
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
File: y70GgkBePlkg8UsDghSUjF410cM.mft (raw, json)
Hash identifier: 1gU8epQNDXlJG/RyaxkiwRTR5UODnL8evAn82fLxLqY=
Subject key identifier: 76:E7:AE:64:FD:D8:0B:5A:CA:25:E8:C6:79:A9:86:07:10:D8:11:5D
Authority key identifier: CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3
Certificate issuer: /CN=A916D4BE/serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
Manifest number: 0576
Signing time: Sun 20 Sep 2026 23:27:47 +0000
Manifest this update: Sun 20 Sep 2026 23:27:46 +0000
Manifest next update: Sun 27 Sep 2026 23:27:46 +0000
Files and hashes: 1: y70GgkBePlkg8UsDghSUjF410cM.crl (hash: gGY3vAyamGanZbd88+YUiOiXfRtaYjSgRBsx6EnDJvk=)
2: 6B6833B43D3211F180C94A7884EE528E.roa (hash: gzQgQxyi1t7zAFl1L1PXe5vPjsPRekeb+UDdZ8X5gRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl
rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D4BE, serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
Validity
Not Before: Sep 20 23:27:46 2026 GMT
Not After : Sep 27 23:27:46 2026 GMT
Subject: CN=6ab06bf3-8fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:a4:9b:0e:e2:2b:49:e4:b5:9f:44:e6:73:
53:73:bf:c8:75:fd:a9:90:b7:21:89:31:42:7c:f9:
58:87:0e:e3:5d:a1:e4:0f:8d:b7:31:0b:58:d4:d4:
0f:13:f1:8b:d6:a0:be:6a:ae:df:ac:80:eb:b5:db:
8e:b1:1f:ec:08:d5:d1:00:ad:89:55:ce:e3:bb:71:
72:d2:21:b1:33:f7:61:e2:8e:7a:ea:02:55:2b:0e:
47:98:fd:5d:79:d8:2b:17:02:9a:af:a3:21:e8:be:
ee:97:81:78:e5:03:d1:38:aa:1b:89:fb:bf:2a:b6:
2a:5c:b0:ea:e1:1f:9f:0b:ef:20:35:96:11:b4:34:
2d:be:09:e2:7e:f5:f8:62:2f:8a:f5:26:7f:e5:1e:
bf:39:05:78:f0:b9:d9:f5:04:3c:5e:db:71:af:2b:
c5:3e:a7:85:22:68:8a:ef:93:61:53:97:47:81:a4:
a4:c3:47:68:34:bd:f6:be:bb:23:a6:88:3e:48:6f:
b5:0e:b2:68:c2:4a:0c:84:a4:36:ad:73:e4:66:67:
b9:ab:11:9a:62:d5:4a:ad:8c:d0:b3:4a:a0:c5:55:
1e:1b:05:66:13:df:72:8d:aa:77:79:aa:84:ba:3c:
b3:10:6e:c8:5b:d4:08:2a:11:49:4a:a9:0c:e2:c8:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E7:AE:64:FD:D8:0B:5A:CA:25:E8:C6:79:A9:86:07:10:D8:11:5D
X509v3 Authority Key Identifier:
keyid:CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:15:68:c8:93:6f:fd:2e:74:ae:ca:87:18:17:ff:3f:1d:36:
c9:e0:1c:ed:cf:f7:95:b8:72:4f:c6:89:40:96:38:44:f7:42:
1d:8f:52:27:4e:e7:5d:16:94:05:0c:d2:8b:f2:62:6e:47:4b:
8a:3f:39:70:a9:89:40:8b:8d:10:62:29:d5:9e:b4:e5:ef:ae:
75:f5:59:b7:46:a4:a4:1c:b5:22:63:bd:28:3f:ec:11:9e:c6:
76:20:8c:4d:ed:3f:16:af:87:98:76:c2:f3:8c:46:6b:d6:f0:
28:67:e6:48:81:81:69:27:c4:aa:4c:9b:39:e4:9f:f7:4f:50:
cb:db:64:d4:09:dc:84:7f:e1:e3:fb:45:1d:2f:7d:4e:42:b1:
73:b1:69:33:09:08:b5:d9:88:83:d3:f5:d5:3f:87:0b:76:c0:
b7:db:a7:2a:0c:4c:db:be:95:2b:73:82:98:a6:d6:b8:5e:ce:
8b:b4:ec:9c:0e:42:26:f9:6d:04:13:5c:92:35:c3:fc:2f:1d:
23:df:c9:27:d3:0e:02:7c:22:bb:3f:78:3a:64:e4:6f:11:ad:
65:50:9d:81:bb:27:96:54:c4:47:f7:80:59:a9:bd:9b:20:7c:
79:dc:61:28:e0:d7:fc:db:51:91:87:18:65:9b:b0:d6:af:0b:
83:f6:92:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:35:28 2026 by rpki-client