
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
File: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json)
Hash identifier: ctJmc6Ss45muWzrwT2gDT9UdQcdvFV/ARAl70GitL7E=
Subject key identifier: E8:47:DD:65:DD:B6:36:CC:85:CA:68:F8:63:D3:45:49:50:D2:BB:47
Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC
Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
Manifest number: B8
Signing time: Thu 23 Jul 2026 08:53:29 +0000
Manifest this update: Thu 23 Jul 2026 08:53:28 +0000
Manifest next update: Thu 30 Jul 2026 08:53:28 +0000
Files and hashes: 1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: PgpU8sNVBxxdvtdxoStvLpJ+IFi1oWD+40+2iS+cpVA=)
2: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: RBAEIDXbn7aMgm9qJyEPSxcCdAduSFbdLObAMZhpbA4=)
3: 053416126DB211F0962DC55BC4F9AE02.roa (hash: D1cY+wsL/1tx4TuHaNCoTj1n1/CaZxYlcnpWmDl3198=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl
rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
Validity
Not Before: Jul 23 08:53:28 2026 GMT
Not After : Jul 30 08:53:28 2026 GMT
Subject: CN=6a61d689-69d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:0a:b6:8c:d6:5e:e4:fc:24:0f:25:9d:15:
a3:fc:bb:81:7e:f4:18:c2:97:9b:93:b8:23:ea:4f:
91:ca:48:d1:8e:26:fa:10:5c:64:b2:7a:f4:d9:30:
a4:1e:9c:7f:7b:1e:ff:28:ea:ce:f9:0c:e7:94:5c:
d3:fd:04:13:9c:14:26:6a:db:3a:26:6a:6b:d1:55:
c2:a1:42:b3:83:3f:b5:bd:f1:d0:cc:3f:51:6a:30:
4b:f3:eb:a2:5d:c0:fe:0b:01:6a:47:5a:dd:0f:9f:
72:e5:78:57:66:54:e5:cc:7b:78:ea:ba:ee:f4:71:
eb:5a:91:2c:42:06:72:c2:47:55:c1:c5:10:f8:91:
7b:55:34:cc:fa:13:f5:74:b1:bf:c1:fe:1a:a9:90:
57:11:24:99:28:df:0c:50:1b:91:1c:34:1c:ce:32:
7d:8f:a1:13:b3:46:09:28:89:98:79:07:ac:f4:4e:
18:12:3e:f5:64:33:fc:3a:51:83:24:45:2a:fb:67:
bd:b1:9c:db:5c:cd:c4:6f:12:20:d3:64:5a:26:1b:
93:51:60:5e:ce:8e:65:76:99:c5:8f:72:e0:06:3b:
36:44:a0:54:ab:9c:96:78:ea:da:fd:a5:e0:92:b1:
d8:30:a0:95:22:ba:91:fa:eb:24:88:91:c2:17:f8:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:47:DD:65:DD:B6:36:CC:85:CA:68:F8:63:D3:45:49:50:D2:BB:47
X509v3 Authority Key Identifier:
keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:ff:57:e5:24:d2:af:c8:7c:7c:10:f5:e6:e1:1a:83:bf:98:
d1:fd:8f:49:df:e0:32:3d:f6:68:d5:a5:b2:4a:bf:90:96:a3:
f0:8f:5c:cb:1e:16:68:4e:fe:98:ea:11:c3:32:0a:8a:ca:e3:
57:73:c9:3d:e4:60:94:98:26:52:20:41:4a:89:e5:5e:0c:65:
ac:fb:f7:d4:d3:c8:c9:17:4b:60:3b:c0:e2:99:5b:5d:f3:bf:
86:fb:36:6b:9d:e1:d8:27:0e:bd:4a:71:22:9f:2d:8e:b0:51:
60:2b:34:4e:d7:d9:ef:a2:d2:71:de:f9:4d:ad:d0:1d:f8:07:
57:5e:15:be:41:6f:da:f3:bb:bb:b6:f4:d1:fa:3d:5d:46:f2:
32:9b:42:ef:ce:45:a7:da:67:41:71:e4:c5:85:c9:20:02:45:
8d:59:b6:a3:27:ed:c4:6c:37:17:00:31:ec:81:41:5a:ce:6f:
c9:64:12:dc:f0:93:16:52:76:17:b2:72:92:a9:73:82:99:e7:
bb:6a:b6:29:13:96:8b:76:6d:1f:78:c5:f3:39:ba:ce:cb:14:
95:a9:ea:85:05:a2:f3:4e:4c:f4:fd:a1:64:6b:02:b2:25:c2:
27:b2:07:7a:e5:28:a2:ab:c9:a5:84:a0:6b:64:1f:e7:71:39:
81:fd:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:43 2026 by rpki-client