
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json)
Hash identifier: Soe9f+TxTiWHHxsj5BmJ8bfRx7UWvS5wJYdK/8l81gE=
Subject key identifier: 3F:65:35:07:45:95:0D:25:CC:BF:31:45:96:45:F8:B8:5F:14:FA:DF
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
Manifest number: 66
Signing time: Sat 26 Sep 2026 16:09:48 +0000
Manifest this update: Sat 26 Sep 2026 16:09:47 +0000
Manifest next update: Sat 03 Oct 2026 16:09:47 +0000
Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: IcbrQ4Wnap0ONh2lu4qIkAeHtYoZ6OaXGL9J0dcias0=)
2: 7DD523E4B5BF11F1A1B9E4684011F970.roa (hash: N8zBs2nqYULhjEakh1ZPhwNjsfVvZEVPxtYHbo3pors=)
3: E685F69A372D11F1A4767B088F833773.roa (hash: xxaBD6LprH9hQ8io14GmQw0CDe9PqoexCn5W8GjOjGg=)
4: AAEECC6A6E2D11F1A887915478A30FBC.roa (hash: JY+2F4fpy8yZBneZcoqizCFFml/1qiEJ9kZd9Mylttk=)
5: D8375D30A69B11F1A29A77493411F970.roa (hash: lOlX9Lvr/uUrJ7LnrKqqn7C2gTnu/MU8GWVidO+ZiN4=)
6: 62A4D5365DE711F18D15F5F9BA833773.roa (hash: Yl758J5gQQ4kaYtkddFzVioKhcg++8qC0CLb5+Q1zpU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 16:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Sep 26 16:09:47 2026 GMT
Not After : Oct 3 16:09:47 2026 GMT
Subject: CN=6ab7ee4c-a8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:5d:19:fd:7e:82:8d:bd:b3:1f:49:0d:64:
cd:fb:fd:8b:1d:a8:37:63:38:b6:2d:10:c2:42:e3:
8a:bb:7f:c0:60:3e:cc:4d:3e:95:bd:52:68:c4:e2:
b6:b1:89:27:f1:84:75:f9:47:0c:8c:d8:bd:aa:46:
e6:ce:98:59:c4:49:3d:75:51:34:f0:92:f8:66:08:
ad:f6:05:68:30:8d:b1:bc:e0:5d:d5:45:42:6c:84:
81:a2:91:7f:39:1c:0e:09:44:f5:5e:79:25:13:1c:
2c:82:0e:28:30:d1:af:b4:ae:6a:ae:28:53:58:7d:
ab:23:8b:ca:b2:cb:72:57:f7:69:2c:e7:b7:6d:de:
1d:d7:8a:ae:c9:0c:d1:fc:3c:53:e4:f0:ca:ff:0f:
f3:91:d2:b9:84:98:e2:4d:90:d0:04:56:9d:62:35:
93:a8:63:c1:fb:65:db:74:9e:47:9a:1f:73:de:66:
94:e6:97:de:41:9b:ea:28:47:3a:b6:f0:3d:72:27:
14:0b:c8:58:05:31:32:da:30:47:ae:f0:7b:84:9c:
14:6a:9e:19:ac:31:62:63:51:c6:9f:fa:bb:23:06:
ca:28:ee:69:bd:93:b0:80:75:f8:c9:61:22:5c:ab:
22:80:ba:55:1a:71:08:1d:ea:01:bd:f2:e9:67:cb:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:65:35:07:45:95:0D:25:CC:BF:31:45:96:45:F8:B8:5F:14:FA:DF
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:06:3f:87:50:29:64:53:47:a0:71:6e:ca:84:58:30:dd:a1:
30:3c:21:e4:8b:c7:84:d6:7c:fe:a6:2e:4c:0c:f3:75:db:2d:
13:5e:40:a3:2c:cb:68:28:73:75:14:42:86:41:76:d6:53:7f:
97:b6:29:b1:e5:d6:0d:08:27:2b:14:52:4d:cc:20:fb:b1:51:
cc:78:2c:91:c9:a0:d8:87:ea:77:f0:6a:38:69:54:a7:8f:a7:
7e:92:87:e8:c1:c2:ec:df:03:e4:8e:25:7e:b6:64:fa:52:60:
5e:e1:50:5d:74:69:89:6e:8f:88:06:f2:c3:73:e7:36:19:2f:
a8:b3:51:e9:d8:d8:a7:fc:be:16:ab:21:d3:4d:ea:ba:da:dc:
77:eb:b7:8d:87:aa:01:0e:5d:be:f6:a8:ff:5b:15:37:cb:f4:
11:2b:73:bc:2f:48:f1:92:06:b0:e5:88:7a:4a:04:43:e9:2b:
07:4b:34:03:e0:91:6d:2e:e2:c3:7b:79:e8:ae:3e:7d:ba:8d:
ff:a6:75:7d:5b:27:11:14:cd:ca:84:70:75:b8:5b:77:13:21:
fb:c1:1b:4a:a7:ec:24:1c:91:75:59:e0:24:5b:5b:f9:10:f8:
9a:f7:33:78:22:ee:0b:f8:b9:95:89:d8:2b:ea:04:cd:e7:be:
93:fb:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:00:58 2026 by rpki-client