
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
File: yC1GI7edxaBABywRKhur60QWBBw.mft (raw, json)
Hash identifier: M8Q8eXjnDxUGr2s5PfzVmnwm92sexbDQlGZ2hA7N8Ac=
Subject key identifier: FA:2E:0C:D3:77:D9:45:EC:E6:A3:BE:BE:C5:72:17:A2:10:2C:0F:D3
Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
Certificate issuer: /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Certificate serial: 0689
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
Manifest number: 0681
Signing time: Thu 24 Sep 2026 22:23:27 +0000
Manifest this update: Thu 24 Sep 2026 22:23:27 +0000
Manifest next update: Thu 01 Oct 2026 22:23:27 +0000
Files and hashes: 1: yC1GI7edxaBABywRKhur60QWBBw.crl (hash: qOZYuzp1OyHmIj4ElwlCka9Up8Mn8ApG+6RDYlPJBoU=)
2: 469C2676D76111EB97EB721DC4F9AE02.roa (hash: KZJqMSXjpce/PYO9PZaFTw1AjKkd0pgektz4tGJ/sxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D008B, serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Validity
Not Before: Sep 24 22:23:27 2026 GMT
Not After : Oct 1 22:23:27 2026 GMT
Subject: CN=6ab5a2df-1405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:d4:9b:a7:0a:3e:a1:0e:70:cd:0b:67:94:
f0:c4:56:d2:bf:30:88:5c:b4:58:c2:07:90:b4:ab:
b7:d2:20:1c:c8:3e:a9:a2:13:24:d8:a9:28:e6:a9:
4e:9d:99:ec:da:da:79:af:71:31:74:7c:11:ef:90:
62:35:38:e4:0e:db:87:df:40:a3:51:5c:8b:4f:28:
86:15:fa:c3:5c:dc:7b:a8:d2:03:a0:52:36:e6:7a:
f2:b8:e5:eb:0d:9e:01:c5:b9:02:30:39:8f:55:94:
24:95:af:ac:f8:08:36:98:75:fd:cd:88:6c:e3:d0:
2f:72:63:09:2e:22:d1:b6:f1:78:61:c9:d7:63:99:
30:52:dd:4e:55:a2:a1:86:ef:22:b0:41:10:e9:28:
36:7a:8c:59:46:af:54:65:e0:d1:ce:9c:e0:0c:a1:
c4:57:db:d1:02:50:32:f3:41:4b:bd:64:1a:f6:94:
5e:08:13:e6:f9:97:a6:4c:c4:81:39:92:16:f5:76:
c5:5a:76:3f:49:d4:1c:52:91:5d:77:fd:28:e9:0d:
db:51:21:53:64:1e:f1:93:c1:31:65:e3:f3:79:6b:
b9:56:f1:c0:be:2d:12:1f:03:6a:6d:06:e2:a2:7a:
19:62:25:f8:58:21:6a:a4:c4:0c:a7:35:28:04:8f:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:0C:D3:77:D9:45:EC:E6:A3:BE:BE:C5:72:17:A2:10:2C:0F:D3
X509v3 Authority Key Identifier:
keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:8b:bc:f1:18:7f:ef:ae:12:31:bf:8b:79:d2:69:6a:36:0e:
56:10:cf:16:14:90:d0:39:a4:85:51:6d:e7:a7:bd:e7:6b:80:
a0:68:ae:f7:2b:00:6d:60:42:1e:1a:67:21:45:e3:b0:16:c2:
8a:4e:20:8f:8e:30:ee:ff:ba:66:b6:17:2b:da:4e:4d:b2:79:
7c:36:61:15:2c:09:33:85:66:ee:b4:82:d3:0c:0b:4b:e4:65:
2b:b4:ec:08:f3:af:b0:b3:a7:48:a9:ac:ff:e0:fe:c0:7c:28:
30:73:8b:80:97:34:49:bd:c7:b3:23:c8:72:b8:f9:3f:12:38:
52:00:09:ee:d8:03:74:62:59:46:06:7a:c2:c8:4e:b3:f0:f8:
65:eb:85:5a:07:b1:7e:8b:f2:6f:f0:90:5a:d0:f3:9d:c2:f6:
f1:84:77:7b:43:5c:44:fc:c4:6a:df:43:22:1f:ec:03:f0:44:
cc:72:15:20:c8:84:18:d2:e4:ea:7f:9a:27:08:3f:ce:68:92:
c3:d9:74:df:90:4f:76:38:86:bf:3c:39:a8:8f:4b:5c:0f:2e:
2e:31:be:dd:73:6d:1e:aa:a7:b4:42:43:5f:e9:3e:2a:79:aa:
12:3e:5e:e6:72:87:76:b9:e9:ce:75:0f:fd:fe:58:84:41:6d:
10:26:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:28:23 2026 by rpki-client