
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
File: YNExg9Od5pVlYCMefgMX5py8bA8.mft (raw, json)
Hash identifier: rUNh1ZjF/7/VT/+bPmFHFbAZeSQeIn45BCWKYpQ1LXc=
Subject key identifier: B3:52:75:71:C9:16:48:78:37:9D:E3:BF:FF:B3:F5:0C:69:61:78:31
Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Certificate serial: 11E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
Manifest number: 11C7
Signing time: Sat 26 Sep 2026 17:13:17 +0000
Manifest this update: Sat 26 Sep 2026 17:13:16 +0000
Manifest next update: Sat 03 Oct 2026 17:13:16 +0000
Files and hashes: 1: YNExg9Od5pVlYCMefgMX5py8bA8.crl (hash: ape09nTjRdVg1nJO/Vyt08q95gCa/K8vXRX0OWRLL5w=)
2: BA310DEC23B611E98E5E6062C4F9AE02.roa (hash: tkQkh0SeDKmYlFagbGUi9uFru4fwo8KYtzlYsDdAl6k=)
3: 1F8D757623B811E9971D8168C4F9AE02.roa (hash: EtRVC+Tnay/XwjjnfrzZ4VWnKxvjsSi9zbht2seIWhQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl
rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4581 (0x11e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131D31, serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Validity
Not Before: Sep 26 17:13:16 2026 GMT
Not After : Oct 3 17:13:16 2026 GMT
Subject: CN=6ab7fd2d-afb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:e0:9f:79:a8:fd:de:a8:d7:56:84:d5:0d:
f1:e3:a3:62:9f:11:ce:d6:59:2d:3a:bd:4f:ad:51:
d5:ac:a1:d6:f5:f7:b9:5a:94:12:d9:89:d8:ea:81:
de:2f:58:fd:cf:5c:93:06:1d:0a:0f:54:4c:66:77:
ba:4e:a9:31:d1:19:cc:c8:5f:44:b6:8a:8a:ce:f4:
d6:50:e4:b8:7e:c7:b0:aa:96:8e:91:2f:7a:da:c4:
91:fc:67:76:c5:8a:39:8c:e8:d4:58:7f:cd:e6:47:
b6:93:ed:00:bd:05:f5:bd:8d:9e:e8:63:86:03:24:
8b:47:3e:fc:19:b3:cd:8f:06:2f:92:98:33:63:d4:
35:28:9b:a5:e8:51:31:5d:d9:e7:46:ff:8d:47:99:
d8:4b:5c:a4:56:01:d4:a6:54:2c:37:65:e0:a7:8b:
2f:0f:32:7b:6d:fa:ae:58:16:14:36:42:41:86:cc:
dd:9e:e9:bb:03:98:bf:7d:c9:94:72:9c:e2:3f:eb:
be:c8:f0:11:40:00:77:9a:9b:8b:a1:de:63:a8:2f:
6a:20:9b:42:5d:a4:1b:de:59:4f:20:1a:8f:0a:d4:
d5:57:78:fc:99:3f:39:34:18:64:20:59:42:3d:a9:
94:21:ca:5a:58:88:cb:b5:ac:7b:f0:db:4b:c2:7a:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:75:71:C9:16:48:78:37:9D:E3:BF:FF:B3:F5:0C:69:61:78:31
X509v3 Authority Key Identifier:
keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:19:c9:04:51:e4:d5:2a:c3:d3:a2:24:73:17:18:63:e4:58:
bd:59:e9:9d:c0:e1:80:0f:30:0f:3d:e6:86:05:a7:c3:dc:ba:
cb:85:ec:a3:c3:8d:d9:b8:8c:86:79:0d:b9:71:b6:43:33:ce:
ff:36:89:8e:d6:53:10:fb:43:d2:c6:2f:d1:88:e8:02:3e:36:
22:a9:6c:ef:56:75:ac:34:93:fb:38:92:c2:75:da:bd:74:89:
6c:b1:fc:1b:5d:e0:ce:c3:2d:dc:b8:38:6c:70:04:6c:35:63:
56:b2:28:f9:cc:0c:a7:14:91:9d:a0:05:4f:d9:93:29:ed:2a:
8a:03:e9:91:12:e0:e0:9b:39:13:36:cd:34:12:ad:ce:4b:65:
d9:6f:e0:ea:29:74:db:56:f4:09:8f:5b:da:d2:33:1f:b0:78:
d0:14:7e:b8:b0:00:45:09:93:d5:b0:2d:f9:60:c1:05:a8:36:
27:b3:c7:fc:fd:05:7e:6c:94:68:35:f7:2c:02:04:15:ee:0c:
15:ad:1b:f2:fc:37:a5:ba:91:58:bb:35:d8:23:63:e0:c3:8d:
ae:37:29:ba:76:80:a0:a8:23:8b:df:e6:25:6c:ea:7e:2c:f0:
e3:c9:5b:29:09:67:bc:cc:a2:6f:1f:ed:79:58:b2:6a:e6:61:
15:ea:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:36:35 2026 by rpki-client