
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
File: yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json)
Hash identifier: uDVhjqXBo/WovGMFcVMfsXGRtCRUVSDgCP0TM2lt+VQ=
Subject key identifier: A9:61:CC:E0:FB:E5:87:8E:50:E4:90:32:FF:BE:F2:4F:FA:CF:F3:3A
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Certificate issuer: /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
Manifest number: 01BF
Signing time: Wed 23 Sep 2026 03:43:42 +0000
Manifest this update: Wed 23 Sep 2026 03:43:42 +0000
Manifest next update: Wed 30 Sep 2026 03:43:42 +0000
Files and hashes: 1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: gVwgx9b3XuuJ7SK0QKARlS21Lu+Qc5bdlmXPFy8R9Rw=)
2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: /3nOzfVBV3G4XKfktsyW3g/oGq96lm0UNw7VtIzketI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Validity
Not Before: Sep 23 03:43:42 2026 GMT
Not After : Sep 30 03:43:42 2026 GMT
Subject: CN=6ab34aee-a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:34:1a:f6:63:ac:68:6e:09:7c:a7:f4:b1:
5c:65:0a:0c:5d:69:b2:05:6b:25:9d:6b:0f:73:82:
d2:9f:a2:53:fc:c8:a2:09:4d:1f:fb:34:5d:94:fa:
9d:69:6e:82:01:e7:87:0e:f7:89:80:0c:97:a5:7e:
8b:a6:e9:92:9e:50:51:9f:4a:a7:5e:94:25:0c:ab:
47:1b:8b:3a:2f:d4:1e:dc:e4:ac:67:f9:f3:07:fc:
73:28:bd:e2:a5:32:ac:93:ac:31:9d:b3:5b:20:03:
d1:1e:7b:06:ec:19:91:ce:f7:83:33:ce:cb:7a:a9:
08:92:4c:27:58:ef:37:01:a8:20:33:2f:34:ba:09:
c9:bd:54:6f:35:e1:08:b9:20:35:36:8a:5b:c7:9c:
1f:88:69:d0:56:60:f9:40:05:8d:53:16:9a:26:0b:
e1:86:b7:2d:37:a5:29:63:1d:72:03:ef:cc:a9:6c:
10:18:5c:d1:9e:ae:08:d2:61:c6:aa:cd:79:e9:8f:
00:cd:6c:61:df:77:c4:96:e8:91:72:45:98:18:cc:
b6:d6:41:2e:10:44:dc:c0:b8:27:32:81:fa:11:2f:
e2:56:f4:d8:2a:5f:e0:a3:31:31:e2:18:79:fb:ac:
81:ab:9d:71:fc:13:2e:f7:0d:c5:4f:9f:48:0a:7f:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:CC:E0:FB:E5:87:8E:50:E4:90:32:FF:BE:F2:4F:FA:CF:F3:3A
X509v3 Authority Key Identifier:
keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4e:57:c5:d0:d8:d9:85:48:1c:27:36:03:46:b9:e6:02:c4:
77:52:b0:b2:1a:ad:b5:98:46:1a:98:12:41:e5:60:db:b1:3b:
6e:6a:21:a6:2b:ff:77:9e:4c:8c:e3:62:13:a6:61:eb:fe:0e:
74:f8:a3:41:e3:55:50:c9:d2:27:79:40:fd:49:c4:ed:92:f1:
7a:0c:cf:36:ec:c9:68:76:90:95:86:1e:69:f0:5b:c3:98:7c:
af:3b:e7:ec:2a:84:6b:f7:2d:b6:5f:55:40:44:74:0b:d7:49:
ea:bd:17:ae:47:33:de:88:d5:90:f5:6b:09:7e:c3:52:16:a7:
07:ae:80:4d:ba:47:b6:fd:7e:88:ad:6b:47:16:8b:50:c3:d1:
12:fa:43:cb:d1:67:e3:e2:79:a7:e4:49:fe:4e:22:5e:56:f2:
bc:76:10:5c:27:5e:66:a4:b3:00:05:6c:f5:85:d2:3c:c5:34:
a0:74:1b:b4:7b:61:a0:4c:99:b1:9c:86:89:d7:b6:a3:f0:17:
76:95:8f:74:67:07:2d:19:57:8d:ba:87:3c:56:6b:f7:24:33:
f8:4f:fa:bb:3c:c1:c3:39:8e:a2:ee:0d:3c:be:2d:74:5c:55:
d2:ad:79:cb:11:3b:26:36:6d:31:f7:61:ef:e8:7c:4f:7b:37:
c8:78:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:17:18 2026 by rpki-client