
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
File: yCt7N51v7So8MMRTfg-HzLYIIus.mft (raw, json)
Hash identifier: pg6VDNwxTMZ4KUAKGb4cKedhgAdq1vX5E7OxkVKFHf4=
Subject key identifier: 44:AA:68:A6:00:6D:CB:DE:B6:15:A6:62:81:A4:0A:AE:72:C1:59:BD
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Certificate issuer: /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
Manifest number: 025F
Signing time: Fri 25 Sep 2026 02:14:57 +0000
Manifest this update: Fri 25 Sep 2026 02:14:56 +0000
Manifest next update: Fri 02 Oct 2026 02:14:56 +0000
Files and hashes: 1: yCt7N51v7So8MMRTfg-HzLYIIus.crl (hash: uBCWuy1sqZgyLzJDLy/uAMwlq6aEIVNuxEcTHD4FcaY=)
2: B50ECD32A57E11EEB4533738C4F9AE02.roa (hash: l91Dssw8/pmNPl0UZ8Pj4iGcNrigdX9iHQBJ3R2+iqI=)
3: 348BAEE41C2D11EEB362491FC4F9AE02.roa (hash: +rjncpi6r8gzrI2dwiyOCyHrVcg7Wh5JTPPsoLstCjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Validity
Not Before: Sep 25 02:14:56 2026 GMT
Not After : Oct 2 02:14:56 2026 GMT
Subject: CN=6ab5d920-49a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:33:bc:cf:57:f4:4c:f9:78:d8:68:a7:ba:
4c:af:f4:ea:85:b6:71:a4:98:43:52:cb:e0:e6:73:
7e:6c:3a:27:d8:e4:f3:6b:e2:e3:16:a2:19:07:cc:
2d:18:ca:9a:dd:7f:14:9b:3a:a6:50:78:06:91:dc:
1f:bd:fb:c5:25:f8:8b:22:a5:e9:e3:a9:2e:bf:d9:
b5:73:1d:aa:a7:0d:ad:62:fa:3c:4b:4e:00:42:73:
31:98:6b:17:53:e0:ba:f2:00:8b:06:4f:76:87:61:
db:ea:78:25:90:78:0c:60:1b:64:b8:7a:39:d0:43:
de:e0:b5:d6:b7:83:62:19:6f:fb:0b:6c:f9:30:b3:
c5:21:9c:74:ab:86:80:51:55:43:e6:3b:f9:4e:a7:
8d:46:43:09:89:b4:9d:48:56:d3:49:d3:34:9d:c8:
17:4f:0e:d8:19:83:ff:43:08:04:11:9c:cf:a2:25:
0c:28:5f:9c:4a:86:0c:71:83:d6:23:7e:2f:8a:7f:
27:67:3b:3f:96:01:5a:3a:66:6c:95:e3:e0:fa:b5:
1d:26:08:db:67:85:4a:81:89:b4:73:2c:38:03:01:
73:a0:d6:5b:94:56:c6:b1:c6:fa:b6:23:95:a3:94:
07:b0:7b:0a:b6:9b:62:59:df:df:5b:01:8d:dc:ef:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:68:A6:00:6D:CB:DE:B6:15:A6:62:81:A4:0A:AE:72:C1:59:BD
X509v3 Authority Key Identifier:
keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:2c:d1:d9:3e:46:3c:66:b3:f4:9c:5e:37:83:19:ab:8d:18:
92:81:5e:c4:ef:1b:8c:bd:c0:cb:82:91:1e:d0:04:1d:ed:ed:
e5:d6:01:60:8c:89:9b:b9:e8:d4:03:bf:73:47:b7:c1:87:51:
05:af:b9:49:dc:5f:a4:f8:c9:67:82:cc:d7:34:e8:95:76:73:
67:c3:11:3f:64:55:dc:64:cd:cd:1a:13:d4:a2:cb:7e:fe:15:
47:c8:f0:d9:ba:fd:c6:ca:3f:58:24:04:5b:47:ac:64:93:57:
1a:8f:fe:70:60:18:35:52:c6:68:16:84:4b:3e:34:2a:86:6c:
c0:a6:e9:a1:0a:93:ec:2e:69:dd:a7:d9:98:e9:de:8f:29:4a:
61:40:39:6a:f8:02:09:33:f8:3e:68:c1:b8:7e:e5:fe:47:2f:
b3:03:87:fb:04:76:ac:35:cb:ab:7b:54:ea:f9:44:cf:8f:b0:
cd:09:53:85:50:59:c5:a4:63:63:a2:99:9f:3d:08:45:f0:be:
e5:da:05:47:23:af:6c:b1:ea:dd:9b:ca:e5:2b:8a:28:9a:84:
15:ff:d7:66:85:92:43:cc:c3:65:a6:d9:a2:bb:1f:8e:c0:37:
9e:20:6e:d5:b0:33:9b:50:a5:78:7e:6c:1c:a0:5c:31:ad:78:
6e:35:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:06 2026 by rpki-client