
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
File: yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft (raw, json)
Hash identifier: BVU0d9aJMvwRKz7isUcpDeY6wuscVx5cK7NZamjUuAQ=
Subject key identifier: DE:BE:5B:70:CC:11:BD:CA:51:13:35:91:0C:32:43:09:44:8C:CB:46
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial: 06F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
Manifest number: 06C1
Signing time: Tue 22 Sep 2026 22:12:57 +0000
Manifest this update: Tue 22 Sep 2026 22:12:56 +0000
Manifest next update: Tue 29 Sep 2026 22:12:56 +0000
Files and hashes: 1: yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl (hash: PYJk3tT3KMh65oPKTIpGVwKOPiizHVe431NItoprHXU=)
2: 6954A6281D1811F1BB26F0200F3D8C67.roa (hash: XaZxQTLDnl290/y+szeICXl7GWwhkzid0/spMdScM1w=)
3: 5FA1BF8802DD11EE86865A23C4F9AE02.roa (hash: GFfQfs1rBXk5RvNn/1eLrsagDcvE+KrBjwNFBGF3aQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1777 (0x6f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Validity
Not Before: Sep 22 22:12:56 2026 GMT
Not After : Sep 29 22:12:56 2026 GMT
Subject: CN=6ab2fd69-edfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:75:ee:6a:ca:57:a2:ff:5c:49:e8:c4:01:
0f:22:9b:65:a2:a2:75:e5:b9:14:39:f0:5e:c0:d6:
42:39:7b:2c:22:32:8d:a4:98:04:6d:36:29:4a:51:
26:3c:48:32:d2:69:f3:d9:49:19:98:fe:65:fa:07:
86:05:76:7e:23:0a:4d:0c:c9:16:b3:9d:de:93:9a:
1e:be:1c:ab:77:a8:1c:7f:86:39:20:06:64:16:fb:
3c:2b:e4:6a:2b:82:ea:d8:49:8f:a5:a1:15:3b:fd:
f2:a1:a3:27:6a:bb:49:68:e5:01:6f:80:90:2f:b9:
f7:a5:80:62:3e:6b:06:12:84:2d:aa:36:a1:84:5b:
47:c9:6f:46:16:8d:fa:18:ea:d3:dc:a2:a8:e7:91:
9f:71:17:21:db:eb:df:32:a0:39:f3:f3:80:a2:1f:
2b:53:2d:48:49:c1:fc:1a:e0:43:08:b6:bd:ae:52:
ff:9b:1f:6b:7a:d2:88:2f:8a:16:7e:f3:90:77:29:
8a:c0:41:ad:16:9f:4d:31:89:3f:d3:0a:d8:e4:20:
7a:40:d4:20:18:27:d5:60:19:7d:bc:00:6b:a6:38:
f8:4b:3d:5a:ad:d5:61:9c:06:96:03:af:be:57:e8:
30:6c:98:87:20:49:86:90:de:2b:4b:b5:f2:8d:19:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:5B:70:CC:11:BD:CA:51:13:35:91:0C:32:43:09:44:8C:CB:46
X509v3 Authority Key Identifier:
keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8f:69:20:c0:b9:e8:48:e9:f9:1d:c1:22:35:25:0b:04:b4:
af:d1:ea:ae:04:04:e4:bc:47:e0:c8:19:04:ba:78:a2:54:df:
2a:00:05:f5:2a:5c:ce:a3:f4:2d:d2:8f:c3:c3:33:dc:b6:c8:
3f:57:c0:70:ae:a6:95:92:a2:12:2c:ac:b5:8c:45:f5:8f:d2:
0a:2b:10:be:22:fa:b1:a1:d6:d6:27:6e:97:bd:21:ec:1e:44:
45:71:52:d4:45:8d:26:2a:d5:86:5f:31:61:8e:77:84:4b:bb:
9f:57:0e:a6:98:4c:fe:8f:a7:c6:20:a7:9f:be:fe:b0:fa:89:
93:05:92:f7:c1:e1:50:57:be:b9:65:e6:64:52:d6:dd:53:ae:
06:d6:93:0e:61:63:ce:38:74:72:5c:61:e4:22:27:cd:96:72:
49:65:0b:32:fb:cf:0f:0f:ff:b7:2a:d6:24:ee:7d:de:2f:49:
94:dc:a7:cf:11:5b:84:c8:b3:17:a4:d1:ba:db:93:d6:5b:9e:
30:2f:33:b1:4d:28:f1:0a:68:6e:d9:bf:80:48:d0:76:e8:5a:
6c:bc:43:67:99:51:05:f1:c2:9f:fc:22:a6:57:c2:e8:af:8a:
39:c5:fe:a9:77:b9:21:ee:2d:c0:f6:1c:88:30:3f:54:7c:0a:
4b:df:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:53 2026 by rpki-client