
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json)
Hash identifier: k+ReqMvVcDgQViL+fU/+6zajZG5pAqbtYVXTdItrB90=
Subject key identifier: 09:AE:19:F1:90:FE:AB:6A:99:11:0C:B1:43:FA:E4:A1:26:BC:9E:2B
Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Certificate serial: 0C52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
Manifest number: 15A5
Signing time: Tue 22 Sep 2026 18:35:28 +0000
Manifest this update: Tue 22 Sep 2026 18:35:28 +0000
Manifest next update: Tue 29 Sep 2026 18:35:28 +0000
Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: mmEsed0YELyqCPdbSaOGh9VcPX3hAxA7xVLBeNMoHAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3154 (0xc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Validity
Not Before: Sep 22 18:35:28 2026 GMT
Not After : Sep 29 18:35:28 2026 GMT
Subject: CN=6ab2ca70-b472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:d0:ea:5b:eb:22:f2:4b:2a:bf:62:fc:92:
26:47:06:2e:ae:e8:57:b4:fc:ea:72:22:81:42:61:
b3:8a:d5:9b:fe:da:38:d2:80:91:5b:29:92:37:be:
4a:57:03:5b:35:d7:7b:c4:06:6e:07:e2:e5:bd:69:
b1:5d:d8:8d:ea:db:ab:76:15:cd:01:d6:69:9f:04:
0b:76:e4:ef:79:09:2e:e5:8e:5e:e0:63:f7:ff:98:
f5:81:15:5f:9e:35:fb:2a:c5:dd:e3:8e:75:0a:16:
ff:37:86:76:97:44:91:0d:03:37:54:eb:64:9d:12:
44:9a:4b:b6:94:c1:c0:d8:09:c1:bd:11:b0:63:ce:
b9:3a:94:10:8c:fc:88:3b:7d:c0:95:47:5b:40:5b:
c0:49:b1:b8:e1:e3:84:f9:80:e1:d4:65:fc:1f:92:
43:87:70:e6:c1:92:51:f8:ed:3c:2f:1d:2e:dc:84:
04:bd:7f:0a:75:24:e8:f6:3f:86:c2:bd:9a:47:d6:
a6:b0:a0:d9:d3:51:8e:8a:6c:1f:de:ac:66:fb:3e:
41:a1:1e:6a:9e:5b:3a:f7:8e:1e:20:0a:6c:a8:bf:
e3:eb:82:1a:7f:93:e1:c8:88:d3:15:9b:cd:20:40:
ce:08:19:ba:89:66:a8:9e:da:92:34:f8:d8:bf:4c:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AE:19:F1:90:FE:AB:6A:99:11:0C:B1:43:FA:E4:A1:26:BC:9E:2B
X509v3 Authority Key Identifier:
keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9b:c7:23:cc:3e:df:cf:8d:45:39:11:30:bb:78:0f:26:c7:
18:ef:f2:a4:c7:ed:4a:c7:e0:38:91:d8:9e:9d:eb:cb:83:57:
38:e5:49:9e:73:44:f0:53:96:5c:08:b5:7a:f2:3e:be:35:4f:
93:b1:9f:3b:26:6c:d2:6a:2e:1b:ab:b7:3a:cc:cc:dc:ab:b5:
22:03:13:09:74:60:df:2d:55:5a:92:5c:d6:a5:43:b9:a2:ca:
4b:12:1a:3d:e5:fe:b9:dc:67:f7:69:ba:5f:9d:cd:e9:30:4b:
3b:0f:10:fe:7e:98:41:d8:85:b4:86:ba:f9:99:a7:71:54:52:
25:f9:4d:9d:af:8f:92:82:23:0b:bc:e8:5f:de:27:a1:d7:f1:
c3:e9:33:eb:fa:16:94:fe:63:84:ef:01:09:b0:44:ed:3d:37:
16:e9:89:78:f5:d7:a2:10:7a:4f:bc:94:da:91:6e:99:f5:88:
55:f8:36:b1:11:97:c3:7c:52:69:48:91:9a:e0:7e:18:d7:c7:
8c:e1:1e:2f:94:a4:65:f0:b2:f7:2a:6f:a1:92:4e:d8:0c:86:
24:54:30:28:6e:72:f0:a8:46:3c:6b:c9:bf:d8:4b:36:cb:16:
e0:67:57:5e:b6:9c:3d:cc:20:db:5e:a9:6a:81:91:87:fd:fd:
1c:db:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:28:30 2026 by rpki-client