
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
File: YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json)
Hash identifier: PAyG+kaAnXzqN4As1GubEo8NVmjMJeGdiYMHpobDy+c=
Subject key identifier: B8:6E:9E:3B:B8:9A:33:A7:74:39:20:8B:0B:A0:DC:6A:DD:97:81:B6
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial: 0816
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
Manifest number: 0801
Signing time: Thu 24 Sep 2026 21:10:17 +0000
Manifest this update: Thu 24 Sep 2026 21:10:16 +0000
Manifest next update: Thu 01 Oct 2026 21:10:16 +0000
Files and hashes: 1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: QFno80WcdDUj2L3fEs6GStkNsKjgA5uVAyX48nxQI1o=)
2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: Crdi+zKRWevIXp0SsgooUD494qosGjHbDXZ9Zp1sgkE=)
3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: 6eb0nEsPYVrqJ2wcbhkcoiDXoGo8q5W0OLRrGCG5dLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Validity
Not Before: Sep 24 21:10:16 2026 GMT
Not After : Oct 1 21:10:16 2026 GMT
Subject: CN=6ab591b8-8ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:9e:e5:9d:21:85:a5:5d:b3:ab:62:1e:a9:
cd:02:18:f4:cc:e6:65:dd:1e:57:57:77:d8:1b:a0:
e7:22:f3:b7:3e:06:ee:99:77:99:e8:51:f1:ce:a0:
86:02:76:e4:83:5c:8e:59:a5:04:4f:2c:c3:21:01:
94:7d:6e:c4:3a:8e:8d:62:98:c9:d9:09:28:10:0b:
bc:af:6c:28:02:c3:59:12:2c:d4:0f:95:81:56:88:
c6:85:12:83:f0:f8:e5:c7:c1:c2:eb:8c:b9:45:bb:
b0:37:d7:e0:be:ad:74:64:cc:ba:1d:62:d6:9c:5a:
f9:d0:53:6d:9b:60:9d:25:cc:cf:17:f9:57:52:1b:
09:d9:22:55:44:cc:53:c5:a7:a7:36:fa:ac:08:6a:
30:50:4b:ab:34:82:b7:a9:9e:1e:8a:07:3d:8d:a4:
3e:17:cc:8a:30:77:18:7b:f8:ce:7d:6c:3f:34:f8:
1c:1e:8b:06:27:7d:8b:f9:78:37:2d:44:6e:3c:00:
1b:84:9a:96:e4:9b:ee:45:d5:d3:f5:e4:f1:67:e0:
46:d8:72:95:59:1e:5e:8c:26:10:70:0c:ce:df:71:
ea:6f:3f:eb:23:56:54:44:ab:77:4b:d0:61:1a:63:
79:e2:a3:2c:a4:47:18:2e:6e:0f:98:03:e5:27:04:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:9E:3B:B8:9A:33:A7:74:39:20:8B:0B:A0:DC:6A:DD:97:81:B6
X509v3 Authority Key Identifier:
keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:99:ac:2c:1e:32:6a:d7:05:2e:48:a9:47:40:3e:0e:a3:63:
ea:05:ab:96:79:b2:6d:f4:fb:4e:65:00:9d:b3:af:4f:2f:3c:
6c:60:c9:eb:f8:16:5c:b3:6a:13:e6:2a:d1:3a:4b:9c:3b:b9:
6b:bc:20:64:92:9f:ab:a7:1e:61:99:a9:b2:0b:65:58:2a:11:
ac:b6:08:29:a7:e3:4c:71:c5:49:1f:eb:94:32:25:3e:f1:40:
6d:c4:57:a8:e4:b6:e8:c3:ca:7f:12:cb:08:97:2c:3e:bd:ff:
5a:cd:7a:7a:a7:70:aa:88:9b:bd:02:53:fd:1e:64:99:ff:40:
66:e1:a6:bf:01:6f:80:d9:28:e2:1c:a4:14:f4:b5:cb:18:08:
73:e7:10:7a:59:47:aa:ac:b2:28:f3:3e:3e:fc:3c:6d:af:fb:
61:67:74:ca:fa:1f:93:15:ce:be:e9:3a:49:80:d3:84:03:04:
38:8b:58:e4:7b:b4:9b:43:ba:78:bc:1d:7f:e1:e4:89:e2:53:
c2:b6:44:0c:e6:8e:a5:1a:68:24:25:dd:7b:af:30:24:23:5d:
94:ba:51:5a:ab:64:03:56:b6:f8:1a:2c:15:23:78:83:9d:7f:
87:06:da:44:8c:1a:ab:5a:64:11:7f:e7:8f:92:83:b9:19:2c:
92:7a:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:13:26 2026 by rpki-client