
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json)
Hash identifier: 4fDm7wFtuKXYR5OsSlmGIxnehyaDGxuZAihEwlZNenA=
Subject key identifier: 2F:CF:59:E6:64:60:0F:81:F9:07:18:D4:4F:DC:9A:41:F4:CA:E5:62
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial: 0355
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
Manifest number: 034E
Signing time: Wed 23 Sep 2026 00:34:36 +0000
Manifest this update: Wed 23 Sep 2026 00:34:35 +0000
Manifest next update: Wed 30 Sep 2026 00:34:35 +0000
Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: cF+Bvd6F7I8Gqf5WoWbRiILVK7x0qmfRpEBGzHdP4Ac=)
2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: kPjzrM1/eZAzjcP1GRQ3L56tBnU6wnmk/MDv4K8Imog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Validity
Not Before: Sep 23 00:34:35 2026 GMT
Not After : Sep 30 00:34:35 2026 GMT
Subject: CN=6ab31e9b-4667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:40:78:ca:7e:fa:d7:fc:da:8c:38:60:bd:
1a:4b:18:2f:7b:08:a7:14:08:27:3b:cb:83:1a:5c:
46:d7:66:4e:36:07:04:43:77:39:77:e0:e8:82:8a:
03:28:cf:ea:61:6c:72:a1:aa:c1:d4:05:68:1d:45:
0b:a2:35:4b:af:8f:bd:c0:cf:ef:dc:88:16:a2:5b:
46:10:e2:c0:82:52:ca:91:30:ea:b5:32:60:d7:55:
d3:ab:3d:1c:bc:f9:e2:a0:37:cb:5e:37:0f:84:f8:
9c:5f:22:dc:18:44:83:38:7c:d2:de:2b:03:8b:d1:
74:e2:eb:3e:15:dc:4f:63:eb:17:51:93:79:ca:53:
8c:d9:ad:4c:1e:d2:de:8d:0f:67:6b:ae:20:d0:69:
45:9e:62:e0:17:74:af:ab:b3:6c:e8:4a:46:4e:f2:
74:a9:2c:81:d2:de:50:31:f0:e5:ff:51:e0:f6:5a:
7a:bd:8e:92:31:78:d2:da:ac:56:16:05:5c:2b:34:
e8:55:c7:3a:94:f1:12:58:45:68:fa:56:b8:0f:02:
0c:58:05:14:6d:c4:7c:46:9f:95:2f:d5:3f:b2:00:
0e:35:b2:cc:22:d7:c3:06:fc:14:a9:47:50:c7:88:
73:ab:4e:3e:6f:d7:99:29:81:09:9a:ca:d2:a5:08:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CF:59:E6:64:60:0F:81:F9:07:18:D4:4F:DC:9A:41:F4:CA:E5:62
X509v3 Authority Key Identifier:
keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:c8:74:69:64:f6:af:ff:54:10:7a:9c:0b:e9:a9:91:30:fc:
76:62:c8:4b:be:20:1f:16:b7:73:a5:72:10:46:b0:69:38:2c:
e6:de:ed:4e:0b:20:34:a6:ec:0a:3f:31:6c:2f:30:51:6c:77:
62:d2:33:cf:b6:e3:99:c1:56:3e:66:41:8f:db:17:b5:c3:f4:
c2:af:15:24:b8:97:1d:92:8e:2b:2c:07:5b:d7:86:14:a1:5d:
fa:fe:d2:8a:7c:3c:34:be:ca:01:f5:71:ac:27:eb:22:d8:a3:
2f:fa:9b:d1:07:c5:4a:99:ed:53:20:85:91:df:70:ca:ac:b7:
95:a7:1c:f1:d2:a3:f9:5e:f0:ad:83:7e:07:49:1d:a0:6d:61:
f0:95:a3:5a:de:57:c3:b5:ef:dd:78:e2:4b:6b:8b:83:7b:f9:
e2:24:0e:fa:3a:b2:0e:58:11:5d:14:9e:ed:b6:41:3b:44:f1:
f3:09:3a:54:9e:88:34:64:8c:fd:43:b1:af:66:53:36:d7:fa:
d9:2f:83:26:4e:d8:b9:78:44:7f:20:16:67:54:98:c8:77:07:
38:fa:62:6b:68:51:13:59:3c:1e:c5:91:79:e6:1c:c6:ca:96:
b2:da:0b:80:58:9d:db:17:ea:6e:b8:d2:23:43:a2:de:38:80:
6a:cb:db:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:52:35 2026 by rpki-client