
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
File: YB71rSfD3A1NmC22u0dsBsvHAKA.mft (raw, json)
Hash identifier: Wb0zgK7OUjzlBTWhYSR2KcxdPEIQNBJRo1bOGrzaudY=
Subject key identifier: 0A:15:4B:D4:3C:C9:14:FD:01:8F:24:86:6B:9E:F7:14:DB:FB:24:47
Authority key identifier: 60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0
Certificate issuer: /CN=A91BFE4E/serialNumber=601EF5AD27C3DC0D4D982DB6BB476C06CBC700A0
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
Manifest number: 0175
Signing time: Wed 23 Sep 2026 04:33:42 +0000
Manifest this update: Wed 23 Sep 2026 04:33:42 +0000
Manifest next update: Wed 30 Sep 2026 04:33:42 +0000
Files and hashes: 1: YB71rSfD3A1NmC22u0dsBsvHAKA.crl (hash: HgmvWKaTVnZ0Qb7/8gmxss5JvVvaX/vkiPQ5XDlUFVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.crl
rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE4E, serialNumber=601EF5AD27C3DC0D4D982DB6BB476C06CBC700A0
Validity
Not Before: Sep 23 04:33:42 2026 GMT
Not After : Sep 30 04:33:42 2026 GMT
Subject: CN=6ab356a6-c752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:3e:bd:4a:cb:5a:75:24:53:1e:ef:bb:2e:
2d:44:10:a2:92:31:47:a1:52:d7:5c:27:d9:30:db:
a5:9f:4d:d4:bc:67:ba:18:af:d3:eb:44:9b:a3:d4:
7c:d2:09:36:c0:af:cb:7d:86:40:54:ef:16:a3:d9:
41:ea:f7:de:75:5e:3f:b0:40:7c:78:db:da:bd:78:
0e:8e:cb:dd:6f:87:92:45:dc:38:57:fd:ac:12:35:
fd:ba:77:3b:08:87:56:0c:99:56:67:ae:58:13:6b:
a7:4e:ee:94:25:a1:67:37:c7:07:88:c0:57:00:58:
8f:2a:34:1c:34:5e:21:01:43:e0:fa:38:78:29:92:
6c:e3:11:dd:f1:df:fd:5c:44:98:a0:2c:8d:e4:d9:
9c:ed:80:f1:91:ea:34:03:23:c3:0c:16:83:a7:2b:
8a:2b:88:d7:91:91:2f:67:63:d3:8d:ae:b3:a9:86:
a4:2a:7d:d8:14:a1:3c:c5:79:a2:15:3b:f0:b6:16:
3d:2e:46:6c:a5:8e:2e:e2:47:52:15:05:be:78:3f:
88:f1:5a:72:a4:e4:49:c9:77:bf:d8:2c:d6:ae:af:
dd:ed:ee:c6:ab:8f:eb:bc:fe:1a:59:d0:3a:8b:37:
6c:33:40:8a:38:3e:2e:00:89:4d:fd:bc:9c:6e:51:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:4B:D4:3C:C9:14:FD:01:8F:24:86:6B:9E:F7:14:DB:FB:24:47
X509v3 Authority Key Identifier:
keyid:60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d1:6e:4a:b6:75:0d:14:12:66:e1:e6:9f:bd:0c:0f:27:66:
3c:8d:a3:04:90:5b:57:37:04:e4:fb:7c:ef:c0:b4:c6:71:3d:
33:a9:1b:7a:88:0d:ff:9e:a5:89:f1:ab:31:d0:fe:00:bf:cf:
f0:79:80:4f:62:c5:03:1f:89:36:cb:a8:b3:ea:1d:e6:36:98:
e6:67:15:62:40:fb:03:75:eb:96:85:6b:18:07:a5:c0:f3:4b:
3d:15:18:1a:ee:2b:c1:43:8e:bb:9e:f9:51:95:cd:e7:fd:a8:
ae:7b:74:a9:8c:93:d5:15:aa:e5:3a:df:27:37:d4:33:ef:eb:
a5:65:99:2f:88:e3:ec:e3:e9:5e:39:df:c8:9a:5d:2c:6b:bb:
3b:79:7e:92:15:be:80:c8:5d:b3:36:b7:f7:75:25:f1:02:87:
e6:47:94:8c:cd:8f:e3:06:58:1a:52:45:f2:5f:55:78:c4:23:
fd:d3:62:cb:20:14:09:0b:bc:a2:00:fa:e3:9a:67:43:bc:ba:
62:e7:99:d3:92:a2:1f:01:17:c3:8c:9f:61:11:59:15:69:71:
f1:40:94:a6:4c:19:ba:10:8c:0a:9f:d3:0e:c5:3b:e0:e8:86:
8d:54:11:e0:93:8f:a1:f3:41:43:34:26:c9:6b:61:ec:77:79:
a7:36:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:47:01 2026 by rpki-client