
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
File: yTQ499zhrbP_4OWIU2-que__79c.mft (raw, json)
Hash identifier: qtXlREvRMG2QaTTH5UOu9QAY/3FxFyqKioKXJJmmE9E=
Subject key identifier: 60:75:4C:3B:7B:02:15:30:01:69:8F:02:A9:1F:28:1E:4E:27:14:F0
Authority key identifier: C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
Certificate issuer: /CN=A915B2EC/serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
Manifest number: 0666
Signing time: Mon 26 Oct 2026 22:56:52 +0000
Manifest this update: Mon 26 Oct 2026 22:56:52 +0000
Manifest next update: Mon 02 Nov 2026 22:56:52 +0000
Files and hashes: 1: yTQ499zhrbP_4OWIU2-que__79c.crl (hash: gFgRxN6gs7L8VQz6wK/PDUxUmyfKhok7Rj+Wm/Xb6X8=)
2: 6D98D7C21C6411F1B68A335785EE528E.roa (hash: p7GvvvhnBiIlq2AFY9FalMi/aIDVDUbfZqCsTS3w2ms=)
3: 6C0CA7EE1C6411F1B68A335785EE528E.roa (hash: U+LavfCdJdFhu3KM3IjuquJhxlvTznrSauq2yP2RdA8=)
4: 6B7B69D21C6411F1B68A335785EE528E.roa (hash: t3WJZ+TqxO9rAjYRJ0g09t3brgTmkG4d6oU027EJ4NU=)
5: 6C8E6D381C6411F1B68A335785EE528E.roa (hash: PHiN9WhM1Yjs+fJf4ch6Xa0wX5cn9N5EasUrbY9oPEs=)
6: 6D1560E01C6411F1B68A335785EE528E.roa (hash: BYU5FIyktvv26Nz2Rm1eQhqdMYLLaex730hzv42dZLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B2EC, serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Validity
Not Before: Oct 26 22:56:52 2026 GMT
Not After : Nov 2 22:56:52 2026 GMT
Subject: CN=6adfdab4-6e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:b3:86:d3:5b:1d:fe:63:53:1c:0f:31:4d:
b0:41:9a:3f:8d:e9:0a:38:69:2c:16:e1:05:eb:0b:
b6:6d:a5:68:c5:52:19:ec:27:a2:7b:17:b0:b7:5d:
30:98:15:66:15:0c:51:a4:6a:1a:71:fe:30:87:39:
55:de:54:28:38:c8:e8:ab:6a:45:19:30:b3:2b:36:
10:00:23:f6:37:17:78:34:d7:fa:f3:21:f6:c4:5c:
fd:4e:c4:3e:d7:2f:2f:e8:d7:0f:cb:58:94:bb:a3:
65:9f:b7:93:6d:3d:33:7e:46:2f:cb:32:45:41:1d:
f6:ff:fd:8f:5f:03:f6:6c:12:2c:8c:5e:9e:01:ed:
f1:0a:f6:fe:59:58:db:a8:b2:da:46:5d:3b:11:9e:
43:da:81:d1:d6:48:63:38:8c:be:cd:83:36:f8:77:
c3:db:18:ac:75:02:64:46:9d:68:cc:a5:98:b2:5c:
2e:64:2e:fa:ab:d4:a7:a9:37:81:12:a9:94:8f:a3:
45:ab:65:0b:bf:34:0d:76:e3:86:10:e6:a3:6b:8a:
4e:94:da:96:fd:7e:15:4c:93:b0:27:14:00:90:19:
66:bd:4b:d9:09:5f:55:59:d3:2b:40:0d:f1:f8:c1:
07:e2:76:44:69:ca:43:58:2d:dd:07:d4:30:fc:76:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:75:4C:3B:7B:02:15:30:01:69:8F:02:A9:1F:28:1E:4E:27:14:F0
X509v3 Authority Key Identifier:
keyid:C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:2f:b6:93:0a:e1:92:78:85:82:8a:ea:9d:56:e0:b0:0c:74:
c1:24:b4:66:b2:18:5e:49:de:c3:0b:02:1e:4f:a0:de:b4:05:
d0:b0:e5:11:16:a3:18:a1:e0:4f:84:f6:bf:21:49:29:96:80:
47:0f:56:4b:a2:a2:2a:73:6e:4e:43:d4:1e:d4:c0:3e:d7:cf:
53:f2:0e:0c:3d:e9:5e:25:8b:56:73:23:15:72:a2:9d:a0:d7:
e5:03:1e:13:cf:5c:28:ac:ef:2f:43:31:19:d3:77:c6:92:20:
10:f4:06:ad:16:56:b5:ae:ce:5a:10:0f:31:8a:2b:eb:30:0b:
69:dd:76:e1:41:4a:4e:37:31:0d:9b:09:bb:c6:a7:d3:08:39:
c7:87:90:2a:c7:b9:55:cf:3c:28:4c:6a:11:45:de:7d:8b:76:
e6:03:a1:d9:43:22:f2:f2:d1:91:db:69:4e:28:9b:ca:f4:0f:
72:f5:91:52:7c:ee:e8:f5:72:9e:1a:14:0b:89:46:91:49:53:
0c:94:36:f7:1a:e7:a2:7b:57:31:d1:99:65:14:7a:07:71:17:
61:7a:43:1c:eb:9c:3d:0b:7e:4a:75:45:db:f6:5a:bb:df:f3:
b2:79:84:d8:74:38:6e:c8:36:31:3d:e7:25:88:d3:fb:e8:49:
04:48:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:33:46 2026 by rpki-client