
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json)
Hash identifier: KPwEYkoqKmYlt1gqiGqf+t9mubeLztIiAYBgwnuL7Ag=
Subject key identifier: 51:2B:D7:01:51:07:A2:B9:2F:5C:E3:9B:7F:58:A6:56:AC:8A:10:4F
Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Certificate serial: 08C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
Manifest number: 08B5
Signing time: Thu 24 Sep 2026 20:30:33 +0000
Manifest this update: Thu 24 Sep 2026 20:30:33 +0000
Manifest next update: Thu 01 Oct 2026 20:30:33 +0000
Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: Gh6cXx/7iG6AoYu2P7MmBn/PFQIhMPVlE36Y4Qgw/UU=)
2: 2CE5D6DA527411F19E183CEDC1833773.roa (hash: v8aPN7aZx1B/f/SeiWc7NRBxQCYRHSn4bV/mKW1KuUY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl
rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Validity
Not Before: Sep 24 20:30:33 2026 GMT
Not After : Oct 1 20:30:33 2026 GMT
Subject: CN=6ab58869-6560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:90:6a:d8:21:d2:33:a6:e0:70:59:2f:ae:
b3:fb:3b:cf:31:ee:6a:c6:ea:52:d6:31:4a:e1:13:
b8:6a:74:de:93:3c:6c:74:d8:f9:51:91:f2:7e:12:
9c:b4:6f:cf:4e:31:46:70:37:66:e6:fb:af:5b:81:
30:61:cc:0d:e1:99:e3:1c:33:16:58:90:93:a6:03:
6e:66:1b:fa:ac:06:85:66:81:cf:bd:ef:c2:f9:4b:
2d:f6:b6:20:b6:19:3c:6b:8e:10:bd:a3:57:fc:40:
3a:8e:37:84:15:6a:58:38:1f:0d:0f:a6:70:d3:74:
f5:d6:df:96:91:16:82:0a:1a:dc:f0:c2:15:30:bf:
18:d0:fd:e7:54:12:28:f9:45:c3:1b:f2:84:05:28:
45:b2:67:e9:39:03:49:93:8e:68:5c:33:43:43:1e:
69:dc:17:af:70:25:b3:4a:83:63:35:06:12:1c:d0:
60:ff:6f:78:60:98:b1:ab:04:b9:c6:71:4c:90:9d:
ea:a4:19:60:ec:2d:b1:5d:9a:99:38:a7:85:cd:8b:
1c:28:ab:57:30:ff:fd:0f:1b:bb:51:08:e8:3e:38:
1f:a0:0c:a6:92:e3:38:a8:c0:a6:38:3f:73:19:9e:
33:42:dd:88:5f:cf:6a:76:ad:e3:32:c1:40:1b:f6:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2B:D7:01:51:07:A2:B9:2F:5C:E3:9B:7F:58:A6:56:AC:8A:10:4F
X509v3 Authority Key Identifier:
keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:74:96:9c:99:ad:19:bf:6b:af:02:16:5d:51:51:82:94:12:
45:f0:cf:d9:19:3a:3f:b6:07:7b:0a:e9:f1:30:7c:5b:d3:ad:
46:2f:5b:97:84:2c:60:f9:10:dc:a5:9d:52:a4:80:7e:19:43:
5d:ba:4b:51:61:2d:4d:75:81:06:fd:8d:ec:37:61:e5:71:9c:
91:3a:e3:bf:3c:a6:15:01:ce:86:44:77:6d:1b:32:e2:ed:64:
af:ea:74:78:18:63:d5:2d:97:65:bf:a1:46:2f:c6:4d:33:d1:
28:c5:1d:83:69:ca:79:be:ed:0e:61:99:de:90:03:2e:e5:2e:
46:d0:84:d7:5f:20:2a:c7:eb:d1:f5:54:26:cb:f7:9d:a0:68:
14:67:91:b9:55:7a:bd:50:1d:f7:b6:b5:3a:08:f8:f3:8b:39:
8a:79:d1:23:ca:75:32:da:42:13:53:4f:92:ae:8c:e2:2b:78:
15:ff:d0:f2:0e:b5:28:c3:2c:22:74:5d:b6:9a:d2:ed:59:60:
8a:b8:eb:20:07:5d:76:b3:08:4e:00:df:d2:71:dc:de:a1:41:
b6:d2:8b:68:f3:35:1e:37:ea:7f:9f:ca:bb:0b:d3:e3:98:99:
0b:2f:e7:c6:12:ec:49:f6:aa:22:16:f9:d7:54:04:11:d8:f9:
62:8e:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:45:12 2026 by rpki-client