
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier: OGKvlsAdE2df9yoV5Za3rKkGoVA1jHtRK2vGttCqsXI=
Subject key identifier: B2:8D:99:75:F9:F3:8D:93:4F:64:B8:83:C0:76:04:4E:95:10:D6:95
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number: 019C
Signing time: Thu 03 Sep 2026 04:31:43 +0000
Manifest this update: Thu 03 Sep 2026 04:31:43 +0000
Manifest next update: Thu 10 Sep 2026 04:31:43 +0000
Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: UPnTTP8voOp3Oo1qNJlB+fJUWtb5/WMvOTfED3ZpMTU=)
2: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: tX6hwKferIVMkSYMI8hzg3HEG28VMd7DHAYXOto5Mlo=)
3: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: OxfaWe+94tIlTAT4+byZPb7wx3bdqZGYJ/nQcDtlMWw=)
4: 09F2AE3EF36811F0BB995E0C666F56BC.roa (hash: v8t9bmHpqZn0wuxiofvRlA2MMIdpOLvcB//haxyBf5U=)
5: 09799D96F36811F0BB995E0C666F56BC.roa (hash: nJl06u2CCCZldTMQjMgrG+YE+xZkFMkssVi8+kqwbRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Sep 3 04:31:43 2026 GMT
Not After : Sep 10 04:31:43 2026 GMT
Subject: CN=6a98f82f-3322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:15:85:00:53:4c:58:a1:ef:54:6b:f2:20:
ee:57:c6:2f:aa:02:0d:b4:d4:ee:58:6b:c8:9d:3a:
0c:b0:27:64:c1:a7:35:da:0e:22:9f:b4:56:e4:d0:
60:4d:d5:05:f9:a7:2f:8c:67:15:fd:df:d1:ca:f4:
7d:67:65:64:01:5c:58:96:b6:8b:6f:51:ed:e7:e6:
6a:ee:30:cc:8c:3a:57:db:33:91:02:47:c2:d2:f2:
7d:8b:f3:3e:2b:3b:6f:6d:4a:aa:56:cd:4a:73:83:
ad:76:47:f0:2f:13:c2:c0:00:11:e7:8f:e9:06:41:
50:c6:c8:9a:a6:05:26:ff:0e:a1:4f:fc:15:80:c4:
11:a9:e1:c3:13:0f:da:a0:1a:8f:88:5d:cd:07:7e:
15:43:5b:37:b9:76:a5:41:30:66:6e:16:e2:5c:ad:
1b:21:2c:28:00:fa:bd:9c:49:58:4a:3b:fc:8c:6e:
d1:df:22:01:39:d1:d9:0f:1d:82:21:40:16:ae:04:
c9:51:0f:de:fc:a9:4a:7c:7c:7d:b2:82:63:9c:56:
eb:13:d0:39:86:93:0f:72:ba:b6:6e:0b:ee:a5:10:
45:d1:54:6a:6f:87:6b:cf:22:ef:9c:cf:d5:5b:74:
a0:37:f1:d6:0f:9a:4b:d0:c9:cf:97:f2:a3:a5:f9:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8D:99:75:F9:F3:8D:93:4F:64:B8:83:C0:76:04:4E:95:10:D6:95
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:86:9f:b7:c2:16:ff:62:9b:0e:2b:93:d2:c3:03:35:cb:4f:
97:29:ce:84:81:26:82:ca:54:ef:62:b4:54:a9:c7:5e:f2:f8:
a7:82:0b:cd:e3:e7:a8:01:b0:bd:36:73:c5:f9:c3:16:d7:db:
76:b4:2c:90:e6:fb:26:4a:52:d2:ba:fb:ff:bc:4a:8d:88:f9:
e7:3d:d9:59:53:c3:01:0e:aa:d1:cd:85:a6:15:08:7b:3b:91:
43:53:cf:6e:4f:fc:b9:1e:5b:c8:a6:30:08:ce:58:1f:98:ae:
58:99:5f:d6:03:4b:2d:fa:85:b2:9c:dd:07:9d:e6:43:9f:4f:
1d:dd:f2:29:b8:22:97:b0:09:28:f7:57:a5:4a:53:59:9d:b5:
60:a1:8e:89:b7:08:ed:16:d7:28:d7:10:de:9b:02:76:f5:76:
d4:f3:ce:56:2f:a8:21:bf:dd:3e:80:50:1c:02:31:89:5e:b2:
c7:6f:50:51:2e:89:22:5f:11:b1:58:c4:e5:a4:9a:74:78:01:
db:23:07:3b:eb:c8:a3:2e:66:46:42:99:ff:5a:e4:db:00:58:
c4:54:98:e0:29:c1:b7:88:a6:49:3f:3f:26:17:20:1a:e6:8d:
11:cb:65:ef:2b:2e:96:8e:f8:c9:9d:45:2d:be:51:2e:2c:49:
fe:a9:16:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:04:37 2026 by rpki-client