
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier: U+n2PF+iahFzjyktWM+e29zxIVT/i64hec2ZCYNHBn0=
Subject key identifier: DE:E9:B7:F8:A4:38:7A:CF:5D:F0:69:23:69:ED:C1:76:59:EA:8D:6E
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 3645
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number: 35DF
Signing time: Sun 18 Oct 2026 15:18:29 +0000
Manifest this update: Sun 18 Oct 2026 15:18:29 +0000
Manifest next update: Sun 25 Oct 2026 15:18:29 +0000
Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: oDbBki2u4IKQ0guW2a80VecHzk5B31oUIkjDc9zDPW0=)
2: EA6E0AAC50D411F18B34A857BE833773.roa (hash: OEoll2QdrXXA0K9ht1DiuZRtdqA89xzzL49jYr5VTFI=)
3: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: CujlrPZRzwdLdoypUA6XG0sSyWx22QqMi3Wunv/TANU=)
4: 7BAC7A5621D411F199DF6C46233D8C67.roa (hash: /mDg6LUZzeHlaNJOXKegHskznJoBNs4nZJuthgsnsWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 15:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13893 (0x3645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Oct 18 15:18:29 2026 GMT
Not After : Oct 25 15:18:29 2026 GMT
Subject: CN=6ad4e345-c0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:ef:d6:f4:28:d8:7e:c8:16:32:f0:aa:19:
0f:8d:76:63:e4:97:06:ce:df:3f:1c:19:da:2e:5c:
b2:42:f4:19:d0:c7:b0:6a:fd:b3:75:0b:05:d4:f9:
a0:63:ba:2f:95:2a:5d:40:2e:01:38:8d:40:45:fa:
ef:e0:98:3a:43:f3:4a:31:b6:da:82:95:b8:32:1a:
99:43:36:85:47:e0:fe:6f:b8:ce:06:1b:74:cd:8c:
dd:aa:64:c0:3c:20:8e:21:91:b9:81:3e:3d:c3:9b:
76:79:8c:47:3e:4c:8d:62:04:dd:8e:0b:1e:75:af:
65:f2:6d:5a:92:1d:79:89:e7:31:23:9f:0f:36:ba:
1c:db:cd:bc:f5:6f:f7:f9:1b:ed:c8:e6:ae:6e:31:
81:6d:0b:84:18:ab:45:8d:38:93:df:10:86:f3:1a:
c5:35:64:d6:fb:4b:55:1d:21:14:2d:05:f0:fb:2b:
ee:12:30:21:5e:f9:b7:d2:c3:b6:2b:5a:54:80:04:
9b:21:60:71:b1:bb:7a:71:b1:78:9e:e5:af:ea:ed:
81:2d:0a:da:d4:4d:c3:a3:0b:55:47:a2:2e:b9:1e:
4a:83:45:e9:69:74:69:2f:54:ec:7a:ff:8d:be:55:
31:5f:74:da:cc:13:62:0c:53:a3:38:c3:4f:1c:c4:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E9:B7:F8:A4:38:7A:CF:5D:F0:69:23:69:ED:C1:76:59:EA:8D:6E
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:10:c1:03:9e:5e:cf:ff:22:7b:1f:9b:42:a1:59:00:de:2b:
03:8b:97:91:46:e9:09:03:89:03:fc:eb:a1:74:01:83:9e:49:
55:d4:41:b7:c3:5c:07:b9:2b:a7:d1:4e:02:9d:72:52:e9:97:
c1:75:ce:82:75:79:bd:8f:ed:60:17:14:f1:37:df:f4:a6:8b:
11:a6:fd:99:c6:22:3f:a3:e7:8d:23:ed:d2:96:ed:f2:78:57:
46:83:15:20:96:25:e0:33:23:98:ee:cf:37:b6:ed:74:ec:e2:
eb:c8:cb:96:4a:b2:48:4b:5f:d8:91:88:ad:5f:5c:df:46:c7:
88:ec:c7:84:3f:03:e1:1b:6d:73:3c:83:8f:e3:f3:b0:fe:9b:
6e:d6:74:f4:8e:bc:e3:cd:36:e5:55:35:61:bd:a1:fa:38:d7:
5a:c4:67:8c:20:b4:47:1c:34:7d:3a:a8:ee:17:2b:ed:fa:ba:
42:b9:74:2c:28:73:81:d4:c4:59:a5:bc:ff:78:dd:fb:3e:c3:
de:29:f6:fd:45:4a:1c:a7:a9:bd:2a:03:a7:79:3b:21:66:1f:
99:1c:c8:15:e7:23:f2:a8:55:18:43:63:c2:e7:eb:a2:7c:d5:
06:60:fa:2f:cd:42:d7:d1:e8:7a:01:20:52:90:77:05:0f:d1:
90:e3:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:53:42 2026 by rpki-client