
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File: 2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier: SiQUcq1h4B+zU+lpNRmLYX2mowWPvvODLhVHEFOeOvc=
Subject key identifier: 49:29:61:62:45:52:B1:52:9D:96:68:6F:32:D7:27:8D:81:22:AD:22
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer: /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number: 7F
Signing time: Mon 21 Sep 2026 07:43:38 +0000
Manifest this update: Mon 21 Sep 2026 07:43:38 +0000
Manifest next update: Mon 28 Sep 2026 07:43:38 +0000
Files and hashes: 1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: /AQnZ4Mu8qA+WJFlMrgPzdkXpIELR9gzxBhKRlG4XYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Validity
Not Before: Sep 21 07:43:38 2026 GMT
Not After : Sep 28 07:43:38 2026 GMT
Subject: CN=6ab0e02a-14c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:c8:0b:4d:6b:18:02:5e:e6:81:fa:aa:f0:
54:63:0b:23:3d:cc:cb:9a:87:01:a8:71:6b:48:ea:
a4:43:ce:01:3f:51:f0:00:63:2f:db:29:60:5f:d8:
db:0f:50:8c:52:05:c2:c2:e2:ea:b8:38:82:5c:c8:
47:e1:8b:bb:b5:cf:87:f0:b0:08:a8:1b:df:2f:0e:
2e:f1:e9:22:88:2a:27:b4:da:33:8d:be:14:3d:f6:
f5:9c:78:77:47:8a:82:f9:f1:37:88:ff:4a:c3:cc:
f2:73:43:87:7e:39:99:6c:8e:76:56:21:c7:6d:2c:
38:4e:3c:ff:df:19:4d:3b:2d:42:e4:68:b0:66:f5:
dd:12:a0:b7:0a:78:c9:de:17:b6:1a:c5:74:a4:1f:
66:fe:98:38:69:aa:dc:bd:98:87:ab:41:f2:93:19:
0e:a6:02:9d:4e:b5:c3:59:f0:a4:b8:8f:fc:5e:4f:
33:ec:13:6a:37:99:da:81:0d:1f:61:9b:38:16:d6:
9a:20:b8:02:cb:39:18:a9:d7:6b:d3:ad:5c:21:6e:
27:2e:a3:68:c3:80:90:b8:17:c2:bc:f6:c1:09:49:
62:12:42:fd:0d:e5:8e:2f:08:01:c5:d4:fa:dd:de:
83:72:fa:d6:70:d8:c1:c3:00:85:8e:d4:97:76:8b:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:61:62:45:52:B1:52:9D:96:68:6F:32:D7:27:8D:81:22:AD:22
X509v3 Authority Key Identifier:
keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3d:46:b6:dd:63:9b:0e:94:dd:b8:16:d1:46:57:ba:37:9e:
58:2f:3c:99:d3:b3:14:74:29:82:65:73:d5:97:a8:43:92:88:
dd:82:70:d3:0b:ee:11:12:ea:47:f8:2e:2f:a9:98:a4:5a:12:
9b:e2:ac:58:f6:b4:94:91:36:fd:ff:b1:31:f2:b7:ac:87:a7:
ae:08:70:57:7f:23:7d:d9:16:4a:16:75:ee:75:66:87:81:d3:
2b:2c:ea:64:4c:26:c3:09:eb:c4:8f:a8:ee:43:9b:b5:a4:8c:
bd:4f:fa:bb:50:b8:19:ba:8f:0b:fa:fb:10:66:ac:0b:31:87:
a3:f9:30:72:2a:1a:80:29:d8:3e:f2:21:a2:57:88:8e:cc:2c:
37:09:f0:a4:a0:11:34:5d:18:be:01:31:08:3a:e7:6e:8f:99:
e8:08:b5:c2:53:76:f1:40:6d:ce:68:86:9f:6c:2f:33:e2:b8:
9d:54:11:ad:e6:e8:49:89:bd:9a:55:11:f6:7b:60:e5:43:e4:
7b:e5:8d:57:5a:eb:41:ea:61:70:a0:85:de:1c:46:9d:92:1b:
4a:07:45:ca:c0:5f:eb:7a:0f:6c:2a:75:f9:3f:2b:56:e3:9e:
9f:9b:3c:2d:c7:6d:f0:a2:49:c0:4a:1f:89:c0:de:b7:af:4b:
8b:21:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:01:15 2026 by rpki-client