
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier: /BFVKP5rUn1hQKfUsPzNOz50oZ2w15XgiKP+Vvy5NOk=
Subject key identifier: 87:46:9A:3F:38:08:C5:F7:9B:EB:61:1C:00:FB:B9:8C:B7:7A:56:E4
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number: 021F
Signing time: Mon 21 Sep 2026 02:55:35 +0000
Manifest this update: Mon 21 Sep 2026 02:55:34 +0000
Manifest next update: Mon 28 Sep 2026 02:55:34 +0000
Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: 4ItmcipbzIPRNzNJYn7+nN3Yl62mdDzfyQg40+36LJ8=)
2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: NxYGUXPru1ELvBZ6qbFZeX9tHWu2f3PZOepm5U8d3eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Validity
Not Before: Sep 21 02:55:34 2026 GMT
Not After : Sep 28 02:55:34 2026 GMT
Subject: CN=6ab09ca7-e9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:54:6b:1d:14:92:37:3d:f3:7b:3e:56:c2:
27:e5:12:4b:47:b7:28:d3:e3:98:ff:e4:cc:12:08:
94:f8:3b:73:5f:70:b3:2d:6a:24:f5:6f:ae:ba:3e:
e3:bd:ba:e6:9a:8d:7d:78:83:59:3e:56:64:19:90:
66:98:db:08:f5:42:a3:91:07:da:89:1d:38:50:ba:
4e:41:9c:23:d0:c8:33:5e:11:17:71:f2:50:9f:ae:
66:69:7e:8f:bf:b6:fe:a2:51:b3:d1:06:4a:35:df:
05:59:89:af:44:d4:1c:4f:a3:14:b3:99:7f:e5:11:
81:9e:67:b6:a2:21:67:af:56:cb:09:16:ac:37:58:
1b:94:f2:96:98:19:5d:65:da:c5:0c:04:44:e1:df:
87:71:6d:f3:ab:57:8c:04:f0:c4:c6:2f:24:b5:69:
35:a2:40:6c:d6:7d:dd:10:d8:fe:4c:bc:e9:02:3c:
50:3f:33:ce:15:80:f9:9e:7e:ba:8b:c6:92:66:6a:
ac:36:bf:a0:1f:e7:aa:38:d2:0c:86:84:bd:6c:52:
d0:43:aa:ec:47:81:1a:d4:24:e6:31:ff:aa:01:da:
75:d5:39:e3:e1:0b:7b:3a:32:b0:cc:0d:e4:0a:d9:
2f:0b:c9:3f:8e:9c:b8:74:af:be:d7:4c:b9:9a:3a:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:9A:3F:38:08:C5:F7:9B:EB:61:1C:00:FB:B9:8C:B7:7A:56:E4
X509v3 Authority Key Identifier:
keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:00:02:93:b5:a9:a6:0f:71:d2:c2:0f:45:d5:49:a0:4b:5e:
ad:ef:ce:62:8d:a7:67:64:af:99:bf:8a:28:4e:b3:d7:48:f7:
a0:73:9f:a8:ce:c4:19:59:99:ac:8f:ed:c2:b9:1f:c0:36:d7:
9b:4a:5c:57:fc:98:17:b2:9c:51:24:02:d1:01:df:f8:41:bd:
c6:ad:74:72:df:09:35:71:a7:31:7d:b7:e6:66:e8:82:a7:f6:
fa:97:c6:fb:41:32:84:dc:fd:46:0e:d4:36:2d:1a:0c:b5:08:
bd:7d:74:9b:b2:b3:d5:bf:df:08:0c:a0:e4:ca:ba:5f:bf:f9:
b0:17:1d:a4:87:61:04:eb:2a:a3:c0:36:c1:47:b9:75:c1:41:
a8:32:59:32:58:8c:1f:2d:27:f2:cc:3d:08:06:89:19:27:52:
94:53:14:0d:6f:cd:28:41:6f:8a:d7:4c:1f:1a:e6:1d:39:6f:
53:48:92:b1:e4:86:c5:e9:48:c1:5d:05:78:86:a8:97:3f:db:
a4:0d:3f:2c:c2:40:27:a3:a1:dc:96:aa:6c:0b:b4:83:d4:0c:
b3:7c:67:b0:ca:60:b0:4b:35:12:62:ab:08:41:6a:bf:b7:98:
7b:16:a2:ab:dd:3d:77:cf:41:d0:ce:5c:7c:36:f5:06:f0:d6:
26:c8:fc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:50:05 2026 by rpki-client