
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json)
Hash identifier: Ov16k6BtQtoswjSLXt/Kna86Fq3SYPG7LanMk3rwFAI=
Subject key identifier: C8:06:CD:4E:78:EA:B4:E7:88:B9:D7:5D:52:17:0F:F6:F8:BA:F9:FA
Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
Manifest number: 01EB
Signing time: Mon 21 Sep 2026 03:27:28 +0000
Manifest this update: Mon 21 Sep 2026 03:27:27 +0000
Manifest next update: Mon 28 Sep 2026 03:27:27 +0000
Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: cK/JmLUv34nCjgt8zmM5/QI0HKUfg34kaSYSDRciXLg=)
2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: 26WEtM895FnGR/kXovwY20hCbFpq6hJQTsJq8LOOA8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Validity
Not Before: Sep 21 03:27:27 2026 GMT
Not After : Sep 28 03:27:27 2026 GMT
Subject: CN=6ab0a420-ddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:48:7b:44:bf:72:eb:a5:fd:7b:71:c5:11:
b5:e3:d4:0e:01:7a:1e:81:22:3b:af:b2:e4:9d:c2:
be:b1:f6:9f:e1:0c:27:ce:7e:32:41:24:60:7e:13:
65:3c:03:10:a3:a3:23:fd:13:7e:89:6e:46:c7:ed:
20:2d:04:fa:94:5f:6f:8d:a6:f5:d0:28:62:0c:fa:
85:f4:8e:b7:f6:38:6f:55:2e:a7:f0:0f:29:0a:33:
0e:44:7e:6b:59:42:09:5a:82:51:5e:ab:9a:11:ca:
c1:f9:b4:db:e9:a8:5e:88:70:97:6b:52:cf:b7:c7:
b3:4b:0d:74:59:65:00:ed:65:05:7a:14:49:87:0c:
b8:0b:5d:09:84:0b:f2:3b:db:95:36:a8:54:bc:35:
4d:46:6a:82:8b:62:2c:11:31:1f:fd:59:9f:f3:4a:
d9:23:83:30:67:00:57:54:39:ce:d7:ef:59:09:ee:
9f:64:1e:74:c1:8c:d6:f4:81:66:25:8b:24:73:34:
7c:a6:6b:86:08:bd:8e:4c:2c:24:6c:de:50:1a:cf:
64:52:f9:66:b0:8b:df:77:b5:88:c0:8b:ab:54:73:
3b:d0:30:0a:0c:ec:6c:9a:e2:ee:65:eb:b1:d5:92:
06:27:e5:74:39:53:e8:8d:65:71:91:dd:c2:40:ae:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:06:CD:4E:78:EA:B4:E7:88:B9:D7:5D:52:17:0F:F6:F8:BA:F9:FA
X509v3 Authority Key Identifier:
keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:da:64:4f:23:45:a4:46:73:36:17:63:e1:13:f4:a9:83:ed:
32:a2:97:31:76:b7:85:26:4c:09:a0:9d:09:48:36:91:fd:67:
52:0b:76:b3:0e:b7:ad:66:72:66:f3:c8:bc:94:14:f4:9e:bc:
ec:fc:86:8e:f9:6b:a1:36:e5:bc:29:57:e7:69:08:aa:bc:e9:
fc:51:f8:12:41:6b:70:13:49:eb:8c:e6:70:ab:d7:29:d7:29:
70:81:d0:b4:00:d9:d4:9a:a3:0f:89:cf:2f:72:34:72:3c:1a:
86:43:a4:7a:29:43:34:9d:89:1b:3a:a3:a9:a2:11:0e:c7:ea:
f2:c2:c2:19:01:ab:93:18:dc:8a:72:7b:2c:8b:d3:01:18:7b:
63:b5:f9:a1:b3:9a:21:25:a0:e3:e4:02:f2:69:77:5a:72:33:
08:4d:4a:4f:e4:d6:ee:1d:93:eb:98:f9:12:5c:9e:32:03:dc:
ea:1e:08:f8:74:22:18:ed:2a:37:1b:b5:fa:d2:04:8d:01:4f:
d2:9a:54:c3:14:87:dd:83:fe:b1:1a:93:25:17:35:47:6f:bc:
b4:ef:59:d1:c1:2d:4c:de:2b:20:cb:3d:ab:d6:c4:f0:5e:f0:
39:f6:7c:1a:af:cb:22:ea:26:c8:85:14:26:04:54:4e:8b:38:
da:5e:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:23:13 2026 by rpki-client