
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json)
Hash identifier: BWhUdMj6BpEPHSoBswDvGDd6PNykswtqmSzT3X9JKAE=
Subject key identifier: 79:5F:AE:31:7D:99:02:61:04:DC:24:71:0D:0A:B4:F7:94:B7:3C:89
Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Certificate serial: 0C51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
Manifest number: 15A3
Signing time: Sun 20 Sep 2026 18:40:57 +0000
Manifest this update: Sun 20 Sep 2026 18:40:57 +0000
Manifest next update: Sun 27 Sep 2026 18:40:57 +0000
Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: 1lGyRJ+XkLDPM77oN3KOLh0cUSXrEre4t6a7/TYMg1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3153 (0xc51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Validity
Not Before: Sep 20 18:40:57 2026 GMT
Not After : Sep 27 18:40:57 2026 GMT
Subject: CN=6ab028b9-0070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:b8:ba:d2:d4:78:45:e0:b5:1f:cd:05:6e:
13:1e:4f:a9:d8:e8:09:c9:d0:d2:75:b6:5c:63:02:
d6:79:29:80:ee:d2:93:6a:61:7f:90:b9:5e:f9:ad:
b7:17:00:73:8b:2b:6a:cb:4e:bc:83:d0:66:7e:fb:
84:ca:b4:29:77:f3:3c:b0:be:72:e0:0e:17:5d:af:
ff:3e:8f:89:5e:0b:c0:43:f9:ca:5a:90:49:70:fb:
d3:59:86:2c:47:01:7a:f5:a0:c7:6d:64:60:be:f2:
3b:af:e2:ae:29:15:02:62:9b:4d:e9:c8:9d:0f:82:
a5:39:7d:10:f4:c4:05:55:d8:d7:7d:66:a4:eb:17:
95:61:d8:58:8b:8f:97:54:ad:c2:82:2a:e5:9d:3b:
8b:a4:51:ab:54:a6:b9:5b:99:28:3e:fe:91:91:42:
db:c7:39:9c:b0:4d:87:06:32:fb:b2:b5:f7:44:3d:
b0:54:ae:fd:36:6a:c1:da:ea:c5:af:64:e3:38:c9:
0f:62:a2:4a:fc:7a:99:53:ba:26:b2:bf:8d:93:57:
28:7c:11:74:91:01:7b:8f:b5:ac:20:b0:6f:91:5c:
e7:77:f8:d2:ad:07:df:48:e1:9b:04:2d:f8:65:0b:
f2:59:a8:25:4c:61:5c:6c:6e:52:bd:cd:c4:47:8c:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5F:AE:31:7D:99:02:61:04:DC:24:71:0D:0A:B4:F7:94:B7:3C:89
X509v3 Authority Key Identifier:
keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:15:c4:9e:99:c0:38:20:19:5e:b6:c7:7a:a0:ea:93:81:8e:
57:ae:40:90:44:22:31:13:ce:c0:1f:77:fb:f6:27:32:fe:e1:
77:db:78:4f:a8:0a:13:a0:b7:fc:55:0a:67:3d:55:d9:e0:35:
03:ad:db:d7:e4:05:61:ca:71:dc:97:08:ab:25:48:92:f4:84:
3d:ae:9f:13:9a:68:20:47:94:e0:87:bd:1d:b4:26:74:fa:38:
4d:1b:67:2a:55:18:39:04:1a:94:52:e8:47:52:93:72:e4:04:
35:43:62:59:0e:15:ed:21:84:3e:e8:2c:c4:e8:a6:76:2c:59:
1c:08:9d:1a:5f:d0:af:0b:17:98:0f:3e:6d:87:46:ad:f9:83:
82:87:24:7c:63:4d:a0:8a:93:0e:30:e2:9d:54:c5:58:03:8d:
ac:42:6a:5a:35:34:de:cb:42:4b:aa:cb:b9:ca:eb:d5:a7:23:
04:54:14:9c:1a:4c:3e:e4:7b:3b:28:2b:34:07:0d:10:3c:0a:
68:c9:28:1e:6a:8f:7d:36:5a:3b:dc:81:4e:c2:8c:7d:74:58:
f8:40:c7:39:5a:7d:d6:a5:45:5e:92:fd:de:0a:76:3a:52:cb:
54:19:0f:65:5c:46:6b:78:93:12:b6:c8:e8:58:f0:87:46:99:
78:12:d1:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx
MjdBRjI5NUUwHhcNMjYwOTIwMTg0MDU3WhcNMjYwOTI3MTg0MDU3WjAYMRYwFAYD
VQQDEw02YWIwMjhiOS0wMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwa4utLUeEXgtR/NBW4THk+p2OgJydDSdbZcYwLWeSmA7tKTamF/kLle+a23
FwBziytqy068g9BmfvuEyrQpd/M8sL5y4A4XXa//Po+JXgvAQ/nKWpBJcPvTWYYs
RwF69aDHbWRgvvI7r+KuKRUCYptN6cidD4KlOX0Q9MQFVdjXfWak6xeVYdhYi4+X
VK3CgirlnTuLpFGrVKa5W5koPv6RkULbxzmcsE2HBjL7srX3RD2wVK79NmrB2urF
r2TjOMkPYqJK/HqZU7omsr+Nk1cofBF0kQF7j7WsILBvkVznd/jSrQffSOGbBC34
ZQvyWaglTGFcbG5Svc3ER4x5TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlfrjF9
mQJhBNwkcQ0KtPeUtzyJMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy
RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw
QzRKU1lkWHNJS2tTZXZLVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKhXEnpnAOCAZXrbHeqDqk4GOV65AkEQiMRPOwB93+/YnMv7hd9t4T6gKE6C3
/FUKZz1V2eA1A63b1+QFYcpx3JcIqyVIkvSEPa6fE5poIEeU4Ie9HbQmdPo4TRtn
KlUYOQQalFLoR1KTcuQENUNiWQ4V7SGEPugsxOimdixZHAidGl/QrwsXmA8+bYdG
rfmDgockfGNNoIqTDjDinVTFWAONrEJqWjU03stCS6rLucrr1acjBFQUnBpMPuR7
OygrNAcNEDwKaMkoHmqPfTZaO9yBTsKMfXRY+EDHOVp91qVFXpL93gp2OlLLVBkP
ZVxGa3iTErbI6Fjwh0aZeBLRxw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:07:27 2026 by rpki-client