
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier: 5dFhF2OQQCOvi8sEPWUsMQXbPs2I1T+DEIINp48FyBQ=
Subject key identifier: 9C:47:BB:DF:38:65:2D:C4:F9:8A:FB:CF:13:01:0D:FA:70:A4:05:BC
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number: 01A6
Signing time: Wed 23 Sep 2026 04:05:25 +0000
Manifest this update: Wed 23 Sep 2026 04:05:24 +0000
Manifest next update: Wed 30 Sep 2026 04:05:24 +0000
Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: umim1C8rN9fLR4Ocky8b/5324PvcHwP5AQwecuYi2PI=)
2: 09799D96F36811F0BB995E0C666F56BC.roa (hash: nJl06u2CCCZldTMQjMgrG+YE+xZkFMkssVi8+kqwbRE=)
3: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: OxfaWe+94tIlTAT4+byZPb7wx3bdqZGYJ/nQcDtlMWw=)
4: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: tX6hwKferIVMkSYMI8hzg3HEG28VMd7DHAYXOto5Mlo=)
5: 09F2AE3EF36811F0BB995E0C666F56BC.roa (hash: v8t9bmHpqZn0wuxiofvRlA2MMIdpOLvcB//haxyBf5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Sep 23 04:05:24 2026 GMT
Not After : Sep 30 04:05:24 2026 GMT
Subject: CN=6ab35005-960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:ab:00:57:c8:3b:45:f1:c8:42:c9:bc:fd:
3d:65:2c:c3:86:c0:0d:73:0a:39:e5:32:a2:d7:cb:
ce:c0:7a:b5:64:b1:ba:01:fe:a2:72:36:10:c8:26:
40:3e:6a:b9:6b:ce:97:4c:7f:e5:d5:8a:d5:a2:49:
37:c6:4c:aa:e6:86:5e:cd:71:6c:1c:b5:4c:3b:b0:
27:64:f4:a1:8c:12:50:1b:92:dc:7d:c0:9a:c0:5f:
e2:d4:94:cc:63:38:20:d0:e6:bd:ce:00:89:9a:9f:
73:5e:95:82:86:b2:29:6a:1b:47:49:07:67:37:9a:
df:f5:0e:de:18:d9:ed:b2:73:35:12:0a:d9:cd:89:
91:c4:d8:a4:09:e5:22:6e:15:2c:a1:61:98:b6:86:
0d:a2:41:22:a5:d0:63:cc:53:4d:c3:cc:d6:09:41:
67:02:d5:0e:1b:63:07:bf:df:ff:4e:15:37:47:46:
f5:f1:19:6e:67:1a:ae:08:8e:b1:c0:25:83:6e:c5:
0f:6d:fe:5b:5f:84:ea:d3:67:64:1c:1d:c0:86:0e:
1b:24:fe:2c:b4:9d:64:d7:5a:8e:82:c7:31:6d:89:
8c:5d:d2:26:de:58:52:a7:18:a2:cc:61:89:d8:c1:
26:6f:90:bf:ae:c6:42:41:eb:b8:f6:71:47:5b:c4:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:47:BB:DF:38:65:2D:C4:F9:8A:FB:CF:13:01:0D:FA:70:A4:05:BC
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bc:4b:d9:6a:27:19:d2:79:ba:df:51:dc:e1:bb:b7:c3:77:
70:da:13:c3:3c:62:4a:fe:d0:57:04:3a:ad:f4:3e:39:85:bf:
64:56:01:14:d9:7d:93:f2:67:bb:9d:70:0e:d0:d5:3b:05:b9:
a1:7c:3d:9f:44:51:8c:42:d3:0a:54:b0:4d:c1:17:50:52:ba:
80:79:50:69:d2:9c:f0:e4:93:3e:d6:d9:97:68:d5:7f:32:b0:
a4:aa:2c:1d:9d:9d:4e:a0:ea:8c:c8:af:6d:95:b8:c2:e9:cd:
e5:3f:72:3e:84:f0:d4:11:c0:19:a0:f6:dd:f4:fa:72:d8:38:
7e:8f:bd:8d:a9:42:82:f1:c7:1e:f8:06:f7:23:59:1c:9d:4c:
3f:8c:4e:e9:6e:ef:90:af:af:76:b1:ab:7c:1e:d9:98:0d:52:
f9:99:82:8f:1b:07:6f:9a:ca:f3:98:b1:8d:3c:5c:d3:fc:6e:
d6:2a:5a:00:54:8d:f9:a3:dc:54:85:93:c4:0e:7a:08:80:e8:
34:c1:76:8a:79:a3:34:7b:21:ec:db:8e:b0:2d:6e:51:ef:3c:
3d:6b:55:f5:1b:d4:a3:a4:d6:79:d8:38:96:36:23:f8:a6:a3:
e3:6e:e2:64:1b:87:59:c6:88:e8:34:90:3a:35:ac:63:85:c3:
33:c6:1d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:17:49 2026 by rpki-client