
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier: LSrYW6RRHDF8AMCErEEByX2tTX0eigB7Vi3Nw4EN+9M=
Subject key identifier: A2:52:E3:36:2A:EB:C1:77:40:2E:E8:F9:7D:4A:5C:F1:2E:E6:9F:24
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 363E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number: 35D8
Signing time: Sun 04 Oct 2026 15:17:58 +0000
Manifest this update: Sun 04 Oct 2026 15:17:57 +0000
Manifest next update: Sun 11 Oct 2026 15:17:57 +0000
Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: 85WuKxEtWmu7TKYd0z3Gi+BZcwefIjvDngrD3VoGDGQ=)
2: 7BAC7A5621D411F199DF6C46233D8C67.roa (hash: /mDg6LUZzeHlaNJOXKegHskznJoBNs4nZJuthgsnsWg=)
3: EA6E0AAC50D411F18B34A857BE833773.roa (hash: OEoll2QdrXXA0K9ht1DiuZRtdqA89xzzL49jYr5VTFI=)
4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: CujlrPZRzwdLdoypUA6XG0sSyWx22QqMi3Wunv/TANU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13886 (0x363e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Oct 4 15:17:57 2026 GMT
Not After : Oct 11 15:17:57 2026 GMT
Subject: CN=6ac26e25-6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:f1:9a:18:f2:c8:1f:e4:75:61:5d:da:00:
48:c1:77:58:18:22:a7:d9:64:dd:0f:1c:fc:25:98:
5f:84:3d:94:56:ce:fd:48:97:f2:61:60:bd:c4:71:
08:30:bf:76:7e:50:7f:02:e2:bd:c3:2c:00:e8:18:
85:05:77:18:8d:fc:d4:7b:11:20:43:dd:87:c7:f3:
a1:52:1e:09:48:19:c1:4a:fd:92:9b:48:1c:79:78:
28:53:c2:a3:1c:ff:6b:bc:27:77:52:c4:ac:db:6e:
4f:e5:3e:6a:46:fc:69:79:6c:82:7f:b9:da:08:d1:
25:b3:18:7a:85:d4:2d:ec:ad:00:d7:9d:fd:22:d0:
c5:42:19:c2:7e:45:05:0f:2a:1e:86:d8:2c:29:62:
8e:bb:c7:33:ea:97:05:df:66:44:6e:a4:30:72:f2:
43:5c:a0:5a:db:d7:b2:9f:04:2a:58:f5:ac:a4:56:
75:93:06:b9:b2:81:03:9b:e4:3b:d0:42:b5:44:89:
72:cd:da:cb:4d:db:7c:e5:45:76:a3:06:a9:28:51:
3d:d9:51:2a:2b:52:e0:37:c0:13:80:06:dd:31:cb:
64:97:82:95:d7:73:2e:5c:9a:c1:c8:84:8e:72:fe:
30:46:32:4d:9c:3a:0a:31:9d:0d:1a:cb:88:81:21:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:E3:36:2A:EB:C1:77:40:2E:E8:F9:7D:4A:5C:F1:2E:E6:9F:24
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:cb:41:b3:d5:8b:5c:ee:2a:17:d7:f9:e6:38:2d:03:b1:5f:
24:5a:24:98:0c:d1:fb:e3:6b:d0:b9:f5:57:a1:83:46:8e:3b:
7c:b5:d2:d4:87:65:9b:e0:09:45:3d:75:14:59:a9:d2:c1:dd:
01:93:af:2f:0a:6a:85:84:bb:bc:c9:49:50:30:84:b1:e8:48:
58:43:be:16:d7:4a:fd:93:ad:1c:77:d8:5a:54:a8:c3:84:cc:
7f:cd:1b:f6:fc:28:27:b1:95:cf:32:14:b5:16:e6:ee:0b:4a:
c5:10:3d:26:2e:95:f5:ca:fd:8d:24:6e:d7:f7:ac:7b:67:52:
bc:55:65:db:0d:2b:98:5f:ec:d9:fb:aa:f4:0e:48:12:15:a9:
0d:37:88:ee:62:88:cf:61:7a:0a:2f:7f:2d:ff:68:e6:bc:b6:
1a:20:4e:a3:62:ba:5e:4a:10:c3:c4:9c:39:b3:8c:9a:4e:c7:
26:ec:80:2c:ee:5f:da:c4:f0:aa:c2:92:4a:37:01:95:db:0b:
61:08:44:dc:d2:41:e8:0a:23:6b:75:e3:e4:85:1b:b6:ff:ef:
e3:07:fd:7f:33:9a:eb:d9:f1:81:86:ab:14:86:f1:28:ab:fb:
aa:a7:84:a4:a8:0e:39:21:4b:c8:f6:14:b5:49:df:50:b4:a2:
8c:a9:e4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:19:24 2026 by rpki-client