
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier: 2HE7ybCVxO6/K7qhCfm5QaDgry4mGOdsZebO6gLHKhk=
Subject key identifier: 6A:70:69:54:9A:57:F0:E3:46:DD:0A:68:17:8B:6B:2D:E3:99:C9:01
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number: 029D
Signing time: Fri 25 Sep 2026 01:39:21 +0000
Manifest this update: Fri 25 Sep 2026 01:39:20 +0000
Manifest next update: Fri 02 Oct 2026 01:39:20 +0000
Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: qaOATlvKVfRb08oyB5iRWPYE+NT3xrTzFtEr7sIqyqE=)
2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: IQ7wQrkp6KFdnuD/CeQ1UB+HAtSyDPflLHSW+K88QUs=)
3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: ZJ1JXD8OMZ1/bFwQ4CUwNfMJD2mA1nTwWCd7m4pPBcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Validity
Not Before: Sep 25 01:39:20 2026 GMT
Not After : Oct 2 01:39:20 2026 GMT
Subject: CN=6ab5d0c9-019e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:c7:4a:f2:8d:fa:c3:c9:cb:c0:75:fd:5f:
b3:57:c0:03:50:91:1e:7a:03:b7:86:64:46:6c:7d:
57:27:e2:fc:61:7b:79:21:32:21:96:6b:ad:a9:bd:
b7:1e:92:3c:5e:3e:23:0f:ed:76:a3:c6:78:53:66:
95:45:05:9d:63:38:0b:f3:ee:20:99:db:d2:1a:d9:
e0:26:ca:53:db:88:e9:cb:f9:8a:09:db:42:90:4c:
4d:ad:23:9b:46:7b:f1:8b:56:5e:0e:d8:a8:0b:43:
81:85:7e:f0:66:5c:62:63:9c:ab:c0:f0:fc:01:4e:
7b:d6:98:7d:96:e8:8a:bf:ac:a1:99:72:d5:f4:46:
f9:b8:ad:84:6b:0c:14:30:32:35:8f:ee:47:df:07:
42:ac:5d:2a:59:ed:3b:47:83:f6:a1:9b:0b:81:ce:
2e:29:af:f8:5f:f5:47:ae:7b:40:4e:01:9b:87:02:
ff:37:b0:7d:33:a3:9a:2d:8b:ed:ce:ea:f0:18:f4:
72:15:1c:a8:a9:4c:97:17:39:f7:23:1a:c4:de:0f:
c0:c8:50:25:3a:16:78:7c:3a:01:c2:92:55:9b:9e:
df:e0:be:ef:c6:38:f8:a2:14:70:12:d6:4a:c7:f8:
d7:78:b9:68:3a:e1:20:ad:bc:16:a5:12:7d:ac:54:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:70:69:54:9A:57:F0:E3:46:DD:0A:68:17:8B:6B:2D:E3:99:C9:01
X509v3 Authority Key Identifier:
keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8b:8a:d0:ae:a8:2d:2f:45:c4:7b:d9:c5:8d:18:a8:bb:22:
86:7f:17:69:e5:57:dc:31:d9:41:07:16:35:98:65:bf:ab:9b:
92:17:1e:75:5f:93:e7:d8:ee:e7:f1:14:e0:f0:b1:50:e0:5a:
ea:ab:9b:2f:e8:ce:30:57:e1:e5:c1:2e:23:d3:cc:f1:41:79:
f4:22:1c:55:c8:1f:fe:ab:69:fd:7d:e7:5e:d2:75:8f:c3:b0:
56:61:08:7c:e5:65:76:d5:34:53:63:0b:e6:5d:e8:85:00:68:
40:92:03:4a:cf:e0:a5:b7:a5:51:bc:6b:23:62:f3:bb:3a:4a:
be:d0:b1:73:ed:36:1d:9f:f4:5f:8e:1e:9b:30:5e:3e:7c:80:
f5:a5:e7:81:a9:36:f2:8e:54:35:65:08:9a:fd:09:54:77:49:
40:97:36:f7:93:f5:68:8b:cf:70:19:1d:bf:18:5e:e9:85:52:
f1:dd:ac:04:01:92:7b:a0:95:28:b4:35:80:69:5b:43:65:cb:
3c:a0:8e:38:87:9f:aa:f4:69:f3:5f:da:6b:48:fe:0b:1c:ae:
a0:6b:1e:2a:e6:5a:ce:89:4c:80:aa:f5:ae:87:86:1b:92:1b:
34:f5:37:5d:de:5d:36:e0:4c:e3:82:13:30:89:ee:7b:84:d5:
2e:63:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:04:13 2026 by rpki-client