
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json)
Hash identifier: pse2dMTZ8cJ8j0M8DGOM4SOck8zH2/WVe4DrbcxN9vI=
Subject key identifier: CF:09:36:8F:66:2C:EF:A8:24:2F:6A:B7:1C:96:65:65:F1:72:35:0E
Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Certificate serial: 09DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
Manifest number: 09D3
Signing time: Tue 22 Sep 2026 19:41:17 +0000
Manifest this update: Tue 22 Sep 2026 19:41:17 +0000
Manifest next update: Tue 29 Sep 2026 19:41:17 +0000
Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: eZo3X4FGeZUABBZOXVYEb8DsxNh0ZYldyYNCoM+d/jI=)
2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: OzlAv6KjQltx6nWptS2CfrjVYRlijYIMI9XGPfT9vJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2523 (0x9db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Validity
Not Before: Sep 22 19:41:17 2026 GMT
Not After : Sep 29 19:41:17 2026 GMT
Subject: CN=6ab2d9dd-7987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:ea:bf:4d:24:87:8d:95:b0:8d:0a:8e:0d:
bc:87:3d:43:b7:24:5f:25:39:4b:ad:9d:1c:56:55:
ae:f7:3d:df:65:b4:f3:d3:90:ed:0e:b0:c8:7c:e8:
f0:39:a1:8f:ed:03:8c:4d:43:84:36:61:92:52:0b:
19:93:28:82:30:28:99:90:dc:0d:e0:42:76:81:90:
44:c5:ef:1b:28:bd:bb:61:6e:5c:82:97:48:3e:a9:
21:49:62:8a:a8:af:ad:12:53:43:16:00:98:58:0f:
78:eb:c5:1e:65:be:a6:1b:50:62:ec:73:37:ac:a9:
46:48:89:a7:7e:64:d2:ba:d9:81:d7:7d:32:34:cb:
69:66:9c:45:31:86:b4:e2:75:05:e6:b9:7e:e7:39:
3a:fd:5e:b2:93:a8:00:2f:12:f5:db:81:d7:76:ea:
a3:80:ac:75:2b:3a:6d:b9:b4:27:a3:02:fb:d9:da:
f7:53:4a:e8:bd:b2:2a:49:64:66:df:77:fc:98:ce:
10:61:a9:90:59:0d:4e:00:82:2a:97:be:37:17:05:
36:d7:8e:c5:88:9c:c9:f1:35:ef:96:fa:6a:1f:fc:
ec:52:0c:da:74:24:e1:59:1c:48:72:55:c7:0f:9d:
b2:ea:41:86:4c:70:04:3b:e4:61:be:73:10:2c:d0:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:36:8F:66:2C:EF:A8:24:2F:6A:B7:1C:96:65:65:F1:72:35:0E
X509v3 Authority Key Identifier:
keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:b4:10:2e:03:64:05:c5:63:b8:1c:d1:7d:48:9e:7f:cd:70:
30:f7:ee:ad:b4:15:53:11:5c:9a:01:94:10:76:4d:c7:57:e6:
3a:fe:9f:10:07:45:99:f4:73:1b:09:b5:ea:88:1d:86:21:91:
dc:2d:b0:b3:50:27:64:d3:c6:bb:22:06:21:dd:d5:e1:8b:77:
1b:fb:20:37:d1:c5:c0:eb:6b:04:da:b7:0c:fc:37:ed:2e:98:
54:af:68:48:9b:6e:3a:4d:58:9d:24:46:de:65:d1:4d:bd:3b:
3c:4c:ad:6c:15:4a:e2:d7:3b:de:42:7b:a5:26:bb:4c:ac:31:
d5:a0:37:4d:31:65:84:32:58:70:69:8a:6a:3f:29:70:e1:51:
08:4f:23:bb:77:fa:fd:29:24:f7:3d:86:8f:7b:aa:1d:33:ca:
fc:c0:c9:b4:76:c1:1a:9d:ea:99:6a:7f:6f:c6:ce:42:e8:07:
10:a5:ae:00:1b:8e:be:66:e0:08:81:19:a2:06:89:76:f4:70:
4b:04:40:21:2c:2f:f7:6e:0f:b8:b2:85:8f:2f:cb:50:94:c9:
64:d8:84:4c:fd:fb:db:19:9a:cb:b6:df:cd:28:a5:58:a1:60:
cd:6c:28:ce:95:f6:b0:e0:ca:78:cd:f3:3c:cb:3c:03:ed:b4:
c5:31:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:19:01 2026 by rpki-client