
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json)
Hash identifier: wSyqfBS5L4QIqkjxdLOI0QbW8WdyRgDFc80Tv/WKb3k=
Subject key identifier: 87:AB:7E:5F:8A:9B:75:19:E4:21:0F:69:03:A6:89:A4:30:54:76:D9
Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
Manifest number: 0137
Signing time: Tue 29 Sep 2026 06:06:56 +0000
Manifest this update: Tue 29 Sep 2026 06:06:56 +0000
Manifest next update: Tue 06 Oct 2026 06:06:56 +0000
Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: liZgSgG/1q9kdskQDSu185gcRt56dLaJ5mQ44qhP3ao=)
2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: j/YHH/K/Kh5UqIUt8e4iPYirw44Jbqb0nzoDKeXMVwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 06:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Validity
Not Before: Sep 29 06:06:56 2026 GMT
Not After : Oct 6 06:06:56 2026 GMT
Subject: CN=6abb5580-8da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:37:34:72:35:dc:0d:30:b6:53:8b:62:d7:
c3:c3:d7:a1:70:34:20:1f:2f:0d:87:14:1f:1a:fb:
d2:d1:ee:bc:c1:d7:94:30:35:f7:9d:6f:cc:35:74:
22:bb:63:11:1e:d8:2f:ef:49:3f:57:b2:5b:ee:bf:
bf:7b:93:b7:55:71:d5:cd:ca:a1:1a:0c:4f:9e:32:
14:c9:c5:2a:88:ac:3b:61:99:0a:3c:ed:d2:f7:0d:
79:38:96:d5:90:4f:ed:ea:e1:a6:38:4e:3b:af:c7:
0a:ba:51:c5:9d:6e:f0:ef:84:dd:fe:8a:64:85:d9:
23:21:e7:f6:00:6f:9d:ef:99:9e:ca:3d:dc:a1:c2:
d5:97:98:92:01:df:5f:f9:7a:02:99:e0:2d:a8:d6:
9d:fb:d7:e6:b0:aa:24:ec:41:0d:1d:48:37:f5:b5:
42:4f:8e:f3:86:8f:4c:3b:55:41:cf:66:61:8c:79:
40:21:ec:df:3a:d5:c1:85:b3:45:f9:23:d5:eb:0e:
e7:0c:40:6d:f6:85:0a:1b:b8:e4:10:e8:7d:00:56:
7a:b7:1a:7b:fa:ae:21:bb:01:8f:e6:7c:cb:91:76:
d8:0f:49:ca:27:08:9c:9c:9e:23:ce:3b:25:fe:82:
da:77:86:90:83:23:9a:0f:26:b9:f4:9f:1a:fd:63:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AB:7E:5F:8A:9B:75:19:E4:21:0F:69:03:A6:89:A4:30:54:76:D9
X509v3 Authority Key Identifier:
keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:b6:0b:d3:bf:93:db:a8:0f:82:16:b1:98:2f:72:ef:06:
90:8b:83:b5:52:d8:e4:97:e5:fa:09:47:7a:cc:c0:c7:21:20:
f9:c6:3b:fb:d1:c0:16:9e:1e:6b:c0:87:52:16:de:65:a2:33:
9c:04:cb:9a:b8:f6:35:8a:d6:8f:5d:3f:ea:f2:4c:dc:88:07:
86:fd:8f:e8:ca:6c:bb:2d:e8:ff:c9:09:f6:56:e2:52:5d:bf:
d0:67:02:1f:d0:c8:fb:64:4e:50:8e:65:2a:06:83:67:95:b3:
07:5d:ff:91:78:08:0a:8c:d4:4d:4c:ec:0c:b7:b1:f3:14:80:
bb:e5:67:83:20:25:31:89:8c:09:e1:a2:b5:cb:50:02:e6:d5:
69:52:52:7e:0b:63:6b:a5:77:58:a3:ac:7b:88:92:ba:97:d5:
ef:ff:9a:8c:22:b1:fd:6d:4f:f3:44:24:47:30:e7:f3:c7:07:
ff:69:16:dd:ec:0f:f0:a9:48:0b:8f:42:cd:15:50:71:cd:b4:
83:37:ef:e5:92:9e:61:79:9b:db:17:fb:58:68:8d:da:d8:d3:
7f:e1:ee:b3:34:6d:15:8a:99:fb:98:35:47:2d:d8:9f:75:3b:
1f:4e:9f:fd:cf:6b:09:f5:8e:80:b9:6e:bf:53:a6:04:b6:91:
36:5c:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:36:13 2026 by rpki-client