
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json)
Hash identifier: Prx/chA4E+LViYI0+jSeP9M2yGvTNnXKuoxvwX279ZM=
Subject key identifier: B1:69:0F:20:A9:9B:43:15:09:DF:F7:F7:EC:A3:AB:1A:F4:1D:E5:E5
Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Certificate serial: 0D15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
Manifest number: 0D06
Signing time: Thu 24 Sep 2026 18:21:00 +0000
Manifest this update: Thu 24 Sep 2026 18:20:59 +0000
Manifest next update: Thu 01 Oct 2026 18:20:59 +0000
Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: D0YR4O0aGnoHYu3DZSVgyAvBJEmy6FZz6f+Awp4YPZs=)
2: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (hash: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E=)
3: DF7C7778A97711F0A76BF369C4F9AE02.roa (hash: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Validity
Not Before: Sep 24 18:20:59 2026 GMT
Not After : Oct 1 18:20:59 2026 GMT
Subject: CN=6ab56a0c-6154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e6:64:4b:d7:8f:8f:72:83:ec:b6:21:cc:74:
7f:ef:99:18:09:6a:e9:6e:9c:e4:fb:57:18:dc:77:
6f:b3:73:20:e5:fc:2b:0b:c0:ec:fb:77:bd:d6:b7:
57:65:78:14:1c:d9:6b:cb:25:59:70:48:1a:8d:34:
93:91:94:41:e0:39:a3:28:dd:38:ca:d8:af:bc:a8:
c6:0e:40:9b:97:dc:88:c6:c7:e8:de:be:46:64:30:
4a:4b:22:e3:6a:50:69:86:9f:fd:6a:8e:e6:29:9f:
11:e2:d1:ea:9d:89:fa:55:f9:f1:da:c0:a1:04:64:
20:9a:0b:44:63:3d:93:3b:40:fe:4a:84:c0:91:d5:
17:e7:ef:6d:bb:35:76:5b:a1:c3:92:5c:a1:99:64:
7e:cc:d7:9c:ad:c6:03:22:a3:d7:6e:4b:c2:48:05:
db:e9:a7:4a:6d:cf:a7:c5:18:0a:48:1b:f5:4f:a6:
03:65:c1:5e:94:f9:de:b7:83:76:dd:0a:ef:da:87:
74:05:04:a2:d3:bb:06:21:39:80:44:9a:81:85:df:
e6:c6:77:91:82:80:14:cf:12:b8:0a:d9:5e:b6:3c:
68:e2:4f:3d:2a:e5:62:91:b0:0c:ce:03:5c:94:49:
7d:5c:3f:3f:77:52:5d:78:d0:19:4c:2e:cf:7b:46:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:69:0F:20:A9:9B:43:15:09:DF:F7:F7:EC:A3:AB:1A:F4:1D:E5:E5
X509v3 Authority Key Identifier:
keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:5f:47:a2:1a:bc:87:80:86:2c:c2:06:78:68:6c:ea:49:04:
51:cc:ed:53:f7:8e:57:26:9f:d1:b1:93:bb:92:0a:35:c4:9e:
95:25:4e:dc:66:f5:9c:23:69:c4:fa:fe:6c:0a:92:62:55:3e:
f7:8b:67:5e:1c:39:1d:4b:b8:40:d1:bd:7d:66:16:c1:18:3a:
5a:5a:05:80:94:26:cb:13:6b:9d:b0:ae:e7:16:81:f1:0a:3c:
ee:05:76:e2:37:2b:3a:ae:6d:1b:5c:a4:02:45:a5:a4:f7:80:
1e:0a:07:ef:58:24:c5:5b:0f:d5:39:3b:bf:0d:ac:21:c6:21:
e0:6c:59:0a:12:12:d4:21:25:85:66:1e:18:14:ff:9b:2b:39:
1d:74:ec:2f:5b:b1:31:dc:95:dd:79:59:0b:a2:84:3a:90:d0:
c1:6b:e5:d4:80:22:c1:1a:b2:61:19:71:ac:57:bb:7f:b7:3d:
be:f1:b1:bd:72:0d:18:48:29:08:2b:2d:98:0b:68:cb:d4:02:
38:14:d1:c1:d7:3a:54:39:c4:3c:74:0a:fa:bd:22:44:2a:41:
78:fe:9a:9d:cb:5a:ae:01:11:e2:e4:bc:c9:3e:e1:cb:b1:9e:
da:8c:9b:7c:18:e9:64:0e:e2:2a:9e:b9:30:ec:af:e7:d1:05:
f7:95:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:12:07 2026 by rpki-client