
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File: YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier: 5eS142m72jSY8ob8UvfcQ7qVszG5n90dG+Mk/5wTGIM=
Subject key identifier: 21:90:1C:FD:88:B9:4C:F7:02:41:3C:40:BE:1D:20:CE:93:A5:95:C7
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer: /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number: 01D7
Signing time: Mon 21 Sep 2026 03:37:06 +0000
Manifest this update: Mon 21 Sep 2026 03:37:05 +0000
Manifest next update: Mon 28 Sep 2026 03:37:05 +0000
Files and hashes: 1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: FxcAZvaBXpp7lNM9K1nIcChfPTtmm2tvFikm/PDFHoY=)
2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: eGXhWTghID7LXCNSIEK8G8iUBL46dL5mXlz39bqNtkc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Validity
Not Before: Sep 21 03:37:05 2026 GMT
Not After : Sep 28 03:37:05 2026 GMT
Subject: CN=6ab0a662-af72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:e8:a6:ef:53:62:78:03:e4:e1:bb:2e:41:
36:9b:c0:c7:cb:4d:d0:3b:89:b0:84:b3:82:83:fc:
c2:15:19:28:99:96:03:54:95:bf:ff:20:46:1b:e5:
87:c9:79:fb:37:2c:21:1f:e4:dc:6f:72:17:d3:d1:
04:4d:db:42:e8:13:3d:91:f8:30:80:d5:d5:1a:7d:
b4:0e:3c:49:d9:a8:38:83:46:0e:82:be:4d:ce:31:
11:67:d1:24:c7:54:bb:f4:98:d1:d9:a8:e3:8f:e4:
2d:03:55:dd:0a:99:ef:bb:56:7e:ec:ef:dd:e0:f1:
0e:35:00:cb:4d:76:a2:b1:53:80:84:cc:87:fc:2e:
fa:62:74:93:9b:9c:7b:80:f4:f1:4f:bd:07:56:d4:
af:c7:20:5c:4c:e0:a0:df:d5:5e:8b:8e:21:4f:89:
44:aa:df:be:17:a5:85:d5:1d:31:b7:07:83:83:9d:
0b:c3:23:4a:5a:75:11:0b:11:b1:e5:a4:de:18:88:
8f:81:c4:f5:56:e4:ad:6c:9f:23:68:08:c7:4a:67:
77:b5:f2:2b:6e:59:75:f8:b0:5d:40:d5:ef:23:cc:
a7:3d:85:74:2b:63:59:3d:89:50:1e:da:c8:9c:61:
71:9c:59:8d:bf:f7:1b:08:70:c0:f4:f0:60:25:f5:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:90:1C:FD:88:B9:4C:F7:02:41:3C:40:BE:1D:20:CE:93:A5:95:C7
X509v3 Authority Key Identifier:
keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:f6:52:8a:18:71:fa:ba:0e:8a:db:46:fd:d5:08:fe:74:32:
c7:d6:02:8c:a6:b5:a8:4a:82:ec:e4:ca:d8:15:86:e1:6a:c0:
53:ad:e8:e0:7b:38:77:27:73:04:b8:71:bb:83:28:79:94:04:
96:ce:4b:0a:20:1e:65:3f:bf:1b:36:60:11:55:e7:00:10:dc:
61:ad:f6:9f:86:8e:1e:00:e5:72:4b:cd:e2:d5:2e:46:b3:85:
fd:70:6e:fc:f8:24:8c:ff:dd:b2:c3:17:55:bb:97:06:31:7c:
44:8c:55:2f:2c:ed:43:40:35:f5:8b:1f:93:d4:47:2a:3e:02:
56:55:55:a0:69:53:4a:40:0b:fa:e6:96:19:bc:45:27:d7:3b:
cd:6e:63:28:0d:b1:08:61:bf:c9:de:37:32:b5:3f:11:74:00:
7d:25:3f:8b:ec:dc:b2:c1:37:7a:8b:99:d8:c0:39:d2:c4:d2:
d4:6b:b8:c7:28:42:2c:fd:ce:e5:b3:21:21:f4:1c:8a:b8:8f:
94:b5:59:71:43:9d:8b:00:8d:ed:2a:a7:79:38:5d:cf:d8:55:
41:23:47:75:0a:f6:df:e5:43:01:04:07:9b:0e:15:11:62:8d:
3d:8f:cd:fd:ed:1d:87:91:9d:40:9c:c0:c3:c2:69:ee:72:f4:
38:26:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:24:21 2026 by rpki-client