
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier: hKOmGnIO2VYJxeNWgIOKR43Sh7mkINhOf34Iocrocmg=
Subject key identifier: 1D:85:47:AF:AD:A6:9D:8E:E5:EA:05:24:C8:D4:59:78:79:02:36:86
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial: 02B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number: 02AC
Signing time: Sun 25 Oct 2026 01:47:22 +0000
Manifest this update: Sun 25 Oct 2026 01:47:21 +0000
Manifest next update: Sun 01 Nov 2026 01:47:21 +0000
Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: oF009KivlJQ3T4jFJmfisu3gRIfSBQQ8Amr40mnJgQI=)
2: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: ZJ1JXD8OMZ1/bFwQ4CUwNfMJD2mA1nTwWCd7m4pPBcY=)
3: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: IQ7wQrkp6KFdnuD/CeQ1UB+HAtSyDPflLHSW+K88QUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 01:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Validity
Not Before: Oct 25 01:47:21 2026 GMT
Not After : Nov 1 01:47:21 2026 GMT
Subject: CN=6add5faa-15ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:8e:c2:8c:62:2d:c2:47:50:05:f2:ec:65:
0d:97:5d:60:11:5e:b2:20:4e:07:29:6e:03:58:8f:
a2:4a:38:e8:05:bd:7a:66:8a:bf:85:9f:bf:08:fd:
f7:af:5a:45:24:26:a0:79:76:f9:c6:24:da:1d:f1:
2e:6c:98:1b:2f:ae:df:11:96:93:36:02:71:81:27:
3f:83:b1:af:f7:c6:d3:f3:8b:4f:66:36:34:75:ac:
55:ad:77:b0:7e:b8:ca:61:ae:0e:df:a4:e1:ac:ce:
30:25:f9:47:71:e7:ad:51:67:c2:f4:3b:b3:d4:a8:
10:7e:19:de:5f:61:7e:db:f6:bf:ca:9a:14:d1:80:
5e:01:9e:f8:3a:ed:70:ec:6c:ae:dd:7e:13:97:f6:
53:09:b0:cb:09:28:c5:2a:26:05:3e:83:47:53:fc:
fe:41:62:9a:96:13:60:44:04:23:49:37:c9:e6:28:
2f:05:4e:65:bf:ce:7a:fb:d6:aa:00:73:fe:2a:9a:
ab:b1:7c:86:c9:30:f6:cb:68:a7:e3:f7:b5:d3:f1:
a7:46:e9:c0:f2:d9:55:8c:a1:ef:36:3a:da:98:e9:
3b:45:44:f4:cd:b1:dd:65:c2:68:7f:7b:4d:ac:fb:
8c:cb:ad:3a:b8:80:ef:7e:07:cb:80:77:68:bb:49:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:85:47:AF:AD:A6:9D:8E:E5:EA:05:24:C8:D4:59:78:79:02:36:86
X509v3 Authority Key Identifier:
keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:5b:35:8a:e5:44:4a:5b:96:7a:73:17:06:46:9a:08:7e:70:
e3:56:55:71:08:b2:ae:96:dd:56:dd:ba:d5:03:67:45:5f:81:
9f:b0:dd:19:f3:2d:fa:33:0d:3a:44:82:37:a7:30:57:e5:5c:
76:d9:aa:a7:a0:38:31:81:c2:20:5f:99:76:2e:82:13:a3:21:
aa:4b:7a:00:bc:43:f8:c7:46:70:da:74:53:4d:46:08:7c:23:
67:0a:80:89:2c:b2:05:6a:ba:8e:ec:17:c8:99:40:29:51:63:
88:a9:c0:83:bf:af:d9:3a:9b:aa:6f:ad:62:21:25:a8:7a:00:
79:5d:57:ae:d0:0d:a9:0c:43:c9:c8:28:6e:85:0e:e6:9b:52:
65:86:e0:6c:f9:d3:0d:77:d2:b9:9d:ce:1d:c4:6b:1d:d4:dd:
79:a7:f7:5a:9b:e7:82:7d:e8:b4:8b:87:51:2c:97:96:cb:61:
de:df:f2:01:29:95:b3:8c:28:f7:dc:97:e1:08:2b:69:9a:ef:
c0:36:30:8d:c5:8e:8c:2b:47:b4:39:00:a4:3e:7b:68:84:bf:
4d:0f:41:57:5e:13:2f:60:46:bd:3e:2c:71:0a:65:00:de:76:
dc:5c:06:2e:9b:25:d3:7c:38:2a:56:93:56:07:a4:c2:56:c0:
b0:e1:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:51:46 2026 by rpki-client