
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
File: YGtPQu6X90iOwgtj2LGq9tQtnKc.mft (raw, json)
Hash identifier: yPiyn2R00zZZIs+Gp00ARy8y/3Jvj07Z8O6NFEYBqQs=
Subject key identifier: C7:28:8B:0C:21:DB:55:71:F9:86:CA:DA:91:43:CB:C2:57:C4:BE:91
Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
Certificate issuer: /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
Manifest number: BB
Signing time: Thu 03 Sep 2026 07:06:49 +0000
Manifest this update: Thu 03 Sep 2026 07:06:49 +0000
Manifest next update: Thu 10 Sep 2026 07:06:49 +0000
Files and hashes: 1: YGtPQu6X90iOwgtj2LGq9tQtnKc.crl (hash: Tzd/F/YE2V6Y7H0XH2V0ziY1Pk60tdc4jzgigC/+14w=)
2: 720ED6F487CB11F0B605C67DC4F9AE02.roa (hash: DkL8mKFGzHdVRylK1rD4tLxN/q/oxjuNdQSmCvoiiL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Validity
Not Before: Sep 3 07:06:49 2026 GMT
Not After : Sep 10 07:06:49 2026 GMT
Subject: CN=6a991c89-acb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:d8:b4:05:6d:1f:86:eb:0e:f3:0b:84:6d:
d0:fa:d6:2c:92:87:e0:0e:ee:64:97:0d:3d:2c:96:
19:9c:17:18:80:21:47:6d:c4:a2:8b:25:c7:42:1c:
69:fe:75:57:8d:49:14:36:a6:37:a5:a0:5d:f5:c0:
09:df:b9:e8:5f:31:9a:72:a0:f0:60:b9:1d:39:e9:
eb:e6:4f:c0:09:07:25:d1:7f:3c:d0:45:6e:d0:1b:
f7:d6:79:32:ec:1d:16:39:1a:51:ce:c2:52:e4:dc:
37:35:b7:39:69:eb:f7:ca:fe:59:b0:6e:3c:d7:9e:
7c:b5:1a:a8:e3:3d:a6:71:9f:00:50:b6:a6:d7:84:
ea:c9:60:e8:41:43:15:a2:44:d3:d7:a9:41:fa:66:
8b:92:79:71:03:8b:0e:c9:a7:fb:e7:f8:69:2b:22:
7a:37:ea:90:b8:27:cb:a9:e7:58:4a:a1:55:f2:c3:
48:07:f9:70:a7:08:ef:36:d0:93:2d:61:a4:0e:b3:
98:21:c9:5e:24:c4:c9:df:51:58:6b:ae:3f:1f:01:
3e:de:60:4a:2c:62:df:c7:d4:93:19:a0:2a:91:fc:
5d:90:74:d4:e1:f0:f2:16:60:2e:f9:01:46:45:58:
44:94:ef:3b:6e:d5:4c:5c:f7:19:2e:4d:a5:e8:86:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:28:8B:0C:21:DB:55:71:F9:86:CA:DA:91:43:CB:C2:57:C4:BE:91
X509v3 Authority Key Identifier:
keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:53:ee:30:42:0a:ca:bb:59:09:c8:92:02:44:ca:66:0b:05:
23:5b:c7:bf:62:c2:4e:c7:7a:48:7b:5c:91:bc:0e:c6:3f:ae:
68:78:bd:3b:fa:b7:b9:ba:8f:1e:89:c0:4d:26:bc:18:ed:16:
7a:69:3a:5c:d4:9c:9a:96:11:e4:2a:73:eb:c5:3f:ac:d3:cd:
c2:3d:4a:e1:30:46:ec:77:83:7d:48:1d:1b:82:4f:7c:6c:d6:
51:1a:d9:05:c6:e6:44:e0:95:c3:92:82:0f:82:33:5f:b3:ae:
cb:f7:8a:c3:71:c6:f6:0c:56:bf:24:4b:a4:36:ef:f1:f2:e1:
92:3a:8b:36:ab:54:6b:60:7a:c7:a6:d5:ff:f1:4b:a0:68:87:
5a:94:05:49:8f:f1:09:f5:7f:62:08:d2:fe:56:59:6d:67:dd:
a6:de:11:5c:8a:80:b5:af:16:1b:9a:57:7a:7b:a2:38:da:1e:
24:08:5e:c2:3e:97:51:84:32:0c:1e:be:e5:e1:4c:05:9f:b6:
2a:db:ad:13:25:1c:0f:50:9c:cf:49:fd:a3:9c:aa:4e:46:6b:
a1:c0:3e:36:f8:53:67:10:a5:f8:aa:ba:3c:ed:d0:a6:09:f8:
ae:3e:c3:b5:40:78:95:fc:e4:fe:f5:1c:8a:c3:1a:c9:6e:6a:
21:5e:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:31:51 2026 by rpki-client