
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json)
Hash identifier: 9qxi6kwFof9+Unfb6XwGOnfwq1XxPonLvvKDys4Q4nc=
Subject key identifier: 70:07:4B:39:7D:73:33:AF:B2:64:46:E8:EC:94:3E:9A:93:61:2E:2E
Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
Manifest number: 02A0
Signing time: Tue 29 Sep 2026 02:05:28 +0000
Manifest this update: Tue 29 Sep 2026 02:05:27 +0000
Manifest next update: Tue 06 Oct 2026 02:05:27 +0000
Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: c5aYXTvGcib6clg2h/pQetyHo7SV2uKD7d/OaEbFwiI=)
2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: 3w67fjihibZok1qWjIP39FszAZUqgmCtMKGJLAm88jM=)
3: 8rS_G1x6V5DHl1lJ_G5ZjDwhLpI.asa (hash: AgJfggqP9rlRSIR8acybARAvCDcpBRDNiEDimN569t0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 02:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Validity
Not Before: Sep 29 02:05:27 2026 GMT
Not After : Oct 6 02:05:27 2026 GMT
Subject: CN=6abb1ce8-5aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:16:56:fd:a8:21:30:b8:fe:96:da:ad:c7:
08:1b:03:eb:dd:25:cf:d4:58:7e:75:e1:7d:62:82:
40:04:f3:d1:50:84:6a:f7:32:1b:8e:b9:a5:8a:60:
48:de:bc:22:ea:65:8e:fd:43:93:8b:33:41:e2:61:
8c:5c:d0:5a:77:cf:35:8b:5c:89:78:14:02:65:5b:
6e:e3:39:8b:11:6e:8a:b5:9f:6f:c2:f8:aa:58:ba:
08:8c:3f:f4:f9:a0:0c:c7:a9:1b:05:d9:0d:87:fc:
3e:86:8f:d9:19:76:46:ac:af:52:43:6a:93:99:4e:
56:59:78:c2:68:80:4d:be:c3:6b:c3:e4:8f:19:42:
4f:22:42:b6:84:b2:3f:82:6d:32:e5:38:0d:3a:24:
41:8d:ff:63:2d:0d:b9:f5:6a:7e:44:5d:4c:97:7a:
d7:1c:60:da:71:68:cb:c6:ab:f0:08:05:06:93:06:
e8:15:b0:d7:9f:e7:77:50:10:a8:05:6d:18:28:55:
ea:c6:1f:1b:79:38:ed:5d:22:78:5c:75:0f:6f:f4:
89:d6:67:81:6f:df:ad:cb:9a:96:30:3a:25:96:ae:
df:32:18:05:8f:cf:c9:5c:8c:cb:4a:76:72:98:16:
fe:1d:e8:09:7a:f4:35:58:48:5a:32:a4:2c:63:c1:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:07:4B:39:7D:73:33:AF:B2:64:46:E8:EC:94:3E:9A:93:61:2E:2E
X509v3 Authority Key Identifier:
keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:7b:ea:0c:6a:9d:bc:76:df:a8:35:f5:b9:68:16:77:2d:e2:
8b:98:1f:93:a8:9a:32:64:54:46:8e:0b:9b:d7:31:e2:a4:68:
a9:b2:b7:c3:5d:d1:88:90:1c:b8:15:e5:49:f3:9b:fc:46:2d:
ac:31:ea:68:c2:6a:78:10:3e:0b:df:ab:dc:00:0e:84:c4:a3:
4b:d2:5b:0f:f7:26:2e:d5:9c:a8:f4:aa:fb:cc:90:99:25:ac:
c5:b5:45:a2:96:45:0e:2f:1a:a2:84:38:66:a6:93:45:03:b1:
bc:69:99:a0:30:6f:c2:66:97:05:1e:4b:c6:c4:b7:4f:13:6d:
14:c7:a0:cb:0f:f4:fc:64:be:d8:16:26:68:16:32:24:32:6e:
e2:4f:3a:69:2e:c1:0e:0a:62:97:b4:f7:71:a0:99:31:98:c2:
00:9b:06:b3:3c:0b:9b:b9:13:f7:e5:4b:ac:2c:3c:b6:b5:ef:
c2:b7:73:1c:cb:85:81:59:5d:fa:60:0b:03:c8:60:b9:3c:52:
ba:c0:c6:80:a3:a7:19:27:c5:f0:29:db:92:c5:c1:2a:45:eb:
ab:ed:b8:28:11:42:8d:ea:ca:36:f7:c1:91:ff:97:e2:26:52:
2f:c7:d7:06:45:29:9c:70:03:9f:e5:66:04:c3:7d:90:e8:2c:
38:22:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:45:09 2026 by rpki-client