
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier: ImcakkSxLbGvbM6ZjrA7YMlQGn6lIAfGJPsyZfoihJo=
Subject key identifier: 63:BD:23:20:9A:68:5F:CD:6B:64:8D:86:3D:40:85:F2:BA:C9:52:E3
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number: 0872
Signing time: Wed 26 Aug 2026 20:47:54 +0000
Manifest this update: Wed 26 Aug 2026 20:47:53 +0000
Manifest next update: Wed 02 Sep 2026 20:47:53 +0000
Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: l5eH+UIFG+bTM8oN2lTMT5YRiPcwTiuoSNp5uLhE0q8=)
2: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=)
3: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=)
4: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 20:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Validity
Not Before: Aug 26 20:47:53 2026 GMT
Not After : Sep 2 20:47:53 2026 GMT
Subject: CN=6a8f50fa-f35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:b0:f4:f8:3f:84:7c:7d:7f:89:05:89:97:
97:49:4e:54:08:d2:27:66:f7:29:b6:e0:bf:64:1b:
c9:03:d9:51:8d:8d:1c:e2:9a:fb:c7:4c:3f:1d:52:
c5:b0:4d:8d:ba:42:04:0c:fd:80:c8:77:e3:f6:58:
48:58:b0:af:22:31:58:a0:03:66:01:75:16:82:21:
0c:55:b8:c2:7e:a6:2c:17:cc:68:6c:17:9c:8e:c5:
ea:cb:31:81:a1:65:6f:5a:ac:42:d1:17:b5:bc:dd:
a3:8d:4e:95:7f:8e:f8:1a:f3:29:eb:c9:f6:2a:be:
bf:8b:da:9e:2a:96:20:74:11:98:db:4f:c6:33:a9:
7d:2b:3c:6d:65:ac:7e:05:77:0b:21:2a:37:8f:b0:
07:2c:57:1a:69:19:34:85:f5:e3:54:3c:5c:dd:e7:
4a:f1:52:4a:d3:e7:c7:27:49:26:ac:ef:3b:a7:d4:
ee:f9:b2:0e:c1:07:5d:1b:cd:f2:f9:46:1b:6e:78:
33:59:73:c6:20:0c:51:3e:7e:97:01:68:f9:3a:f5:
38:5f:42:ce:88:ff:aa:ce:81:b5:dd:27:9f:e9:b8:
87:0b:b2:01:ef:43:2f:7d:7a:3d:19:cb:89:12:c1:
88:c6:19:33:29:87:6c:82:67:bf:ba:89:18:32:9f:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BD:23:20:9A:68:5F:CD:6B:64:8D:86:3D:40:85:F2:BA:C9:52:E3
X509v3 Authority Key Identifier:
keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:17:a8:12:ec:df:74:61:2a:7e:12:d3:cc:f8:3a:cd:1e:53:
74:03:d3:44:7f:f0:78:b8:f4:b9:7c:7e:69:86:7d:6d:f4:f0:
66:1f:dc:c8:13:94:6b:d0:95:db:23:d8:7c:6c:17:95:01:6c:
ab:05:72:60:7e:aa:21:58:b0:8d:a4:2f:42:54:e4:f3:10:18:
bd:7c:95:c5:43:c7:7d:34:d4:17:3c:9a:0b:c4:ac:6c:dd:34:
fe:bc:1d:a1:0e:ed:1c:9c:11:94:7d:48:58:09:9c:03:17:77:
bb:d7:93:0d:95:1e:51:38:5f:a3:b8:33:8d:d6:58:6a:77:8f:
e7:08:27:f7:dd:19:18:44:86:3f:47:3d:a3:ab:5a:70:0f:c2:
d2:1f:e2:a2:f0:9f:7c:b7:48:22:c7:5e:a5:2f:e5:d4:bd:74:
f0:94:5f:5b:ed:a6:d7:72:58:b0:6b:43:47:dc:81:09:b8:fd:
40:1b:83:e2:c4:fc:3f:a4:d6:e5:88:6a:d6:8b:3e:0a:96:a5:
ec:75:fd:eb:b2:8c:d7:35:fb:51:78:12:7c:81:67:79:05:47:
83:3c:2c:3c:92:71:75:51:0a:c6:e2:f0:5a:b0:71:bd:1d:96:
21:79:b2:71:ac:fa:d0:54:d2:92:62:1e:17:c4:2e:50:a4:a6:
cf:2a:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:04:19 2026 by rpki-client