
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft
File: Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft (raw, json)
Hash identifier: R6JwQsWbKBox4RWTDhu4j4KOdoamW1B251GCC1eHgno=
Subject key identifier: D7:E7:F1:FB:39:98:7E:BF:33:A3:99:37:AA:E3:34:8A:17:A7:2F:15
Authority key identifier: 62:EE:87:26:D6:7E:EA:44:20:1C:F9:13:90:11:1D:AB:6F:6F:BF:C3
Certificate issuer: /CN=A91FF21A/serialNumber=62EE8726D67EEA44201CF91390111DAB6F6FBFC3
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft
Manifest number: 1F
Signing time: Wed 23 Sep 2026 08:39:20 +0000
Manifest this update: Wed 23 Sep 2026 08:39:20 +0000
Manifest next update: Wed 30 Sep 2026 08:39:20 +0000
Files and hashes: 1: Yu6HJtZ-6kQgHPkTkBEdq29vv8M.crl (hash: 1gkxgwMW88IcAGd1bIecSDQOLdsIw+6QXZHjnUQ8is4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.crl
rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF21A, serialNumber=62EE8726D67EEA44201CF91390111DAB6F6FBFC3
Validity
Not Before: Sep 23 08:39:20 2026 GMT
Not After : Sep 30 08:39:20 2026 GMT
Subject: CN=6ab39038-82d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:b2:4f:ab:d4:a1:d3:87:78:6e:b9:f0:b4:
ce:d0:1d:9b:36:06:39:ec:e0:36:90:8b:99:48:d0:
4f:e4:9d:c5:a2:6c:c6:d8:8f:d5:93:e6:b9:e5:9d:
ae:54:87:e3:ca:35:ea:72:d4:9a:b8:39:b1:4b:1d:
29:70:a7:37:fc:6c:4f:c3:15:ac:d7:d7:d6:d7:3a:
37:ab:fc:6a:b5:50:57:ff:74:bc:b5:1d:76:c7:00:
33:94:c6:5b:f2:f7:d6:f2:f1:a0:98:bc:c1:20:1d:
c2:c6:fa:73:f3:8c:38:d0:f5:1f:47:19:ab:5b:97:
57:ff:59:56:b6:64:18:6e:fa:4e:91:02:24:cc:ad:
dd:1e:7f:f8:86:be:86:b7:af:34:b5:9c:cd:65:c0:
91:6b:0f:21:7a:7d:38:0c:54:4f:b2:f9:e3:d4:7c:
20:1f:97:3e:09:22:8a:a3:7d:8b:ba:7d:6a:e7:07:
fc:39:cd:5b:62:64:a1:bb:20:19:89:03:bd:ed:37:
80:f4:c6:d6:24:22:69:50:cd:17:fb:53:50:ae:84:
04:f3:71:10:2d:bd:46:1c:9a:52:5d:7b:13:c4:e0:
12:80:16:9a:45:1e:11:38:6a:4d:b3:32:16:11:61:
36:a3:e6:c7:74:75:a0:db:20:36:10:ba:45:57:21:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:F1:FB:39:98:7E:BF:33:A3:99:37:AA:E3:34:8A:17:A7:2F:15
X509v3 Authority Key Identifier:
keyid:62:EE:87:26:D6:7E:EA:44:20:1C:F9:13:90:11:1D:AB:6F:6F:BF:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:29:ae:57:0a:29:cd:e0:f4:98:63:98:93:3f:b4:3f:98:9e:
85:80:d7:d1:36:f5:7e:89:94:ee:60:be:6e:e8:4a:03:2a:4d:
00:3c:c8:8f:d7:d4:65:15:73:30:77:fd:a6:ac:9f:71:15:9b:
76:fd:f3:01:73:1d:c7:46:71:a1:a8:9f:da:6a:4d:9e:c9:74:
7e:64:54:93:98:3f:d0:48:84:f4:0c:4b:80:c3:7b:ac:dd:6f:
39:25:d3:0d:bb:41:ea:d4:eb:60:38:7c:8e:d7:9f:10:ba:2e:
2d:8b:99:ae:f8:dc:76:29:ce:4e:aa:7a:bb:74:f4:43:dc:0c:
d8:36:5c:ba:24:57:43:fa:55:49:0a:d5:60:55:8a:37:e4:a7:
9a:34:8a:31:48:f2:2f:e4:fc:0d:ac:e8:64:af:f1:c7:3f:f9:
bc:f2:7c:ee:3f:8a:f8:46:f4:78:62:ec:9c:57:f0:b5:c2:84:
2f:94:fc:40:32:28:03:52:31:68:49:0e:10:03:82:84:1a:dc:
fa:52:e1:e6:82:38:56:b3:8f:a7:2a:03:66:cf:7d:d8:4f:ef:
be:ee:db:b1:d5:a3:3c:0e:11:05:5c:eb:9c:68:3d:86:4c:91:
05:db:d0:08:67:bc:1f:d7:9f:63:95:45:d4:9b:1f:a4:cd:f2:
2b:5e:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:19:02 2026 by rpki-client