
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json)
Hash identifier: v7c9Nn2Ew/AENtHtx/VVVOI6s6oF7LJu4uaiL7SomU4=
Subject key identifier: F1:81:22:9C:3E:BD:9A:88:EA:5A:B8:0C:58:A2:76:21:D8:3D:FF:79
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
Manifest number: 01FB
Signing time: Fri 25 Sep 2026 03:20:01 +0000
Manifest this update: Fri 25 Sep 2026 03:20:00 +0000
Manifest next update: Fri 02 Oct 2026 03:20:00 +0000
Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: Nebo2ndj4aXVzQmtt3JF5XaRCEc7JelWC3b+n/ZFP7U=)
2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: ExYQsL4DX6Hi4BKxNjsrHvE6gNcBGNmimGeGw2+s/0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Validity
Not Before: Sep 25 03:20:00 2026 GMT
Not After : Oct 2 03:20:00 2026 GMT
Subject: CN=6ab5e860-ced5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:64:bd:73:12:b7:e2:64:91:0f:e4:08:04:
e3:41:10:e0:0a:a4:44:84:e3:39:74:d5:0d:d8:03:
07:4f:8d:bb:6d:f4:79:bf:ea:0c:a2:43:ef:7a:5d:
73:7a:fe:97:8e:2b:77:5b:5a:18:8f:f4:7a:65:49:
be:12:5e:bf:5b:f0:ec:c7:0e:6d:66:bb:67:db:a0:
1a:b3:a6:fa:f3:99:3f:3a:c2:bc:db:fb:19:c4:f1:
52:21:f4:bf:e2:bd:30:4f:3c:74:bd:00:c3:b9:02:
8f:0a:24:d0:7b:c4:36:4b:a7:ad:68:5f:0b:f6:d3:
72:59:45:b5:6a:d0:ed:06:b7:d9:40:4f:d3:a9:bc:
6c:21:79:62:9f:70:d4:36:ec:d8:7f:6c:d3:18:b4:
37:2d:a1:63:11:71:3f:ca:ab:99:1d:e6:a3:10:18:
53:33:09:a1:57:25:e4:d3:c6:7c:f1:00:02:6b:9e:
eb:30:e2:e6:f9:ce:4a:d6:49:6d:b1:a6:2b:e4:fe:
55:7b:c4:3f:3b:71:04:62:d5:55:82:a1:3d:07:05:
11:de:b0:2c:84:11:09:e1:88:6f:8e:16:ed:73:b4:
bc:a3:a7:ed:fb:09:e0:81:67:4a:3f:f9:77:9d:c9:
bb:a0:67:ea:52:70:ae:4d:a0:1e:61:5a:77:21:d2:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:22:9C:3E:BD:9A:88:EA:5A:B8:0C:58:A2:76:21:D8:3D:FF:79
X509v3 Authority Key Identifier:
keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:20:9e:92:de:46:c6:43:1f:5d:58:7b:b9:1f:da:fa:f2:f1:
1e:ef:19:82:90:f5:e2:6a:40:e6:7b:dc:29:00:b8:44:41:d1:
4f:0e:70:ce:08:e4:d4:64:16:5b:46:02:4b:5c:c0:6c:29:85:
21:b9:77:c6:d1:86:08:5e:56:dc:96:d9:ef:1f:5c:d6:87:c8:
e9:5f:ae:bc:c3:59:fc:c9:1c:20:61:92:86:d4:fc:f6:0a:43:
43:e6:36:b6:34:de:ad:0c:55:48:ed:b0:04:3e:78:b4:d5:8b:
3a:b7:0a:7d:6b:85:dc:75:c3:db:1f:4f:fe:07:ef:c8:87:f8:
5c:d5:dd:e1:0e:e3:e7:85:d8:f0:e4:66:69:c4:e8:14:4f:f4:
eb:5e:66:26:ce:7c:f0:9c:d0:55:9f:3a:29:53:dc:63:e4:bf:
6c:58:d6:7f:58:d7:43:4b:32:c3:a4:4c:5e:33:11:69:d3:8f:
42:84:e5:42:8e:7d:e8:43:f3:83:94:55:7b:e8:a3:4a:e1:45:
15:1b:39:08:b9:6f:ae:e1:d7:94:56:eb:03:ae:61:c3:53:24:
63:89:e2:15:d3:ed:29:58:8a:bd:9b:21:b5:29:04:30:30:35:
1b:6b:9c:1c:5e:81:ad:1d:30:49:37:ae:d2:5a:c4:dc:ee:b4:
d4:65:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:04:15 2026 by rpki-client