
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json)
Hash identifier: GPcFggbMTHMbGlxRfRP38wo/gV3pK5ce6g8x345tw0Q=
Subject key identifier: AA:0C:66:C0:3C:56:3E:50:4C:5A:21:85:97:D5:4B:EE:E5:92:F2:E9
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial: 2714
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
Manifest number: 26F9
Signing time: Tue 22 Sep 2026 15:38:01 +0000
Manifest this update: Tue 22 Sep 2026 15:38:00 +0000
Manifest next update: Tue 29 Sep 2026 15:38:00 +0000
Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: JnsSAtvFy3fizLi8ALwDd1BnQXlJ4shta/tDLHXcYXs=)
2: FBD68828FCBF11F0A4D02CBC666F56BC.roa (hash: SxJM2aFKgBGF6I9rZ7S9/EziiSoyCz/xteiPP/MBsS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10004 (0x2714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Validity
Not Before: Sep 22 15:38:00 2026 GMT
Not After : Sep 29 15:38:00 2026 GMT
Subject: CN=6ab2a0d9-73d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:d2:7f:9b:9f:28:da:a2:aa:5f:54:65:5a:
b4:b0:5f:fb:07:31:46:00:38:ef:cf:84:65:de:56:
0c:da:f8:9c:b1:c0:bb:5f:9a:7e:1d:f1:21:51:3e:
74:4a:92:ce:fb:c7:f0:1b:d1:67:71:c3:a5:d8:9d:
33:32:2f:2b:a0:81:bb:16:42:e5:d3:74:50:7c:12:
68:39:87:69:99:cb:12:30:1c:a6:e1:a9:ae:3b:3d:
41:a7:67:b4:ac:77:44:f2:ac:10:b2:34:8e:41:b4:
3a:40:bb:97:32:d6:f4:28:70:99:74:ba:96:3d:89:
e8:93:82:7e:cf:d6:0d:cc:17:11:9b:51:09:40:09:
88:07:b5:c3:76:75:ba:5a:3d:fa:26:5f:2e:10:fb:
3f:09:91:15:15:31:bf:37:72:cd:ce:8e:4c:fa:bc:
31:c9:ed:f8:78:79:ed:a6:8c:00:c1:02:6f:0a:38:
87:b4:56:14:6f:d3:b0:32:bf:7f:28:2a:5a:f8:3f:
19:3a:04:8c:a3:cc:5c:7e:62:9c:3e:ed:28:cf:6a:
98:c5:7d:a2:79:cb:f5:9c:b2:b3:c0:3f:6b:2f:95:
27:2d:f5:fb:f4:ab:95:66:75:2f:39:12:28:bd:eb:
9b:90:d6:8c:de:50:c1:3a:56:28:7c:02:14:3b:7e:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0C:66:C0:3C:56:3E:50:4C:5A:21:85:97:D5:4B:EE:E5:92:F2:E9
X509v3 Authority Key Identifier:
keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:f7:62:18:6f:dc:e5:06:a3:35:cb:41:77:f5:7f:5e:46:a2:
49:f1:b5:a6:e6:65:fa:55:7a:25:b4:9a:ab:f3:a6:29:62:19:
99:7f:35:a0:32:f5:63:02:81:72:a2:80:d1:4f:71:20:ad:04:
62:9c:31:fe:9d:13:ad:5c:cd:8c:a8:f5:2c:d0:65:e7:72:a4:
03:f9:dc:0b:de:a5:57:f1:93:e7:f4:17:37:8d:e9:b0:e4:f8:
9a:19:04:de:46:0a:7d:dc:d1:6d:9f:dd:fa:6c:52:d7:e8:c2:
db:26:32:5d:a4:d1:bd:10:fa:e2:09:e8:20:d3:d0:74:16:d8:
c6:29:1a:04:cf:a1:1e:2e:25:a8:cc:b1:67:bf:27:e8:10:e8:
a7:5a:22:59:ac:88:10:f7:27:3c:98:a9:80:87:c7:4f:4b:d5:
96:f3:ea:3e:c3:5c:28:41:53:89:26:d3:3b:aa:e3:7d:81:08:
15:5b:2a:cf:45:82:b1:4c:ed:a1:f0:9f:fd:de:3f:ef:e8:bf:
15:07:21:06:88:85:59:e0:05:d5:d8:67:55:7d:15:a0:cd:6c:
f1:24:f2:42:1a:9f:dd:3b:9b:3c:cb:70:8a:bc:06:a4:09:56:
5b:93:ad:82:9a:29:fa:7c:e3:88:bc:fd:b8:77:84:18:f6:65:
ab:d3:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:25:22 2026 by rpki-client