
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier: orIA3X9n3VZX0mHbiOYQ/VWAZU7VJw23rfD6Mai7ilw=
Subject key identifier: FB:2A:BE:A1:67:3C:C6:68:88:15:2C:B6:6F:88:D8:7F:81:64:FD:DB
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer: /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number: 02D9
Signing time: Sun 27 Sep 2026 01:22:58 +0000
Manifest this update: Sun 27 Sep 2026 01:22:57 +0000
Manifest next update: Sun 04 Oct 2026 01:22:57 +0000
Files and hashes: 1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: r0q1jdbMV3fkGk18AwFTkYK4C0sJHIqAfqkCxpxCmBg=)
2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: cBSNwUp1ty95RJVAcjn2qIdEHHmRG0/43TIWKpupexs=)
3: OmZSMpEEL0tLE7npjI7LgigLQPM.asa (hash: DucjooR8bJcKBkb/k8PeV0JOUYpwsEDgIqHcoRHEnMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 01:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Validity
Not Before: Sep 27 01:22:57 2026 GMT
Not After : Oct 4 01:22:57 2026 GMT
Subject: CN=6ab86ff1-167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:41:33:db:47:d9:13:c1:75:01:a3:e3:64:
49:c2:f0:33:77:47:d0:c2:a0:d9:7a:03:16:1e:e9:
21:b9:9c:5e:22:74:a5:26:af:65:92:fa:97:55:0e:
2e:0f:0d:8d:97:91:f5:f0:e5:38:80:91:f2:21:14:
29:49:a5:bd:bf:0f:c6:2b:c6:47:ce:f7:8f:d0:ec:
38:b7:b0:f2:36:28:6c:95:d0:79:d3:c5:8b:bf:1c:
3d:eb:3f:b7:09:af:1c:fa:17:2d:78:59:37:3f:7e:
67:34:23:4a:40:ae:5f:77:b0:7f:9e:d1:76:76:3c:
24:3f:15:83:fb:26:b1:77:d3:15:10:24:d5:69:b4:
e7:3e:66:dc:7a:6a:8a:ca:5c:96:02:65:f9:6b:4d:
13:04:7a:29:3c:95:f7:a9:d8:a4:91:cf:6c:90:f7:
69:4d:a6:49:a3:f0:7c:f0:67:13:6d:7b:a0:ee:97:
3e:84:c6:aa:20:b2:9e:f6:f0:35:43:e8:54:28:b2:
60:9d:4a:f8:7d:ae:1f:26:58:03:61:33:51:7c:52:
86:9b:f3:30:a3:85:78:96:b5:a7:cd:33:b8:3e:10:
b2:c2:02:69:aa:6f:d3:6e:e6:3d:44:1f:9a:ea:91:
ca:43:c4:e3:89:cb:89:18:9c:f6:6b:7f:2e:17:20:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:BE:A1:67:3C:C6:68:88:15:2C:B6:6F:88:D8:7F:81:64:FD:DB
X509v3 Authority Key Identifier:
keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:3a:3f:3c:fa:06:b3:50:a9:d9:88:db:2c:fa:8e:af:0a:f3:
c7:dc:0a:32:67:57:79:61:5d:6a:6c:76:d1:a0:d9:bd:a2:c9:
be:a9:57:e6:0d:f2:80:78:b6:2f:ae:80:c2:d1:01:d8:43:53:
0d:04:50:b2:d1:4c:79:ef:29:f2:44:e6:92:a1:54:16:fd:b6:
fb:42:ff:ff:d2:7a:95:0b:0a:5f:68:48:e7:bf:f8:60:ba:47:
9d:f3:4f:c9:5f:2c:15:9b:78:9f:07:cc:e0:5a:cd:86:06:09:
d5:d4:6f:a9:0f:cd:db:be:02:b1:bc:e8:21:82:32:2e:e6:59:
c4:bc:ed:24:f8:d4:92:35:49:7a:b6:fa:6f:40:7b:ad:a0:a2:
10:a5:75:22:8a:6f:d3:a1:e9:95:b3:84:bd:7e:f3:26:e0:18:
46:b9:ec:b8:33:6c:09:fc:6b:3d:79:79:31:3c:29:04:36:b2:
f7:b7:87:02:d9:34:d8:be:19:49:91:87:56:4b:19:db:0d:e0:
ec:91:da:71:0c:1c:d3:23:1e:85:27:13:82:c3:5f:98:e3:f8:
a1:14:08:15:dd:32:af:a8:bd:8d:a5:81:02:9f:4c:9e:09:d9:
0d:96:fb:c6:1e:7e:d5:59:b7:74:07:49:13:d7:5f:39:e5:66:
f0:9d:54:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:21:44 2026 by rpki-client