
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier: 6dPo8DyavMA5apGzAGw7F72SmJr1ov1gNmqLTyJiahM=
Subject key identifier: EA:29:F4:00:9F:5F:96:A5:2D:83:AD:51:F7:47:0E:53:A0:ED:3E:58
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number: 0293
Signing time: Sat 05 Sep 2026 01:33:24 +0000
Manifest this update: Sat 05 Sep 2026 01:33:23 +0000
Manifest next update: Sat 12 Sep 2026 01:33:23 +0000
Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: AbP83Ocr+JW9dGGCGXQ5PyKAgYEZ/hyYWme1x3OisXg=)
2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: IQ7wQrkp6KFdnuD/CeQ1UB+HAtSyDPflLHSW+K88QUs=)
3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: ZJ1JXD8OMZ1/bFwQ4CUwNfMJD2mA1nTwWCd7m4pPBcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Validity
Not Before: Sep 5 01:33:23 2026 GMT
Not After : Sep 12 01:33:23 2026 GMT
Subject: CN=6a9b7164-d81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:95:6d:93:7e:c1:be:9a:9f:46:fa:2a:01:
be:b6:35:9e:3d:bd:63:7c:ae:91:5f:08:26:23:fc:
6e:a6:93:c5:cc:60:1b:5b:27:0a:cd:ec:5c:81:12:
9c:db:b8:b1:55:21:53:ab:5b:c3:1f:21:a3:bc:72:
99:54:49:51:10:9e:49:cd:6d:62:0a:81:42:b3:ce:
09:4b:0d:a1:3e:f3:34:16:c3:06:ff:9a:c1:4f:cf:
84:a9:e9:d4:15:8d:41:32:f3:12:4d:c1:1f:a0:44:
e7:99:94:5b:de:82:74:e8:af:63:56:d1:d6:94:42:
e4:bd:c2:b2:87:96:99:82:36:a2:20:b7:69:c9:1e:
ec:bf:94:8d:e2:85:d3:9c:53:9f:10:0d:67:b5:eb:
9f:df:a9:89:8e:21:2b:2c:84:72:d5:96:8c:98:44:
2b:51:37:e3:9c:26:68:ad:42:37:1a:85:57:5c:0e:
d2:cc:e7:95:0b:54:e2:35:c9:48:5a:8a:31:e2:bb:
5c:bd:cf:4c:6d:b0:4c:41:67:b5:ce:bc:fe:7f:cd:
24:2f:1a:3b:28:29:19:62:5c:bf:37:6a:dc:7a:ff:
9e:a7:ab:77:a0:d3:b3:1f:e8:23:ec:f0:95:cb:69:
e2:da:3e:8e:62:75:35:85:58:05:dc:2d:5f:e4:cd:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:F4:00:9F:5F:96:A5:2D:83:AD:51:F7:47:0E:53:A0:ED:3E:58
X509v3 Authority Key Identifier:
keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:c0:2f:d2:10:06:0c:42:3f:9f:e2:93:37:42:95:21:38:e7:
c2:b2:29:f5:13:24:1b:83:24:83:83:74:b1:16:d4:57:a8:80:
66:cc:d3:96:5d:65:ab:87:be:58:2e:15:73:e1:d2:5f:9b:0b:
d6:e7:54:d1:b8:5f:29:5c:4a:56:4a:f3:c2:cb:5d:57:ed:ef:
9a:74:44:7b:10:39:71:5f:f1:ca:3b:2d:e8:7a:bb:15:c5:57:
ad:8e:bf:ec:69:bf:57:35:94:6b:0e:82:ba:a1:7e:de:40:5a:
15:62:49:f8:8d:06:56:1d:5f:34:51:b5:26:d9:bc:12:03:c5:
f4:20:70:4b:c1:a3:af:7e:b0:d4:cb:53:c7:65:de:0d:fa:49:
be:e9:60:83:ff:50:fe:6e:e2:d4:b1:34:d1:53:e5:9b:dd:93:
3a:9c:dd:0c:ed:ac:34:9c:69:e5:e5:88:81:1f:63:8d:8a:a3:
ce:9e:5d:bb:5c:1d:35:3e:a0:ca:d7:a1:f9:df:f7:6d:6d:cd:
a5:f9:19:f6:c3:a0:90:0b:36:ef:23:2f:eb:ea:c4:27:38:4c:
22:30:e9:8a:fd:24:bd:be:bd:8e:55:83:6a:41:ca:2f:59:90:
4e:d4:13:e9:81:0c:c5:d2:9f:4d:53:c3:b3:15:e8:7c:e3:12:
12:98:f0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:53:54 2026 by rpki-client