
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json)
Hash identifier: 1rHS7M9Ozrsa+yKRgIrBV5F5olfYfQhRF3nwpJhsenA=
Subject key identifier: B8:EE:29:AC:52:75:50:3B:23:3F:21:8B:2D:4D:AA:58:60:E0:18:E9
Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
Manifest number: 02D3
Signing time: Wed 23 Sep 2026 01:09:15 +0000
Manifest this update: Wed 23 Sep 2026 01:09:15 +0000
Manifest next update: Wed 30 Sep 2026 01:09:15 +0000
Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: xIP9kmzEeT4z43AMBkv3dtU1sVeUiPHAeUt9Gh7u6Us=)
2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: B71votStEYYp/K2emTulLeZ6cRSZ/0mH+ncAa56QIjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Validity
Not Before: Sep 23 01:09:15 2026 GMT
Not After : Sep 30 01:09:15 2026 GMT
Subject: CN=6ab326bb-1b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:f7:86:2e:65:e5:2a:79:fd:12:b0:2d:f3:
26:03:f4:33:b2:51:9b:05:4a:1a:03:ba:9d:6b:ef:
ae:1f:c6:c1:f4:14:62:ad:a5:7e:34:a9:59:d2:65:
b6:19:29:9a:dd:c0:ab:d3:9a:54:d5:1d:17:1f:32:
e1:bc:05:05:1d:ca:23:44:29:ed:96:eb:41:f4:d7:
9b:d5:d7:c0:91:f5:11:3c:24:dd:d3:e8:19:65:86:
5c:c2:ba:a4:38:da:38:69:e1:66:1a:98:3c:42:c3:
72:b3:36:79:93:ae:a4:fe:1b:a3:7a:ab:ea:c4:27:
15:ab:40:5a:a7:50:a5:7d:29:df:b3:30:c0:66:ff:
46:99:c2:01:fe:0e:3f:cd:80:35:dd:6e:fb:0e:08:
20:76:74:26:8d:a4:19:5f:27:a2:a8:3f:45:1e:d9:
b5:d1:0f:19:d4:a4:fe:60:64:cb:9d:2f:ec:f3:a2:
bc:fc:b5:49:5c:ff:f4:51:d0:7e:48:71:14:a0:4d:
07:4b:6a:6f:50:7e:32:69:f6:c8:c7:20:99:02:31:
db:bb:d2:cf:4f:94:5b:fd:0c:7f:f9:b6:73:95:1e:
d3:de:e0:08:0d:f9:a8:8a:b4:c4:8f:b2:aa:c8:50:
35:56:4b:74:41:b7:aa:70:c8:f4:9e:73:84:08:72:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:29:AC:52:75:50:3B:23:3F:21:8B:2D:4D:AA:58:60:E0:18:E9
X509v3 Authority Key Identifier:
keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a4:5e:1f:43:19:8f:8a:64:92:44:fe:49:44:16:50:1b:a4:
ae:44:b0:7c:17:8c:fc:b3:49:c7:cf:a7:2a:23:e7:5c:a0:97:
a2:89:c5:2a:bd:46:09:b1:78:a3:fd:97:ef:2b:f2:be:de:59:
a4:2a:7e:8e:30:b0:4d:73:81:9d:38:16:a2:9f:bf:41:fc:9a:
97:87:78:ac:10:32:da:46:8c:9d:8a:04:b2:a3:73:30:dc:38:
b5:d6:c5:9c:de:b7:f2:3d:80:0e:15:40:2d:ff:77:ca:06:9b:
2c:39:c9:c0:31:00:97:af:0c:47:1e:5f:e8:c3:81:0f:a6:3b:
59:51:8f:47:4a:5a:0a:22:38:7e:ff:ff:72:f3:7c:c5:46:0e:
21:57:88:b4:6d:82:3a:2f:5d:aa:2d:8a:8b:9d:dc:41:cc:ad:
50:6a:40:94:c5:f2:a1:8b:9d:26:e8:89:16:41:e2:24:86:84:
ac:db:54:75:51:f4:af:ef:4d:27:ed:5e:e6:04:4c:14:19:16:
26:37:67:e0:52:72:4e:09:47:43:9f:5f:40:b6:42:71:03:44:
e0:42:8c:85:73:0d:3d:c4:3e:a7:0d:7a:52:9f:21:ef:48:c8:
a6:a8:74:cc:c7:f9:79:f6:d4:81:4a:f5:5b:2a:25:9a:ec:7b:
16:04:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:04:45 2026 by rpki-client