
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
File: yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft (raw, json)
Hash identifier: izX1CpAv37hTTnoboFfOq1wGsoq+tFAqno4gH/ygP3s=
Subject key identifier: DB:A0:B2:9C:40:B1:94:D0:4A:EB:6A:8E:62:E2:4D:62:17:A0:B9:54
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial: 06F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
Manifest number: 06C3
Signing time: Sat 26 Sep 2026 22:35:23 +0000
Manifest this update: Sat 26 Sep 2026 22:35:23 +0000
Manifest next update: Sat 03 Oct 2026 22:35:23 +0000
Files and hashes: 1: yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl (hash: blDZ/w6XLwmDQB3oIS4cmRgB95yg1+OeYNzXG+575bs=)
2: 5FA1BF8802DD11EE86865A23C4F9AE02.roa (hash: GFfQfs1rBXk5RvNn/1eLrsagDcvE+KrBjwNFBGF3aQo=)
3: 6954A6281D1811F1BB26F0200F3D8C67.roa (hash: XaZxQTLDnl290/y+szeICXl7GWwhkzid0/spMdScM1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779 (0x6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Validity
Not Before: Sep 26 22:35:23 2026 GMT
Not After : Oct 3 22:35:23 2026 GMT
Subject: CN=6ab848ab-3896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:b4:df:ae:31:be:d6:a3:02:4d:1e:b8:f6:
6b:d1:90:45:8e:69:1e:b2:10:ea:c1:4b:e2:9b:c4:
e1:46:b5:d5:65:ba:0e:45:84:50:15:dc:77:8e:72:
10:f2:80:37:5e:55:a5:5e:49:25:0a:bb:bf:ad:11:
9e:5a:1e:90:92:6a:37:da:7a:32:d8:22:0c:af:03:
5c:87:be:2f:d2:bd:37:49:5f:61:56:ae:91:e7:20:
d0:54:63:a5:70:6f:01:3a:46:6b:cf:fb:b8:2f:e5:
e1:8c:6d:a8:e6:c9:76:81:84:94:50:ab:ef:a6:cd:
48:26:75:2d:26:7a:61:2d:73:a6:70:f7:8a:d4:cb:
8c:da:5a:28:29:2f:b3:2a:d9:05:67:1c:3d:8d:3c:
c4:53:d1:e1:ab:e5:3b:83:ce:31:57:5c:22:8e:29:
2d:75:04:da:d7:72:c6:d7:5d:b1:58:00:7f:cc:b9:
72:a1:b9:e3:ae:d6:95:ad:72:cd:9b:41:d8:ee:37:
3c:f5:3c:18:10:bc:26:d6:a7:67:ac:11:49:8f:8d:
36:92:f4:4a:38:32:bc:9b:ad:3c:c8:e7:e0:33:c0:
e3:54:41:d8:c6:3b:04:3e:5c:d5:ff:ed:28:ae:68:
d3:01:08:28:7c:5c:6d:e6:05:a6:17:2b:89:61:8b:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A0:B2:9C:40:B1:94:D0:4A:EB:6A:8E:62:E2:4D:62:17:A0:B9:54
X509v3 Authority Key Identifier:
keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:62:6f:0c:45:c1:be:91:36:26:c1:ec:86:52:dc:ef:a9:d8:
8c:48:ba:5d:a8:80:04:27:5d:98:ff:78:88:a5:7a:f6:79:45:
9d:b3:8c:c9:9d:cb:d8:f0:7f:a3:2b:47:c2:c8:ed:60:bb:b9:
eb:98:78:34:9a:f6:e1:45:03:4e:f4:9f:68:a6:10:c9:4e:8a:
dd:c2:89:a7:f9:0a:f6:c4:16:76:55:64:77:fb:f8:79:7f:f7:
4a:23:7f:ca:a0:2b:e6:cf:35:72:6b:b8:f8:ab:70:86:a2:8c:
89:1d:bb:73:7d:5a:46:2e:63:fb:1e:d2:d9:34:7b:84:41:35:
fa:91:c8:30:57:ce:86:60:c4:ff:eb:d4:f6:f4:91:19:5b:2c:
af:c6:37:9f:ed:5e:78:55:f1:83:4b:e7:69:3c:01:f9:d9:74:
0e:a8:0b:5f:cb:c7:39:11:45:4b:b2:fe:f6:19:07:75:c3:57:
86:65:03:17:1f:bc:d0:58:f5:7a:12:fe:2d:f1:aa:c6:e7:4a:
f0:83:65:a4:1a:0b:e0:4d:f5:5f:29:d4:a5:a4:65:9c:b7:06:
73:f1:db:1d:49:10:ce:1d:61:c4:75:ea:e1:4e:a1:95:04:d0:
2e:7c:d8:00:94:81:60:e4:47:99:d0:f7:3f:c0:46:36:b4:b4:
2a:48:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:54 2026 by rpki-client