
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
File: YBC8xly5zPAs9-0p7HXk1iK98_A.mft (raw, json)
Hash identifier: Tf2FrypYdstcNnIIYX1+PvTi3guJC3fFz0M6DeAPVdo=
Subject key identifier: F6:B7:E6:9D:AB:EB:3E:EF:70:A3:41:33:0A:A8:1E:3C:34:47:E9:DF
Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
Certificate issuer: /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Certificate serial: 05C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
Manifest number: 05A8
Signing time: Sun 04 Oct 2026 23:15:11 +0000
Manifest this update: Sun 04 Oct 2026 23:15:11 +0000
Manifest next update: Sun 11 Oct 2026 23:15:11 +0000
Files and hashes: 1: YBC8xly5zPAs9-0p7HXk1iK98_A.crl (hash: wHxRyaU182uZkfpl806U1XlKH95z0AMNxO/fRirMKkQ=)
2: A5465844546711F18E89C651B3833773.roa (hash: gMXHJxaR0nvtlkJPCuRN1IgaESwrx+pWszPBkIn6wyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl
rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1472 (0x5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Validity
Not Before: Oct 4 23:15:11 2026 GMT
Not After : Oct 11 23:15:11 2026 GMT
Subject: CN=6ac2ddff-56d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:02:4c:32:c1:74:43:a5:4b:da:92:28:ba:16:
36:ab:69:64:4e:71:77:1c:3e:cd:a4:7e:ff:60:d1:
35:95:0e:f6:8b:78:bd:3e:bf:17:c1:fc:d1:ae:b2:
c4:6d:2f:c2:86:ba:fe:8d:c5:c8:73:1d:cd:f5:bd:
91:72:52:55:9c:05:a9:db:36:ca:84:cf:21:3f:eb:
99:90:ee:0f:20:64:5c:98:6e:d8:2a:7e:6d:ed:ff:
f2:f8:86:5b:07:07:36:b5:88:e5:de:26:0c:3e:ca:
6d:69:80:f9:f9:b5:c1:5a:4a:c5:39:f9:00:d7:13:
65:39:84:b3:35:2e:51:e1:e1:9c:95:9e:3a:63:e4:
4b:75:dc:be:b1:ec:81:c6:3a:77:2e:8d:4f:57:3d:
8e:8b:6b:7f:2c:02:c9:17:25:56:d1:4f:80:9a:af:
06:9c:d5:c8:1a:42:7c:40:0f:76:be:5d:b6:a5:2c:
bf:81:a8:4f:7a:a8:55:0d:7e:cf:12:46:fe:49:27:
6e:b4:da:e4:c2:fe:d8:f4:d2:6d:e0:5b:29:d3:e2:
43:b3:f5:20:d3:dd:c2:ed:99:dc:e8:d9:a2:75:be:
99:00:61:4c:7b:5d:cc:5a:7e:d0:a0:f4:d8:8e:bc:
fc:8c:88:a9:c1:e8:62:45:6b:de:ec:03:25:7b:69:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:E6:9D:AB:EB:3E:EF:70:A3:41:33:0A:A8:1E:3C:34:47:E9:DF
X509v3 Authority Key Identifier:
keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:9d:60:f7:11:39:1a:7a:4f:7c:05:d4:e9:91:69:6f:b0:79:
f0:18:b4:73:00:96:63:c8:2b:03:75:a6:a6:a1:9f:22:67:80:
a7:bf:fa:b1:8b:aa:94:3d:3a:61:b1:5a:5f:f3:5e:15:de:d8:
16:88:08:5e:dc:51:2d:73:9c:45:5c:22:4a:6c:19:62:11:f3:
64:52:97:55:73:3c:e2:8c:9f:91:1f:09:81:ea:89:30:41:83:
56:e7:39:3b:d9:30:66:41:88:11:72:e9:ad:16:d2:d8:40:e2:
ee:a3:f5:27:cf:0a:bc:4e:78:38:e5:c9:b9:75:a2:56:db:f5:
e2:e0:67:0e:68:4c:93:87:9f:47:39:5d:fd:59:e9:31:8c:c2:
17:e7:b6:40:6e:c8:b3:b9:6e:96:29:ab:de:cb:42:87:27:b6:
09:94:da:f0:f4:7f:21:2a:94:4b:64:2c:7f:f2:6e:f1:76:3b:
d7:c2:72:a4:20:67:20:d8:1e:a8:3e:a6:a0:30:f8:6a:f4:0b:
55:a6:ee:9e:a2:b4:65:4f:c6:36:16:22:30:39:cf:da:93:82:
35:cf:eb:e4:3b:a3:5e:01:f4:c9:e3:92:2c:54:77:2b:fc:a5:
4d:51:00:08:c4:d4:fb:7b:7f:e1:98:f3:04:e7:5e:5e:8a:fa:
13:b2:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:40:42 2026 by rpki-client