:4c:32:95:38:42:
eb:98:39:0d:87:17:9e:37:a6:8a:0d:53:75:9c:85:
e3:f8:ca:40:71:40:c5:1b:bf:2b:7b:bf:d0:b9:20:
26:f3:61:73:bf:5f:f2:3c:06:81:3d:29:08:5b:1b:
e2:84:00:d1:4f:a4:aa:91:7d:82:af:1b:d6:5c:ce:
d5:17:2e:dd:e6:0e:32:55:03:b1:67:19:f7:08:0a:
e8:59:41:ae:91:2c:68:f5:76:80:88:ac:20:0b:a5:
39:b2:25:62:86:1e:06:67:df:0a:59:d2:85:eb:e4:
d6:8d:21:81:b6:fd:6f:a4:fd:fa:f5:52:d1:d2:07:
f9:81:a0:68:4b:fd:26:c5:d0:0b:16:48:c8:29:ee:
ad:7a:46:5d:55:63:42:22:cf:3d:bd:33:fe:49:b1:
cf:90:19:33:d8:10:97:d8:b9:21:20:3a:df:c5:e2:
b0:41:13:e8:bc:7b:d0:eb:a4:33:a8:e4:4a:46:45:
1b:72:e2:bc:f0:cb:68:fb:51:2c:fe:8c:03:95:e2:
7e:23:88:8a:47:0d:17:be:44:68:4a:5d:3b:c0:c7:
5e:4d:8e:d3:4e:4a:a2:92:f8:7a:61:fc:30:3f:45:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:29:E4:02:14:98:87:13:09:87:A0:D2:97:41:65:1B:E1:62:6B
X509v3 Authority Key Identifier:
keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:85:27:b6:26:d2:d6:a7:4d:90:13:0d:b4:9d:07:09:14:0d:
7e:8b:9d:0a:60:5e:e1:c3:97:01:8d:95:4c:e3:45:f4:4e:5b:
67:18:bb:5f:c2:87:c6:d4:b5:b3:cc:08:1f:56:d8:0e:76:38:
c5:45:4c:01:78:8a:31:1d:68:33:45:bc:29:e9:ab:26:4f:3a:
eb:fc:47:8f:2f:ba:bb:53:69:4f:14:b8:d0:91:c0:9f:f8:5a:
8e:b8:ed:8f:b2:98:e4:42:ee:95:83:af:bf:da:b9:5b:da:de:
f9:ad:37:dd:e8:3e:a2:4d:a2:bd:21:25:56:be:19:50:b8:17:
f8:69:76:a5:d0:58:d2:a7:12:2a:ce:f6:65:56:f2:e4:1e:6c:
6a:5b:c5:88:1a:ca:a7:3a:1e:a3:b0:99:17:fd:aa:1c:20:fa:
34:9f:49:02:0f:d4:b8:4a:b2:17:25:02:e9:51:56:ea:4b:ba:
cc:eb:dd:59:af:af:85:cd:c8:ed:0d:d6:2e:9a:b6:76:1a:82:
f0:c9:87:6e:b9:83:dd:63:79:10:4e:ed:18:2f:a9:99:b6:16:
ac:4a:bb:8a:22:9a:02:57:09:a5:ba:6a:ae:e1:74:d3:fd:b4:
c5:45:53:7a:22:f7:1b:4e:73:22:c2:a2:cd:74:6f:6d:8f:b0:
54:18:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:57:32 2026 by rpki-client