
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json)
Hash identifier: UykA3MNxsNupg9jQCXT9VUv72HdyQzF2gFhttU/TLhw=
Subject key identifier: 58:46:8C:A4:2B:90:FD:F9:E9:02:76:FB:05:54:3B:F5:0C:81:97:D8
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
Manifest number: 0142
Signing time: Wed 23 Sep 2026 05:22:11 +0000
Manifest this update: Wed 23 Sep 2026 05:22:10 +0000
Manifest next update: Wed 30 Sep 2026 05:22:10 +0000
Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: 92uMfRIalZHmb+M/Y3Bq53ROIripOYNpJJgE1UYqKKc=)
2: 5CBA651212B211F19AC313AEB5EE528E.roa (hash: OY4Fet8xm/rFRe8wVg+u3YFnbkKRJHlvjCIrVFg7MQ4=)
3: 5DB76F8212B211F19AC313AEB5EE528E.roa (hash: 2NaYNjJ6qjcaM0sXuJIClT+/B4+Xci+4D5hsnMlJddw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Validity
Not Before: Sep 23 05:22:10 2026 GMT
Not After : Sep 30 05:22:10 2026 GMT
Subject: CN=6ab36203-818a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:29:59:6d:e6:dd:68:3a:a0:ca:cb:be:cd:84:
61:c4:da:05:c0:85:4b:c5:0b:77:61:a7:bb:3d:10:
50:d3:41:67:46:3f:94:11:6e:1f:72:3d:f0:41:89:
6e:43:44:aa:75:68:0c:3a:19:a7:71:56:ff:8a:df:
41:1b:83:7b:d9:1c:63:fb:66:10:65:b1:68:46:26:
c1:ed:d9:9b:a2:93:eb:ac:96:a5:61:09:89:80:0e:
f3:3f:2b:99:1e:16:36:9f:c7:f1:9d:32:29:ee:29:
58:ee:54:71:9f:d6:be:3c:55:12:d2:0a:e6:68:02:
4e:80:60:b5:49:c3:eb:17:fd:5a:ad:70:90:b9:e5:
30:63:f1:89:ed:4e:13:27:31:3f:f0:1f:0a:5d:54:
76:29:05:f0:c2:65:5c:cd:08:d9:af:73:8c:39:0d:
38:1f:08:72:d1:d1:dc:21:7b:a3:4f:70:f9:95:47:
fe:4f:2c:e9:a7:04:db:77:8c:cd:a2:fa:e7:ae:0b:
ba:21:28:1c:82:6d:ab:6a:ca:80:99:2f:4f:39:96:
f1:ed:5f:b5:2d:e2:09:46:2a:48:80:04:89:d9:9a:
1c:0e:52:7f:be:14:06:bf:60:b2:32:0f:39:21:2b:
4c:4d:f9:d5:3b:85:7e:ef:3f:d3:25:b4:9a:90:3a:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:46:8C:A4:2B:90:FD:F9:E9:02:76:FB:05:54:3B:F5:0C:81:97:D8
X509v3 Authority Key Identifier:
keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e1:fe:4d:93:f9:16:fa:98:87:ed:c7:86:55:cd:92:44:b2:
69:9a:06:6a:c6:c6:53:72:83:73:1d:d8:7c:82:dd:d2:1e:87:
54:cc:03:c6:ac:74:49:89:81:f2:22:b5:fc:14:ff:fa:2c:06:
0e:01:9e:b7:8a:9d:56:5b:c1:45:77:c9:be:a3:0c:be:d3:80:
2b:93:18:fc:ea:cc:58:99:e9:20:83:fb:de:ca:9c:32:88:a8:
e8:1b:e3:80:a4:07:71:63:1f:20:a0:bd:ba:69:1a:06:06:0e:
41:f7:80:ba:a9:1e:37:94:7e:c9:a3:f3:3f:4b:15:99:d7:5a:
db:ac:76:08:7c:2b:99:d8:09:e2:62:a9:29:dc:8b:04:b8:e4:
b5:70:04:46:e9:76:73:25:41:7a:bf:0f:64:45:43:6f:74:a4:
f8:e0:45:cf:12:a6:a3:e7:62:36:59:1a:a7:6f:b1:74:e7:6d:
5f:9a:b3:d2:46:7b:5f:bd:1e:02:4f:f9:e5:1d:f1:2d:9d:15:
63:6e:ec:32:fb:65:d1:d0:53:91:5d:fd:fd:b6:29:92:7a:b5:
46:e9:ba:8d:7f:ba:52:59:ce:77:a8:59:5b:4c:f0:b6:b6:0d:
5a:0d:12:50:45:31:77:30:b9:d9:37:e5:0a:45:5f:4c:25:fd:
c7:88:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:13:45 2026 by rpki-client