
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json)
Hash identifier: aLONsVbAWhChQm1hpgFpx4czy2up0jyCrMoSSMzwzFg=
Subject key identifier: 70:8C:28:AF:FA:C3:EB:8B:BA:3B:CC:07:7E:03:96:1A:AF:29:58:2F
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
Manifest number: 0139
Signing time: Sat 05 Sep 2026 05:26:25 +0000
Manifest this update: Sat 05 Sep 2026 05:26:25 +0000
Manifest next update: Sat 12 Sep 2026 05:26:25 +0000
Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: Weo/rGzlpUrNJIanzfwNqIzMBpkWjB6V/Fu5n9j/dBo=)
2: 5DB76F8212B211F19AC313AEB5EE528E.roa (hash: 2NaYNjJ6qjcaM0sXuJIClT+/B4+Xci+4D5hsnMlJddw=)
3: 5CBA651212B211F19AC313AEB5EE528E.roa (hash: OY4Fet8xm/rFRe8wVg+u3YFnbkKRJHlvjCIrVFg7MQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 05:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Validity
Not Before: Sep 5 05:26:25 2026 GMT
Not After : Sep 12 05:26:25 2026 GMT
Subject: CN=6a9ba801-3624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:33:b6:0b:12:77:64:8f:9b:31:65:a4:28:
fe:52:dd:32:61:5d:43:6b:21:73:af:08:0e:ea:bf:
37:a8:c7:1d:87:97:17:90:81:a2:b4:aa:c1:f3:6f:
58:d5:96:00:db:9e:27:87:9d:8f:94:8f:7c:35:45:
65:68:78:fa:d5:7c:58:62:cb:25:e3:98:5e:f1:e1:
f5:53:0a:26:59:b2:ca:e9:66:c1:8c:e9:ee:c0:70:
03:de:68:68:6b:81:be:3a:c9:b6:3d:19:be:f4:91:
47:ee:32:4b:c1:fc:cd:8b:d8:fc:dc:49:c4:7f:b0:
56:7e:e3:4c:94:1c:c4:d3:b7:dc:c1:f7:6c:e9:64:
f5:21:0e:58:78:66:c1:c4:a4:d7:ab:96:19:df:c6:
e0:63:5d:de:8b:f6:d4:29:a4:94:f9:a5:ee:5d:af:
fd:a1:ed:d8:5a:30:38:36:ad:97:99:5b:d9:8b:3d:
65:67:6b:c7:9e:18:50:10:37:32:a9:9e:f5:78:94:
27:db:34:91:cd:8c:90:d0:e3:74:00:b4:a5:f9:c1:
e1:e1:21:70:82:89:a2:60:66:f6:5d:75:eb:0b:88:
3e:81:2c:4f:4c:a2:09:66:69:2d:25:cc:76:39:ca:
2b:16:9a:e3:86:56:3a:45:24:14:01:ed:8a:a2:e8:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:28:AF:FA:C3:EB:8B:BA:3B:CC:07:7E:03:96:1A:AF:29:58:2F
X509v3 Authority Key Identifier:
keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:4f:c0:a9:2b:6b:1e:57:fc:ad:8d:14:f7:43:5a:79:3c:bf:
f3:ee:12:14:58:ab:07:f6:e8:c1:e1:60:35:c1:76:b0:ba:f8:
b6:b6:4a:6c:75:ed:dd:d5:54:5e:89:bf:6c:4a:8a:f1:5a:fc:
e4:59:67:3b:e3:69:09:84:af:1c:dc:06:66:ce:7c:4f:4e:17:
75:5f:00:de:59:39:bd:3e:bb:97:3b:89:39:76:8e:a2:72:9b:
bc:e9:2f:44:de:12:4a:d9:3b:10:4e:4c:4b:ea:9c:2a:1f:7c:
7f:2e:a5:61:a2:12:2d:2e:35:b0:57:4a:c8:26:84:8c:2f:e5:
77:93:95:c8:da:f5:4c:7e:a2:ae:b2:6b:59:fa:a9:29:41:0f:
f2:75:48:29:3f:8b:ba:f9:2e:f6:65:98:84:95:66:95:56:f1:
c6:41:28:3f:4a:eb:4e:d5:ad:4b:d9:8a:22:55:48:71:04:6e:
78:c2:77:75:79:b1:eb:b0:ee:78:71:b9:f3:b7:20:0a:28:5c:
6c:46:5b:ea:34:5e:a4:7a:70:86:1f:dc:e1:af:df:56:85:7a:
f2:cf:43:02:3b:1b:c6:15:6b:2d:5f:9c:2d:c1:6e:7a:40:00:
55:bc:6e:21:6e:a2:20:a6:a4:d6:e7:e8:56:96:55:a6:8e:19:
53:9b:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:44:30 2026 by rpki-client