
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
File: YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft (raw, json)
Hash identifier: d19mDiJ7reaL+Sx/E713Y5tvy4H1KtanPhlp8Pwriy0=
Subject key identifier: 80:8B:34:0D:E7:67:03:59:56:9B:EA:47:31:52:8C:C8:A5:62:93:A0
Authority key identifier: 60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB
Certificate issuer: /CN=A915307C/serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
Manifest number: 38
Signing time: Fri 25 Sep 2026 08:43:14 +0000
Manifest this update: Fri 25 Sep 2026 08:43:13 +0000
Manifest next update: Fri 02 Oct 2026 08:43:13 +0000
Files and hashes: 1: YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl (hash: Lu6rXD9Yghv7eZmx5rgcW6HkuXzqwCtzL/FMIcsjxK0=)
2: 4A5161F463DA11F18803A8B98447A888.roa (hash: s+ETcjgKMznsV0hPLHChNZ83FbOj0Ckmfwu/mAyqAVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl
rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915307C, serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
Validity
Not Before: Sep 25 08:43:13 2026 GMT
Not After : Oct 2 08:43:13 2026 GMT
Subject: CN=6ab63422-8f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:7d:c2:b4:8a:c8:84:08:76:12:dd:e9:05:
d1:f1:86:da:bf:83:3a:09:c8:ba:f5:7e:6c:db:4e:
b6:47:b0:43:2c:24:85:4b:ef:45:7b:11:f8:2d:45:
b0:6c:df:37:a3:ff:43:45:51:92:51:31:e6:62:04:
08:26:5a:bf:a4:60:fd:16:ce:08:87:27:f2:72:37:
a8:c2:80:fa:aa:df:53:39:9b:46:ec:f6:1d:b5:6a:
fe:28:8b:55:21:9f:0d:1e:da:fb:6e:1f:ef:ce:9f:
8f:e2:65:03:39:83:0e:6a:ea:51:f2:1e:ba:cd:5b:
93:86:76:1e:98:9a:3e:eb:2b:19:41:57:8c:5a:61:
aa:fe:11:f2:bb:fa:3f:53:0b:4f:2a:6e:9b:1d:aa:
84:41:59:5b:37:7e:a0:c1:67:8e:1a:ba:9f:26:ee:
fd:e4:5e:57:f9:dd:e9:26:a1:1c:f2:ae:84:b4:60:
c3:32:91:bd:29:eb:95:f7:f8:d6:9c:d6:39:8b:bb:
98:5e:66:a7:9d:e8:b8:85:d6:fa:3c:62:5b:24:4d:
31:d1:6d:1e:5f:e3:cd:7d:1b:fd:05:49:60:9a:d1:
6e:f0:84:2d:16:ee:3f:5d:9e:12:70:b5:f3:0e:66:
f8:ab:50:20:ff:c2:d5:76:d8:b1:c5:21:93:44:0a:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8B:34:0D:E7:67:03:59:56:9B:EA:47:31:52:8C:C8:A5:62:93:A0
X509v3 Authority Key Identifier:
keyid:60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f0:a9:bd:b9:20:87:95:f4:b7:64:02:50:ae:b4:91:f2:6d:
35:f4:11:11:65:9c:29:b8:f3:b9:6a:8a:ca:13:ed:91:31:0c:
85:91:0a:74:48:6f:43:1a:d3:57:a4:2b:33:61:06:a6:a9:b8:
ff:a3:b0:e9:e6:94:ea:45:cb:df:45:83:3c:e4:82:9e:76:f0:
92:ef:35:d4:09:77:e6:91:fa:91:da:67:45:43:9e:ec:2d:0e:
0e:57:96:e2:f6:24:18:88:1c:f0:ea:cc:3c:ab:c5:11:13:9e:
ec:90:a7:68:c4:ec:55:f6:4c:24:a5:86:9f:a4:1e:e8:51:4d:
13:e3:16:6c:48:2a:89:96:7f:57:d7:7d:8a:35:9a:f0:1b:68:
4a:4c:fe:6f:bd:6b:55:e0:14:34:9d:3a:39:d6:4b:98:66:77:
f4:76:a0:f3:81:36:ec:49:16:24:b7:d9:ba:96:e4:e2:c4:2b:
ed:05:57:03:6c:8c:c9:19:ca:a1:a2:cf:ad:f6:f2:79:8d:c5:
59:6f:1b:de:fa:27:0d:66:44:c1:98:c7:97:f3:3a:5a:a1:7b:
b0:a3:8f:f9:60:00:c5:42:63:b0:3d:60:a9:f4:96:b3:34:50:
72:48:c4:86:8e:22:21:b3:9d:8a:3f:e0:1a:e8:43:59:be:d3:
e5:18:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:28:29 2026 by rpki-client