
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json)
Hash identifier: l5mk1TG+80qAEx4h5axvE/p6IMODYwOYYPMAggKKXO8=
Subject key identifier: 3B:91:3C:BD:71:D1:CC:80:81:3F:1D:B1:4A:7F:11:7B:39:9D:B0:93
Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
Manifest number: 05DA
Signing time: Tue 06 Oct 2026 23:56:39 +0000
Manifest this update: Tue 06 Oct 2026 23:56:38 +0000
Manifest next update: Tue 13 Oct 2026 23:56:38 +0000
Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: 2BPYaODCbChwUstJUSTwR3l3LrqUCFTH9s+BTu1h5rU=)
2: F83346DA410211F097F43F85C4F9AE02.roa (hash: HlHozKQbiUgJEzpu3Hjn82lhGmduZGu23FAaPzM4W3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Validity
Not Before: Oct 6 23:56:38 2026 GMT
Not After : Oct 13 23:56:38 2026 GMT
Subject: CN=6ac58ab7-0804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:55:b6:52:92:d7:35:e8:9d:1f:ad:ea:83:
6c:74:03:63:1c:8c:29:83:c8:d9:a0:61:49:ef:2a:
04:51:a7:24:7a:cb:1d:e3:4e:bc:8d:d4:f9:a3:d4:
3c:f6:8a:96:a5:a6:9a:24:99:a0:0e:eb:27:e3:22:
16:d7:1c:be:4c:51:0c:8f:ef:a6:13:2b:ec:f2:ff:
e2:67:14:a8:e6:44:4c:04:17:91:38:92:ac:af:7f:
be:c0:0e:8c:16:cc:6a:e0:67:55:92:58:7b:ea:b2:
59:7f:9f:29:50:79:05:33:37:71:c2:7c:ce:14:15:
c7:12:5b:ee:4b:7f:fa:ea:12:43:b1:64:84:5a:13:
ec:f5:41:f2:43:6f:ed:9f:8d:15:e1:13:26:1f:8a:
8f:2b:bd:70:8d:10:7c:d0:74:b4:34:4d:a7:2a:af:
13:c4:c6:e8:0c:3f:2f:d5:05:1f:af:16:50:46:2e:
3b:ab:93:03:87:bf:d7:f1:e8:9a:54:4e:06:6c:e0:
b1:ce:ba:9b:f3:79:dc:4b:13:bf:cf:81:1b:07:10:
04:a0:3c:a6:27:a9:14:20:a8:69:b5:35:a7:e3:df:
f7:e0:70:8e:9e:6c:13:54:23:fa:45:d0:dd:1e:70:
10:60:a7:0d:35:a9:11:c8:0f:e3:22:ce:61:7c:4a:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:3C:BD:71:D1:CC:80:81:3F:1D:B1:4A:7F:11:7B:39:9D:B0:93
X509v3 Authority Key Identifier:
keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:12:eb:ec:4c:19:29:a6:64:f7:de:ff:84:b5:a4:a2:c8:00:
e1:13:ae:00:eb:b0:17:cb:a8:5a:a7:5d:18:6a:4d:52:88:6f:
12:ac:4c:65:02:76:d1:28:7d:f7:b7:19:27:79:21:13:44:f9:
9c:58:31:e9:cd:fb:f0:da:e1:93:01:8e:f8:50:ec:3f:32:2f:
3f:3d:dd:17:58:7e:45:e7:07:2e:03:df:1f:08:2a:64:54:6c:
67:24:ef:9d:bc:66:2f:24:21:26:03:97:06:8b:01:c9:16:27:
23:36:75:b6:c2:b0:fd:d2:59:28:77:71:e0:b8:29:a6:2f:a9:
dc:9c:3e:4e:81:52:f3:9b:86:4e:1c:e5:23:8a:74:cb:42:93:
63:88:48:3d:89:e7:d0:a9:33:bf:ae:fe:e8:22:c6:ef:d1:f6:
e1:b0:94:f7:55:c1:cd:b7:a3:5b:ab:08:4b:50:34:e8:c8:89:
c8:3e:62:3b:56:20:58:d3:2a:29:ba:16:8b:41:07:7f:d4:2d:
70:01:7d:99:db:04:44:73:aa:d8:54:a8:50:3e:2b:af:63:15:
46:c0:25:b0:43:94:75:a6:a8:4d:38:77:ae:f6:e2:fc:66:b8:
de:42:d8:9c:1a:f5:88:67:f8:ce:c6:0e:3c:2c:7c:f9:ac:ac:
0f:1a:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:27:35 2026 by rpki-client