
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
File: YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json)
Hash identifier: 8JP4zvYYsMbCsNR7pVEe2OxvLn6XTrMWuNN8EGFa70A=
Subject key identifier: 11:B3:97:84:68:C9:D2:01:38:F8:D8:80:28:D3:80:55:3A:B0:FE:82
Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Certificate serial: 0B3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
Manifest number: 0B29
Signing time: Sat 26 Sep 2026 19:23:18 +0000
Manifest this update: Sat 26 Sep 2026 19:23:17 +0000
Manifest next update: Sat 03 Oct 2026 19:23:17 +0000
Files and hashes: 1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: Q9DOF2UortyDdtH/uBD1AkF7hmmqil+7Xjo8o7Wkk9g=)
2: E3DD6362787A11ED89732760C4F9AE02.roa (hash: vve9hwKv+mYDRAl8TbHYr+BUbKVZsWenZHWGJC3Di3g=)
3: 1B2FD0247B3511F0AB5E9728C4F9AE02.roa (hash: Q1rC4uxku9zNUGZfldpV6C2HUrRjj+DFtRhXQLJUhNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2875 (0xb3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Validity
Not Before: Sep 26 19:23:17 2026 GMT
Not After : Oct 3 19:23:17 2026 GMT
Subject: CN=6ab81ba5-26c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:d3:0d:dc:95:a1:85:51:0f:17:c2:f9:f1:
5c:ed:4d:b9:2e:67:6c:65:f0:e1:43:2d:eb:db:19:
7f:4c:fe:11:96:3b:fb:13:41:ae:44:d6:12:c6:48:
61:c8:9f:d3:5d:67:fb:92:34:aa:d3:13:20:f5:8b:
cc:d0:b5:27:c9:67:88:15:8a:7d:f4:28:59:50:27:
da:ed:62:6c:61:67:4e:08:29:cd:99:9e:4c:7e:ee:
b8:e4:8b:96:7b:29:2a:73:81:35:d5:c1:26:56:c7:
81:79:4a:b5:aa:f7:ea:d5:73:15:d6:f4:20:a9:13:
18:f1:dc:dd:b6:ff:a5:3d:c6:0d:1d:91:73:8a:71:
11:5d:5d:14:07:05:82:e0:f7:56:65:25:9c:37:5f:
e0:99:f9:9a:1d:37:50:fb:72:ed:ba:83:07:12:6c:
0b:ec:44:20:47:91:1c:b5:33:9e:37:ac:7c:13:c1:
37:78:be:1d:82:10:a7:b4:9b:8c:cc:9a:f5:d3:d5:
3e:f1:6d:70:b8:09:d1:48:ed:e5:3a:13:60:ef:9d:
ad:cc:53:d6:f3:44:fc:31:63:40:81:33:fd:5b:7d:
3c:5c:f9:10:a9:d2:82:15:f8:e8:35:b6:55:c1:e2:
3b:33:20:a5:ca:7c:5c:db:df:4e:3f:f4:5c:17:e0:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:97:84:68:C9:D2:01:38:F8:D8:80:28:D3:80:55:3A:B0:FE:82
X509v3 Authority Key Identifier:
keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:65:67:3e:77:68:ec:83:8e:d7:45:09:21:94:c5:b4:0c:8d:
67:64:0c:7f:18:0a:e8:00:5c:26:ba:7d:01:32:c6:90:bc:44:
25:5f:15:c6:10:2b:35:e9:25:3d:a6:91:69:70:9c:59:8e:c9:
7a:fb:43:80:3e:16:d2:3c:ce:c8:bd:ee:aa:cd:6e:fa:99:e9:
5b:e2:a4:7c:9a:e4:7e:29:d0:d1:b9:38:c7:9a:8c:83:72:28:
49:7a:10:e5:72:4e:fc:70:1f:4d:ca:a0:7e:3e:b4:e2:98:e0:
f7:b7:1b:50:46:f6:45:29:69:65:f9:60:14:b3:e5:4a:06:6c:
7c:e9:d6:db:20:f8:5b:f5:10:88:70:ff:fb:1b:a4:cd:b8:bf:
f0:7c:42:39:90:f8:62:49:85:31:72:23:ca:ae:b1:5c:a8:9c:
c4:d7:fe:7c:dd:72:72:c8:a9:d1:c0:c4:ed:ce:8b:cc:e2:73:
1f:12:9b:20:1c:ba:e7:59:37:27:bc:b5:cd:84:0c:b2:d2:cb:
f5:d4:68:a3:c1:b6:6f:75:a3:67:c6:e7:92:bd:4b:12:f2:09:
70:b5:a2:5f:d9:cf:7a:bd:5a:d2:46:6e:38:56:54:af:54:a6:
b4:d2:08:48:c3:1c:8a:73:dd:a4:28:29:44:7f:0f:cb:be:cd:
b8:57:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:58:05 2026 by rpki-client