
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier: ujVkoGolFZ8S0tpiK+vfj80FJfoNJmucsPxdmX7fBGQ=
Subject key identifier: A6:AB:85:21:15:7D:44:9F:4F:30:A4:16:42:96:3A:B5:91:AA:EA:41
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial: 107A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number: 1063
Signing time: Fri 02 Oct 2026 17:34:45 +0000
Manifest this update: Fri 02 Oct 2026 17:34:45 +0000
Manifest next update: Fri 09 Oct 2026 17:34:45 +0000
Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: RMJlOl7UHzvSBclyApUBrM2ng4J8hvUjm1suCIk0mMk=)
2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: 8Pao0AT8dxW6T4CwAgWpHWpXxG/CEjpNqpmyQLKWTcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 17:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4218 (0x107a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Validity
Not Before: Oct 2 17:34:45 2026 GMT
Not After : Oct 9 17:34:45 2026 GMT
Subject: CN=6abfeb35-a38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:a7:61:f3:93:49:4d:8f:ac:c0:5f:43:79:
a0:40:51:07:d9:e2:53:a7:e7:c0:48:1f:6a:92:43:
ca:52:a7:9d:40:2e:25:2e:0c:17:f6:ed:4f:39:de:
73:ec:03:0b:20:88:eb:d2:c0:0e:e8:f5:e4:28:9a:
3f:61:30:b6:c1:c4:1e:82:65:15:b1:4a:f6:67:53:
47:df:d3:a9:55:90:19:02:7a:8e:ae:0a:95:04:c2:
6a:a4:5d:a0:58:a1:ca:1e:87:09:05:61:c1:b4:0f:
4c:37:90:a2:94:5e:79:af:a0:18:7b:e5:e0:0c:dc:
64:f2:2b:dd:43:3a:56:e1:74:33:a2:90:44:74:87:
f4:dd:5b:f9:53:7b:f3:a4:0c:71:4a:29:b0:67:d1:
b8:ef:f4:52:3f:4b:bb:a0:2d:24:da:15:f1:9b:91:
64:eb:37:2a:99:c7:f3:a5:e6:9f:08:74:aa:7a:c1:
75:3d:f4:ca:ff:f4:54:81:84:1c:ce:f9:71:1c:58:
9f:30:9d:ea:93:62:f9:6e:a4:94:98:8b:77:35:fc:
2f:d0:51:9b:5f:a2:c5:5e:72:91:aa:6e:09:a3:11:
50:b5:a7:1e:4f:0f:99:0e:b1:28:a4:43:87:d9:35:
89:53:39:e0:b2:99:ba:ed:f4:3d:18:a8:3b:31:f5:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AB:85:21:15:7D:44:9F:4F:30:A4:16:42:96:3A:B5:91:AA:EA:41
X509v3 Authority Key Identifier:
keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:de:a2:20:c6:f3:75:53:75:2d:c5:f6:8f:bf:d1:b8:da:ed:
0e:04:5d:fb:66:47:de:e6:87:1a:2a:22:3b:fb:7e:dd:1b:59:
50:87:fc:0b:49:d6:f2:c6:02:fc:6b:7b:23:91:41:c1:e7:96:
f8:73:88:29:49:fa:a5:48:2b:81:fa:16:a5:86:25:05:0a:7f:
77:a9:46:f9:25:16:89:24:ed:9a:09:c1:87:e1:37:0c:1c:02:
17:3d:2f:e9:4b:0a:f9:c9:b5:d6:da:e9:c3:4b:7c:8a:0a:3f:
b1:4a:da:54:a7:e3:26:cb:f6:ca:33:80:15:38:13:e1:2b:52:
2a:bf:b9:86:60:a7:94:8a:2a:3f:e2:67:7b:84:85:1b:62:79:
9f:2a:91:81:16:d8:19:be:53:96:65:8d:8d:18:27:e2:c6:02:
c9:b4:2d:de:70:0a:bf:21:ed:f3:ee:18:66:db:54:d3:3e:ee:
49:ce:13:8e:7f:bb:cd:58:cd:6c:c4:58:97:a4:45:63:8e:7e:
89:7d:8d:a0:c5:3e:8c:e0:1e:00:23:4e:2c:a0:f3:1c:c7:96:
7c:c5:f6:ae:63:25:32:be:aa:07:e8:22:92:11:72:43:09:93:
ae:5f:4e:13:99:18:cc:ee:71:0c:d5:7a:4c:22:ea:97:27:37:
8c:26:70:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:34:36 2026 by rpki-client