
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
File: YwwCddFRnD7kuqftn9t0UvPhDEs.mft (raw, json)
Hash identifier: kDqG3RQcwXBab81m8uRCvQ+bpew7VdMqVtH3zzGeBkU=
Subject key identifier: 9D:7A:55:B6:4E:14:63:4B:32:C6:42:93:39:FE:07:F2:AF:76:B5:4E
Authority key identifier: 63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B
Certificate issuer: /CN=A91F69AC/serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
Manifest number: 25
Signing time: Fri 25 Sep 2026 08:57:41 +0000
Manifest this update: Fri 25 Sep 2026 08:57:41 +0000
Manifest next update: Fri 02 Oct 2026 08:57:41 +0000
Files and hashes: 1: YwwCddFRnD7kuqftn9t0UvPhDEs.crl (hash: 7YmcrHqKzWcoXPILZ3WdBBSuGnIPqaiYLRrBmlFxVzY=)
2: 32701246850511F19B0544DB68A30FBC.roa (hash: lRJz8Jm02V4m/7gp5At9XI7RM1aeGiqZoYJHPf5CB2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl
rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69AC, serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
Validity
Not Before: Sep 25 08:57:41 2026 GMT
Not After : Oct 2 08:57:41 2026 GMT
Subject: CN=6ab63785-36ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:82:0a:77:51:9d:4a:07:af:aa:cb:15:ae:
46:09:af:93:2e:2f:ac:bd:59:72:5c:dd:a6:ff:5a:
0a:b1:39:54:f7:8f:c5:58:19:47:c3:87:81:4e:01:
8b:ec:0a:f8:5c:af:b2:5c:87:1d:87:1c:2b:53:57:
b6:30:ad:7e:8c:71:7a:33:f1:71:ba:18:f7:88:cb:
03:e9:48:e5:1d:6f:82:fa:6c:2e:fb:e2:56:3d:76:
a5:be:4f:34:c5:45:ef:02:95:22:60:4f:11:8e:6b:
36:84:c5:62:f8:71:f1:7f:b4:af:d5:05:da:41:11:
66:8a:96:be:6b:83:ed:60:4f:6d:f9:8f:24:f9:92:
9b:f7:7f:af:b9:13:31:03:56:ea:62:70:3f:a5:28:
bd:38:d5:a7:8b:de:4f:aa:4b:23:fc:7c:9d:3a:6e:
56:33:ba:56:f7:88:b9:41:23:22:94:0e:bd:84:8b:
89:06:ad:fc:96:57:75:11:04:35:cb:05:a6:88:84:
08:09:27:88:18:f2:0e:db:32:cd:fb:d8:97:20:7f:
b1:fe:e0:64:4f:56:cb:9b:7f:b4:ab:34:27:e6:dd:
07:e7:57:71:f7:d5:8e:f7:b5:92:d6:f1:4c:60:4e:
ce:ea:12:3f:07:e9:0a:47:58:8d:e8:35:be:9b:a4:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:55:B6:4E:14:63:4B:32:C6:42:93:39:FE:07:F2:AF:76:B5:4E
X509v3 Authority Key Identifier:
keyid:63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:99:96:84:f5:ed:ae:8f:61:4b:ce:86:0d:46:3d:ac:66:88:
99:b2:ba:c1:e2:38:80:14:2d:ab:f7:e0:0c:9c:0f:f0:04:23:
c3:41:e9:4d:7b:7c:5b:8f:40:9a:95:d7:9b:e1:50:cc:5c:f9:
64:3f:f7:e6:66:fb:33:33:28:12:51:dd:cf:b7:39:51:95:c1:
3e:bd:fe:90:6c:3d:b1:48:4d:93:3a:76:d2:11:0d:9f:39:c6:
c6:e1:8c:2f:37:cb:ea:71:27:f8:ee:9d:5a:bb:52:bf:78:dc:
8c:40:3a:f6:87:f1:e7:43:5c:48:da:2b:dc:84:5e:4c:05:8c:
5b:6b:f7:52:52:3e:fc:3e:5d:ce:89:2e:3e:0e:96:b1:aa:b8:
a3:52:16:d0:56:7f:28:0c:9f:86:6d:dd:bc:e9:12:d6:5c:a1:
19:30:9d:11:5e:39:78:26:98:f1:13:44:6a:9f:82:0d:e3:4f:
09:b8:18:38:3f:61:a1:54:dd:79:08:23:b6:0a:96:dd:c7:32:
f8:79:79:59:eb:22:eb:35:ce:1a:7b:91:42:6b:48:8e:ff:66:
e7:63:52:97:bf:da:ea:51:1a:89:8c:d5:47:a6:f3:57:c8:3d:
dd:61:9a:a7:a5:fa:8e:27:75:43:d9:e9:1b:09:f7:47:60:3e:
c6:36:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:04:06 2026 by rpki-client