
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
File: rYQ8jfSRtv8A6PnztRksOZYqSM8.mft (raw, json)
Hash identifier: izIGEr/WEdbVvM1BX869qPLB/r2ZbH7YtkQZK+yBWUM=
Subject key identifier: C9:76:A9:7D:27:D3:53:CA:B7:8D:16:F7:16:5B:FF:4E:DD:D3:DB:7A
Authority key identifier: AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF
Certificate issuer: /CN=A911583F/serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
Manifest number: 28
Signing time: Sat 17 Oct 2026 09:32:18 +0000
Manifest this update: Sat 17 Oct 2026 09:32:18 +0000
Manifest next update: Sat 24 Oct 2026 09:32:18 +0000
Files and hashes: 1: rYQ8jfSRtv8A6PnztRksOZYqSM8.crl (hash: hZQEOQOEobZ2uAA7M15O3NV1kD7//dUiC9fiEYU9pdY=)
2: 72D413B290EC11F1A202C1754A11F970.roa (hash: Arcy6owVvYDgskgZwg06kTzf4YUjIwfvXCvbOmqa3OQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl
rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 09:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911583F, serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF
Validity
Not Before: Oct 17 09:32:18 2026 GMT
Not After : Oct 24 09:32:18 2026 GMT
Subject: CN=6ad340a2-23c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:32:75:60:6b:29:b8:57:3e:5e:a1:14:af:
2c:f1:ea:20:fd:04:c9:41:be:af:17:2f:08:c9:cd:
aa:19:73:63:a1:34:4c:2f:4d:f2:e3:67:94:96:42:
bd:aa:ca:36:5b:0f:7c:23:6e:f5:a7:8f:69:96:d0:
27:df:db:0e:8b:59:b1:b3:6a:cd:22:ae:9b:78:6e:
ed:63:63:85:1e:c2:b8:cc:83:12:f1:fd:e1:f0:c5:
7f:67:3f:f4:79:fb:c7:40:41:82:69:c2:a4:c9:2e:
50:6a:9e:06:c9:5b:0c:d4:24:c1:1b:d4:a9:69:0f:
d7:10:d6:52:13:27:03:a0:2d:c2:07:78:f9:3b:74:
89:79:7d:76:a4:fd:b9:a2:53:ab:42:aa:9f:a3:da:
09:71:f1:3b:ce:8c:a7:97:f5:99:be:66:24:20:44:
c3:f5:70:f0:04:0a:d8:9f:b2:be:80:79:5a:6e:a8:
25:d9:7f:57:4e:36:b2:5a:ec:a2:50:a2:dd:c3:b4:
ca:f1:e6:07:1a:cd:c7:69:f5:6b:8e:a5:67:b6:55:
c3:84:a8:82:92:90:9c:11:9d:8e:bb:bf:ca:b1:f7:
c6:24:a4:db:df:57:08:14:b9:db:00:c6:cd:ce:8d:
a3:93:47:85:cb:5c:e4:f6:99:37:2a:4e:b9:b6:f1:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:76:A9:7D:27:D3:53:CA:B7:8D:16:F7:16:5B:FF:4E:DD:D3:DB:7A
X509v3 Authority Key Identifier:
keyid:AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:c9:44:4e:67:45:15:72:e7:63:4e:c8:2a:00:f4:1d:c1:8a:
43:63:7a:53:1a:29:23:56:c1:f7:9f:fd:01:02:cf:53:80:9d:
42:82:0d:3a:33:9e:aa:69:5f:12:e6:46:0f:08:91:11:8b:23:
21:12:36:07:0e:a7:0c:34:24:63:6e:73:33:c7:fe:32:3a:1c:
b8:26:f5:80:51:50:1d:5b:3e:c8:7a:ad:12:7c:e5:fc:2d:00:
8e:e3:43:e4:2a:7d:d8:26:65:47:76:bc:89:87:e6:60:af:a1:
a7:88:b5:43:9a:0a:a0:7b:49:09:16:92:d6:92:af:80:97:f4:
7a:79:b5:79:8b:72:b6:f7:e5:44:04:76:aa:35:44:41:e1:30:
25:a9:de:f7:e5:09:46:02:74:bb:b7:63:79:27:11:41:8c:26:
4a:35:cd:78:c5:1b:01:cc:60:72:14:e8:5f:96:c5:1b:c5:ee:
ca:b0:b4:e0:99:f5:54:dc:49:99:cc:c1:13:db:29:07:04:ea:
95:f7:06:ef:e5:e4:24:21:94:de:d5:d9:04:f1:86:54:a5:c8:
8e:ba:25:4e:35:59:75:89:e7:e8:5b:4f:8b:78:41:38:60:fc:
a6:59:0f:b2:f3:d4:71:5f:13:c0:49:a8:62:7c:4b:0e:f6:a0:
c2:54:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:09:37 2026 by rpki-client