
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json)
Hash identifier: B2QFfBuARrVUVd2FyYqCV95P/oFNPQojLCi1ZEXLZvI=
Subject key identifier: CB:A5:64:ED:DB:D2:48:16:CA:30:6D:7F:CE:FF:8C:F9:C2:E9:B2:DE
Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
Manifest number: 013D
Signing time: Sun 27 Sep 2026 05:59:26 +0000
Manifest this update: Sun 27 Sep 2026 05:59:25 +0000
Manifest next update: Sun 04 Oct 2026 05:59:25 +0000
Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: LZ1wKdL0sX5mk5NIPLEFpNzNjxsjLUeTtnJJJR3LBj4=)
2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: IGOt3oAqIKJyRTZpOUfxcvyTfSBEqL1x1Bx1bLVEPaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Validity
Not Before: Sep 27 05:59:25 2026 GMT
Not After : Oct 4 05:59:25 2026 GMT
Subject: CN=6ab8b0bd-553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:31:ab:e6:a0:4a:e5:58:d0:a1:2b:fa:b2:
4f:fa:84:5b:6e:fc:30:27:dd:fc:ec:b8:d0:fb:17:
8d:8d:f3:82:b9:18:9f:5d:3a:d3:36:d9:9d:07:09:
61:cd:30:50:58:75:74:d4:b6:3c:67:c6:5d:2f:26:
29:c8:18:48:b4:4f:b5:fe:81:39:06:78:f2:2c:40:
ba:ea:e9:e0:9d:55:68:82:22:c7:63:2a:06:50:dc:
81:87:df:cf:c0:75:36:0c:2a:f4:72:8c:e6:0f:c3:
34:35:46:ed:fd:bb:cc:7b:58:32:5b:fb:96:06:20:
a1:a8:a9:77:22:cd:b2:4e:c8:ba:db:14:5f:f9:e4:
db:19:76:6a:30:f6:60:59:20:68:c2:64:33:1f:b8:
9b:b8:96:b5:93:39:b8:16:d5:d5:c8:32:a2:1e:73:
4d:18:13:e0:73:0b:f2:c0:05:bd:04:13:b4:9d:73:
62:7a:37:97:ca:9f:ae:c1:be:ee:ed:8a:d6:dc:01:
e5:c3:cf:ab:41:b2:79:8c:55:d3:fc:67:3b:ab:96:
f5:96:64:56:77:79:e6:06:6b:4f:d3:df:c3:d6:04:
27:01:3f:86:02:21:ed:a2:c0:2d:50:13:57:3a:26:
44:1a:4e:78:e2:e1:7e:ec:41:cd:c7:32:0c:f0:70:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:64:ED:DB:D2:48:16:CA:30:6D:7F:CE:FF:8C:F9:C2:E9:B2:DE
X509v3 Authority Key Identifier:
keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:72:ed:c3:72:cb:74:55:8d:ce:d5:cd:82:4e:a2:2d:4e:
aa:43:fc:54:97:d9:82:8a:94:bb:56:74:46:a4:9e:70:f7:b9:
5a:97:c0:10:7d:fc:6b:79:10:cb:76:01:43:10:38:94:16:72:
42:28:d0:bf:f8:44:fd:7e:07:a4:ca:40:34:59:ad:8b:3a:26:
84:9a:23:04:23:1f:88:aa:d2:f7:38:8c:80:01:af:81:8d:bc:
fc:73:77:d4:1a:78:13:a5:2d:c3:ed:d8:aa:6f:9e:1e:13:45:
5d:bc:d9:ac:dc:e4:bb:c8:e8:0e:03:6f:8d:74:76:47:36:a9:
a9:df:71:3a:98:18:59:3d:ae:74:03:35:06:1f:03:4f:23:b4:
d8:bd:1d:f9:05:8d:0c:7d:40:31:98:1f:aa:54:2d:8f:3d:4e:
3b:96:c5:57:4c:f9:3b:e7:b9:ea:5e:2c:e5:41:53:af:01:7c:
37:c5:53:77:ff:75:f3:55:ad:05:66:71:7a:e7:86:51:a2:30:
6a:df:e6:ac:d0:c8:95:55:35:3a:ff:60:52:e3:28:d1:60:2a:
9d:17:39:bb:ee:c3:b6:26:57:4f:4e:1e:4e:ee:d3:10:f8:d9:
71:bb:36:5d:ab:6a:98:38:fd:6f:78:1f:d2:b1:34:d9:e2:b8:
79:87:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:11:33 2026 by rpki-client