
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
File: YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json)
Hash identifier: BcGe0TGewsYvajdxfqh9ThPx7GNglg4DyeSkYAYy/AQ=
Subject key identifier: 4E:F1:6B:5F:B6:E8:A8:EF:3F:43:30:1B:A5:60:26:26:7D:31:5E:11
Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
Certificate issuer: /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
Manifest number: 0170
Signing time: Sun 27 Sep 2026 05:16:06 +0000
Manifest this update: Sun 27 Sep 2026 05:16:05 +0000
Manifest next update: Sun 04 Oct 2026 05:16:05 +0000
Files and hashes: 1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: byIodb/J54Sz/sX6IZLBr6JgF6HFWeYwdlPe+RVUakc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Validity
Not Before: Sep 27 05:16:05 2026 GMT
Not After : Oct 4 05:16:05 2026 GMT
Subject: CN=6ab8a696-7216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:0a:de:e4:58:66:dc:ae:2e:94:66:4b:74:
b8:fe:e2:51:21:f7:fc:72:62:b0:04:6f:9a:c8:c0:
b1:87:cd:b9:38:bd:19:9f:10:09:31:dd:fd:61:ca:
ff:dd:9b:c8:dc:08:f8:0c:0b:88:97:d0:c4:8d:d3:
db:a3:1a:a3:5b:1a:9b:5e:17:a8:f9:e8:7f:66:0f:
bc:ce:35:cf:f3:39:e2:c5:1e:d3:82:79:cf:2e:7c:
56:b1:3d:5f:90:74:e8:a9:fa:1d:49:e3:2a:e6:6d:
89:66:a3:ad:ef:61:04:6e:b7:37:97:6d:6b:6f:4c:
6b:f8:22:d7:f6:65:25:fc:0d:25:f9:2e:58:34:12:
0f:c5:40:20:7a:50:9a:c7:39:af:2a:a1:e0:c8:8c:
55:92:27:75:aa:e4:2f:4c:c6:5b:94:ae:ae:a6:98:
4c:af:fa:a2:92:d2:1c:5f:ca:12:a2:65:ce:96:2f:
c7:52:62:b3:0c:20:64:44:f9:39:89:20:9a:05:03:
b2:e4:c7:48:85:18:5a:74:fd:e0:8a:f0:e9:70:77:
92:c2:59:93:f6:ca:4f:34:25:aa:89:f5:97:fc:a9:
15:c0:c8:43:0d:f0:5c:5b:1f:3b:c7:c1:4a:06:77:
eb:1e:c3:04:1c:f7:9d:64:3a:07:53:db:ae:b9:d2:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F1:6B:5F:B6:E8:A8:EF:3F:43:30:1B:A5:60:26:26:7D:31:5E:11
X509v3 Authority Key Identifier:
keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:1d:08:41:83:d0:c2:87:d5:12:39:c7:1c:32:bb:5f:be:
47:cb:e2:49:d9:da:d2:2e:fb:fb:27:d6:f5:46:79:ad:ad:dd:
83:ca:22:17:2a:96:6c:76:bd:d9:6d:2b:5d:70:05:0d:fe:b9:
8d:37:fe:26:11:d3:57:03:d4:42:16:08:0d:11:3a:d4:04:f3:
7c:5b:44:12:c1:49:a9:b7:20:5d:ea:f8:56:e3:31:25:87:6a:
a4:0c:48:e6:c9:37:10:00:e1:14:9c:6a:f6:ac:f6:81:0c:4e:
3e:cc:c9:e3:57:35:41:5b:a4:75:75:95:3a:61:ac:82:31:ad:
fb:e7:4b:44:db:5c:22:71:3e:57:fe:fd:8a:81:4a:d9:11:76:
7a:4f:46:95:58:8f:4f:75:56:c9:86:8c:49:70:9f:5d:9b:83:
8a:64:80:ec:c5:43:8f:25:18:60:6f:4b:96:63:bb:9c:28:d5:
43:89:0c:d4:c7:31:7d:07:c9:31:4a:6b:18:96:56:ac:ba:f4:
bf:20:65:41:bf:cb:03:85:8c:84:b2:d4:e1:cc:64:2c:41:29:
79:73:5d:a3:ee:e2:1a:35:e7:c7:30:df:66:7a:09:76:e0:e9:
4f:80:74:04:c1:9c:2c:ea:4e:c1:a9:12:86:77:6d:50:af:43:
6c:cf:f0:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJGOEMxMTAvBgNVBAUTKDYxMUUxQzE0OTUyOEYxN0EwRUM3OTlDMzlENTYyNjE5
QzlBMTUxMDAwHhcNMjYwOTI3MDUxNjA1WhcNMjYxMDA0MDUxNjA1WjAYMRYwFAYD
VQQDEw02YWI4YTY5Ni03MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwcK3uRYZtyuLpRmS3S4/uJRIff8cmKwBG+ayMCxh825OL0ZnxAJMd39Ycr/
3ZvI3Aj4DAuIl9DEjdPboxqjWxqbXheo+eh/Zg+8zjXP8znixR7TgnnPLnxWsT1f
kHToqfodSeMq5m2JZqOt72EEbrc3l21rb0xr+CLX9mUl/A0l+S5YNBIPxUAgelCa
xzmvKqHgyIxVkid1quQvTMZblK6upphMr/qiktIcX8oSomXOli/HUmKzDCBkRPk5
iSCaBQOy5MdIhRhadP3givDpcHeSwlmT9spPNCWqifWX/KkVwMhDDfBcWx87x8FK
BnfrHsMEHPedZDoHU9uuudJr5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7xa1+2
6KjvP0MwG6VgJiZ9MV4RMB8GA1UdIwQYMBaAFGEeHBSVKPF6DseZw51WJhnJoVEA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81RTA3MkFGRTg2
RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhYb094NW5EblZZbUdjbWhV
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSNGNGSlVvOFhvT3g1bkRuVlltR2NtaFVRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkY4Qy81RTA3MkFGRTg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhY
b094NW5EblZZbUdjbWhVUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP8wdCEGD0MKH1RI5xxwyu1++R8viSdna0i77+yfW9UZ5ra3dg8oiFyqWbHa9
2W0rXXAFDf65jTf+JhHTVwPUQhYIDRE61ATzfFtEEsFJqbcgXer4VuMxJYdqpAxI
5sk3EADhFJxq9qz2gQxOPszJ41c1QVukdXWVOmGsgjGt++dLRNtcInE+V/79ioFK
2RF2ek9GlViPT3VWyYaMSXCfXZuDimSA7MVDjyUYYG9LlmO7nCjVQ4kM1McxfQfJ
MUprGJZWrLr0vyBlQb/LA4WMhLLU4cxkLEEpeXNdo+7iGjXnxzDfZnoJduDpT4B0
BMGcLOpOwakShndtUK9DbM/wsg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 12:33:37 2026 by rpki-client