
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json)
Hash identifier: YcLz3V+3Jie1ru4khFIAa+cYszwptBhav0Ai8FSG9rs=
Subject key identifier: 91:4B:92:16:95:F3:D7:B9:65:E7:84:E7:77:08:25:F1:24:DB:09:17
Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Certificate serial: 0414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
Manifest number: 040C
Signing time: Mon 21 Sep 2026 00:12:03 +0000
Manifest this update: Mon 21 Sep 2026 00:12:02 +0000
Manifest next update: Mon 28 Sep 2026 00:12:02 +0000
Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: UATYdTATCYKHcB8RoGVYPIjPVmGRK6oj1zxtk8c8kaY=)
2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: FPw9O4XT//G8n6WnCLP8ctRAcMr/Pqa6Ff1YBdXY59k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Validity
Not Before: Sep 21 00:12:02 2026 GMT
Not After : Sep 28 00:12:02 2026 GMT
Subject: CN=6ab07653-e337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:9d:55:ad:46:d5:cf:03:86:bd:bd:2c:1a:
45:d3:30:82:98:47:a4:bf:8a:8f:a2:02:df:8a:f7:
bc:ad:59:90:d8:d9:0f:90:fc:31:38:2d:85:c5:d4:
da:ee:84:93:70:e7:d8:19:fb:e8:09:03:bc:be:45:
ea:2d:60:10:80:82:0c:c6:c4:0e:f4:a0:02:9d:3a:
d2:d3:c6:8d:74:b7:7b:75:0f:5a:c8:ae:80:60:90:
bb:54:ff:9c:9a:f4:8a:d1:29:a9:7e:09:3f:89:34:
29:18:b7:ab:11:26:eb:e2:32:46:f2:27:e6:15:35:
57:6b:38:44:61:11:0f:f1:59:20:3d:e6:68:52:b4:
d9:57:fb:b5:a5:14:69:3c:23:c2:f8:61:52:67:e0:
3c:74:28:99:0b:b7:db:95:a1:71:bb:c2:db:1d:6d:
a0:63:24:78:2e:9c:fa:8d:43:5f:a6:32:77:f7:ed:
1b:c0:e6:4f:2b:3a:67:40:d9:96:5e:c2:db:12:55:
fd:71:dc:56:cf:e5:46:ae:1a:b5:bc:77:a1:da:99:
6a:07:48:4c:ea:ac:4d:3e:01:76:9b:58:3d:a0:e5:
5e:e9:ac:ee:83:72:62:87:84:45:78:71:76:83:92:
0e:5c:b2:99:12:ff:69:d1:e5:30:a4:45:74:1c:fb:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4B:92:16:95:F3:D7:B9:65:E7:84:E7:77:08:25:F1:24:DB:09:17
X509v3 Authority Key Identifier:
keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:be:19:3a:12:c7:47:7d:e1:3d:75:93:da:3a:70:f3:14:1c:
e2:9f:31:c8:f6:f9:ca:45:3b:40:e3:e6:fc:58:d0:cc:17:ec:
51:ef:a4:93:c6:fe:70:7d:d0:b5:db:0b:13:97:a8:07:c9:93:
91:51:63:07:af:08:9f:c0:85:07:ba:35:17:8f:10:cb:30:f4:
a0:9c:a5:a4:9f:c2:be:45:b6:a8:5a:a1:71:e3:9f:8b:ce:f1:
45:e9:2a:e0:0b:83:53:18:95:bb:02:c7:b2:19:85:97:d9:93:
8c:64:e4:4f:49:b0:21:7f:c7:d8:8d:9d:d4:ae:66:48:65:9c:
2b:c1:6a:a8:3b:b2:dd:c8:a0:df:42:48:5b:aa:36:5d:2c:cb:
47:f0:c0:5d:78:84:85:9a:79:0c:ce:ec:2d:81:5b:5b:16:89:
4e:6a:be:5f:c6:cb:99:45:40:d0:5c:cc:c0:a5:09:ec:04:57:
cb:24:8d:a6:53:98:6b:0d:5e:d6:bd:e0:be:33:71:09:17:94:
e6:6d:4f:2b:fe:e5:3c:70:cc:01:8f:9d:3a:4a:62:ed:d4:b0:
24:ff:32:d7:05:65:4f:31:83:5b:6f:11:ce:bf:8b:7b:cb:53:
56:85:c0:14:52:54:b8:7e:59:cd:fb:e3:03:68:8a:17:f9:28:
6f:08:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:56:12 2026 by rpki-client