
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
File: y8ZgM3D76EzM4GToT08m7b7CZ7E.mft (raw, json)
Hash identifier: ftComcRHOJO7znTrL/E7CMrEaY+IwEbqV3WmKyX4Jh8=
Subject key identifier: 96:C6:51:46:97:54:E8:9A:93:F7:AF:3A:93:DF:F9:73:4A:61:DB:DD
Authority key identifier: CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1
Certificate issuer: /CN=A91D9CA8/serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
Manifest number: 0141
Signing time: Fri 25 Sep 2026 05:40:17 +0000
Manifest this update: Fri 25 Sep 2026 05:40:17 +0000
Manifest next update: Fri 02 Oct 2026 05:40:17 +0000
Files and hashes: 1: y8ZgM3D76EzM4GToT08m7b7CZ7E.crl (hash: kA6AIS8HTlYPzu9hl/d3ABgfLQZA/AwYGpXK/ETEPd4=)
2: 459A40A0399111F0B589186BC4F9AE02.roa (hash: scPqVoYPhM9N9nt8I3yfdS2nCVlGwPE0LU2L+VLMObQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.crl
rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
Validity
Not Before: Sep 25 05:40:17 2026 GMT
Not After : Oct 2 05:40:17 2026 GMT
Subject: CN=6ab60941-e45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:8f:9e:5f:72:ed:68:09:1d:d3:94:3b:e6:
67:b3:3c:31:c5:89:a1:c6:db:3f:9e:0a:ad:54:e3:
57:12:a3:84:48:5a:0a:73:20:08:fa:a4:d1:01:05:
56:0c:58:d6:3a:51:4a:18:2e:90:a6:db:8a:d0:21:
13:48:bf:be:23:e1:3c:5c:49:b8:9f:45:d1:93:da:
ad:c3:8b:9e:72:28:96:ae:e6:33:c1:b7:72:b7:18:
04:9d:17:00:b5:e0:8b:29:0c:95:f7:06:17:57:76:
3d:3d:b2:17:b7:d1:42:2d:34:1e:a9:27:4c:0a:37:
f3:bd:5f:d9:16:77:a7:9f:bb:90:40:32:14:3a:ca:
bb:69:6d:5a:d4:cf:e0:43:82:80:85:5d:9c:36:eb:
c2:6b:1b:0b:94:59:e8:8e:27:29:43:08:f8:3c:c3:
54:20:cd:61:cf:8a:9f:9f:62:7e:8d:11:5f:f8:20:
32:df:60:d0:c2:60:04:c9:91:94:a5:4c:29:77:a6:
79:be:46:b2:fd:ed:04:53:ff:a6:1b:83:6b:87:2e:
0b:a2:66:81:ba:26:25:18:8c:ac:fd:df:56:0f:11:
9a:a9:c2:cc:20:e5:f1:1e:4b:f6:56:32:41:0b:ea:
11:98:dd:fe:0f:f5:c0:cf:86:02:14:7d:67:77:be:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:51:46:97:54:E8:9A:93:F7:AF:3A:93:DF:F9:73:4A:61:DB:DD
X509v3 Authority Key Identifier:
keyid:CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:7d:a8:96:97:04:b8:55:64:74:2b:13:9a:32:41:27:e6:9b:
b7:66:ab:b9:81:be:e6:14:15:00:84:9b:33:09:7c:07:b8:c8:
ae:36:07:15:86:1e:75:f2:95:f3:6e:40:1f:06:f7:63:fd:f1:
b7:60:7c:20:57:24:c6:0d:b1:3a:b1:a6:3f:8b:6b:a1:5c:d4:
6f:9f:4b:51:45:73:8f:73:91:4c:23:7e:00:c7:a3:1d:74:38:
36:e9:03:99:f2:af:e2:79:b4:e3:a0:e4:1a:3b:a4:6d:a1:52:
6d:40:fa:c7:23:20:d6:a6:70:b1:45:60:61:9b:2f:43:aa:5c:
b5:dd:0d:6f:59:81:5e:27:9a:84:db:0f:86:0b:9f:eb:dc:2c:
54:e1:82:c9:8e:2b:9f:2e:c0:14:9a:e0:77:8b:28:c8:68:21:
88:c9:cf:9f:b9:14:66:ed:fb:49:28:0f:fa:44:e6:13:86:0b:
ee:33:4a:31:1d:3d:3d:44:81:58:59:17:90:77:aa:a5:8b:4b:
eb:88:bf:8b:c4:6f:c1:7f:8e:e2:f5:50:58:e0:fe:60:70:4b:
40:bb:0e:24:0f:65:20:d7:bc:fe:41:99:ef:d4:4f:b6:c6:f6:
c6:42:71:f6:d3:e1:66:8c:52:20:52:66:8e:bd:14:e3:96:f5:
2a:03:92:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:53:18 2026 by rpki-client