
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
File: yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json)
Hash identifier: CHtbJy3Xpj57A4fy+81QoQ9Xw0cdwJ5d5lkjwPkoGhw=
Subject key identifier: 4F:45:0B:57:9B:B2:9F:06:8F:D6:E3:23:68:71:E3:B1:0B:CD:A5:35
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Certificate issuer: /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
Manifest number: 0118
Signing time: Mon 21 Sep 2026 05:57:08 +0000
Manifest this update: Mon 21 Sep 2026 05:57:08 +0000
Manifest next update: Mon 28 Sep 2026 05:57:08 +0000
Files and hashes: 1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: Jzrny4Agc5z2Mtt9FZfK8quj+JZIylT0y4YbJ5i6II0=)
2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: RuktCzrTPaGz98KGZYkjHYICRA/av1re9f1mOeT+Khk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Validity
Not Before: Sep 21 05:57:08 2026 GMT
Not After : Sep 28 05:57:08 2026 GMT
Subject: CN=6ab0c734-15ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:2a:98:be:9c:bd:3b:27:09:16:43:6f:59:
bb:d1:50:0c:3f:33:89:79:94:37:13:f4:35:3e:18:
df:53:8e:25:60:9e:f8:e2:18:d0:7d:4c:85:08:05:
f1:9f:e4:89:73:b5:ec:34:50:da:31:8e:86:35:93:
c1:b6:47:0e:99:21:64:3e:b9:00:fa:94:2d:f5:07:
96:99:07:c5:9b:4f:ff:0f:f9:91:36:66:82:9e:c4:
fd:01:e0:45:70:5b:6c:3c:37:93:f1:ec:44:71:83:
e9:78:6b:65:b0:81:55:06:1f:ce:78:bd:a9:87:e4:
e1:c5:c3:2a:2a:ff:80:23:a9:aa:3c:de:1b:e5:17:
da:bd:66:11:34:4f:ff:28:75:21:9d:67:82:8c:04:
fd:8f:13:08:d2:6c:3f:cb:46:20:63:31:78:c2:98:
49:d6:a6:fb:9b:aa:f5:a0:9d:a9:2a:36:e9:27:4d:
9a:e7:85:a1:72:7a:54:77:17:01:3f:14:a2:7d:a5:
a5:39:1c:1b:77:ac:02:5d:c1:9e:4a:3c:79:6b:a5:
3d:08:91:6f:ac:f4:d5:36:47:1e:22:d9:de:ba:88:
79:6a:2e:4e:d0:d7:00:50:dc:99:41:6a:4a:30:d8:
86:4e:48:51:63:b0:2c:c5:1a:23:20:64:39:2c:d0:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:45:0B:57:9B:B2:9F:06:8F:D6:E3:23:68:71:E3:B1:0B:CD:A5:35
X509v3 Authority Key Identifier:
keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:39:e8:ec:c9:a4:a5:5d:f3:ca:2b:16:81:85:4a:e6:cf:c0:
13:ed:24:53:d2:45:9f:7e:1b:37:7d:7a:0d:2c:8e:de:8f:ee:
71:77:f7:52:3e:38:11:c0:1a:4c:0c:e5:ae:e0:0b:3d:f9:c3:
1e:53:8c:12:4f:f6:f0:2c:38:c2:69:c5:a6:79:56:45:f5:01:
2d:56:8d:04:c2:75:56:59:f9:f2:6c:f9:6f:c4:79:55:66:2b:
e0:d8:7f:5c:a0:6d:40:47:46:21:57:cf:b5:fa:15:6a:f9:98:
71:1a:f8:0d:1e:5b:45:ea:a4:94:ab:c6:12:da:7e:60:f2:9c:
23:ed:67:df:7d:e8:bd:8e:64:f9:70:5e:00:00:e7:28:ee:17:
ca:dd:f5:1e:13:68:69:de:22:d3:15:a6:bb:29:1d:11:e6:61:
a1:0b:75:84:22:ae:5c:95:67:db:2d:bd:d9:4a:c2:ce:4b:1f:
d9:fd:0f:26:ec:56:4d:e6:3a:56:62:d7:11:15:84:84:a8:b4:
a7:84:92:d2:94:d5:4c:a2:0e:fb:32:1f:c1:2e:71:2d:c4:3b:
10:47:3b:3c:9f:e5:1a:87:f1:61:03:0a:34:4f:4b:f5:6c:91:
ea:c5:88:b6:35:bf:bc:3d:42:34:30:90:b2:39:7d:cc:60:c0:
40:ba:06:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:03 2026 by rpki-client