
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
File: Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft (raw, json)
Hash identifier: J4r2jyF1rLx0wU+PAVfgmJdFWYp3vwmT/E+6UOC6Cxc=
Subject key identifier: 2A:6A:70:8C:C9:13:40:45:F8:FF:A6:32:FB:D9:E6:DD:F0:66:80:59
Authority key identifier: 63:A8:1D:C2:E9:B5:AA:6C:56:6A:85:47:42:3D:83:54:64:AF:0C:A3
Certificate issuer: /CN=A91860FA/serialNumber=63A81DC2E9B5AA6C566A8547423D835464AF0CA3
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6gdwum1qmxWaoVHQj2DVGSvDKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
Manifest number: 40
Signing time: Sun 27 Sep 2026 09:10:49 +0000
Manifest this update: Sun 27 Sep 2026 09:10:49 +0000
Manifest next update: Sun 04 Oct 2026 09:10:49 +0000
Files and hashes: 1: Y6gdwum1qmxWaoVHQj2DVGSvDKM.crl (hash: CbiPHbxEf81cj3xNXBniSaBjB6TvkcQpmfkh+VUT03U=)
2: 4C633D6264BD11F1A2B56523A247A888.roa (hash: SsjdctKBVvaNKREg8ToSkV9iTH8FBrx7S/lqwFuiwEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.crl
rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6gdwum1qmxWaoVHQj2DVGSvDKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91860FA, serialNumber=63A81DC2E9B5AA6C566A8547423D835464AF0CA3
Validity
Not Before: Sep 27 09:10:49 2026 GMT
Not After : Oct 4 09:10:49 2026 GMT
Subject: CN=6ab8dd99-75a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:32:c8:0e:7a:1c:51:ff:eb:4c:a4:03:ad:
a7:02:56:f1:cf:f6:5f:8c:92:4d:6b:55:2f:14:02:
7c:37:8e:82:da:b4:37:70:2c:0c:60:da:c7:fe:76:
75:b9:c2:51:88:e3:97:9d:3d:61:ff:d4:34:f7:c2:
7d:1f:71:32:50:0d:b5:f4:73:f7:24:0a:7a:ea:96:
f4:f7:fd:34:7a:f1:47:82:a3:1f:fc:fb:7c:18:45:
3e:3a:11:2d:2d:61:8e:a8:de:b2:f4:49:4d:0d:19:
58:4d:6c:5a:5c:53:96:8f:50:d8:df:87:1d:9f:9a:
c8:04:68:85:9f:2b:61:96:57:63:aa:e7:58:39:d2:
19:7f:0d:aa:92:de:91:fd:32:00:a2:4c:f2:53:69:
a8:13:40:63:62:f4:8e:88:56:ed:44:59:f0:67:d9:
87:73:9e:19:77:54:60:0c:7a:6a:53:68:20:7a:0c:
e7:50:48:4c:eb:29:02:1a:d3:a7:b5:a3:dc:16:bb:
51:1a:1c:1d:64:90:74:22:6c:15:46:56:f4:28:c4:
4e:3e:93:01:40:51:01:96:73:50:59:e2:e6:28:17:
85:aa:f2:25:a5:2c:97:5f:90:a8:70:c0:dd:00:67:
0e:1c:5b:2d:6f:62:6c:70:4e:81:74:f7:78:1c:39:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6A:70:8C:C9:13:40:45:F8:FF:A6:32:FB:D9:E6:DD:F0:66:80:59
X509v3 Authority Key Identifier:
keyid:63:A8:1D:C2:E9:B5:AA:6C:56:6A:85:47:42:3D:83:54:64:AF:0C:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6gdwum1qmxWaoVHQj2DVGSvDKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:24:00:82:91:a3:65:11:77:7e:38:3d:d2:d2:d0:66:a0:f6:
b1:b6:7a:ea:ec:af:03:1c:ff:91:b0:90:5d:79:04:49:99:aa:
a6:a4:7c:ef:da:1f:25:b5:ec:77:c9:76:05:cb:bf:19:dd:75:
bd:f2:80:45:d6:d9:45:ce:c4:9a:1d:27:fc:a5:7b:32:bf:5a:
85:d6:9f:32:10:40:1a:92:1e:ee:f1:bb:df:96:7f:b8:5f:b5:
46:b1:44:bb:99:f2:4b:86:05:be:2d:d5:ac:3d:a8:e0:52:92:
d3:d1:c9:85:0e:35:2a:6c:25:6e:95:09:72:56:0f:c7:74:9d:
ed:87:8a:92:61:d3:64:4e:d5:d9:03:02:89:ac:c4:5d:0a:86:
87:7c:e5:9e:5b:d5:89:a3:39:90:87:52:c7:99:4c:6e:44:01:
18:d2:cb:99:7c:8b:2b:71:a3:c7:d7:67:4e:79:f2:a3:e4:90:
21:75:28:0f:7d:d1:57:4a:48:03:83:08:9a:86:dd:95:b3:47:
39:c8:cd:4b:c3:70:4b:84:81:50:a5:37:ad:a9:75:c5:b0:b2:
00:98:a3:96:fe:9f:b5:c8:cf:5b:50:0a:34:c9:13:ef:6d:33:
81:dd:ae:81:c6:15:d3:0a:f3:3d:91:47:f0:2f:c2:f3:2f:e5:
01:ee:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:38 2026 by rpki-client