
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier: ZcdZUxOdKunR0F//l7iixpbKv93tMtiVdVVWmeYe36A=
Subject key identifier: AE:FA:11:F1:80:56:9E:8E:91:14:10:56:AE:1D:EA:7D:2F:18:12:04
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial: 0EB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number: 0E99
Signing time: Tue 20 Oct 2026 17:46:25 +0000
Manifest this update: Tue 20 Oct 2026 17:46:24 +0000
Manifest next update: Tue 27 Oct 2026 17:46:24 +0000
Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: dWv5a5GvY2ykiR2Okg1VlJb++kZ6hBt1EmKFlztSjK8=)
2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: nRexK0UA55I5+x5R0A2TMhaYmEDiazdKkjOfJ9kGLwQ=)
3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: J82yfuC+4aLDmhGWjyr0F1wn0ktPZ4aMMMR1qjOd0j4=)
4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: 79PmiP9NpDAtWC6dqYWk56B1VkuYlkflhPnSmUa7hdQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 17:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3767 (0xeb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Validity
Not Before: Oct 20 17:46:24 2026 GMT
Not After : Oct 27 17:46:24 2026 GMT
Subject: CN=6ad7a8f1-020c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:d7:96:bf:6b:48:22:2f:1f:57:21:55:dc:
4b:16:6a:ae:4d:03:15:c8:f7:e3:c3:e9:07:2b:d8:
b5:de:d6:e1:4d:c6:2c:84:49:59:58:09:b2:26:cc:
25:79:3a:6e:6e:1f:0a:a4:50:64:94:f2:23:28:40:
24:6e:c3:77:9d:b9:c7:47:90:51:e1:f5:0c:b7:84:
7a:50:7e:3c:2b:d1:0f:b3:08:41:58:eb:29:14:d5:
7f:26:b7:f0:9b:90:d9:cc:2b:59:95:4f:6b:08:e0:
a2:34:12:e1:3b:3b:87:37:d5:ce:3d:5d:c7:7f:83:
ef:b1:9f:5d:0a:b0:ba:4f:4d:74:20:95:af:c2:d3:
44:4b:84:18:60:11:44:f3:ea:99:1e:77:dd:c4:5b:
f2:73:58:97:35:ea:88:b2:50:26:50:32:3d:7b:4f:
5d:da:5b:f4:20:86:59:9c:1c:d2:03:13:4b:ca:9b:
03:81:2c:13:7f:15:40:87:bb:e7:6c:cf:9b:7e:61:
cf:1d:4d:ac:65:70:69:54:ce:84:a6:40:26:5b:0f:
00:99:90:fb:d6:a9:97:db:1e:d8:f1:94:b0:d7:ed:
3b:4e:7f:5f:c7:99:3d:38:d6:1f:7b:08:0c:2a:c2:
5e:de:1b:c0:13:ad:e4:40:bc:08:0b:2f:72:f4:a1:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FA:11:F1:80:56:9E:8E:91:14:10:56:AE:1D:EA:7D:2F:18:12:04
X509v3 Authority Key Identifier:
keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:81:d8:21:16:84:1b:ac:67:c2:93:84:08:70:1b:54:23:31:
63:0d:d0:89:c4:08:d5:a4:b9:62:1c:7c:f8:bd:17:37:76:eb:
32:0e:bb:91:f7:26:bb:2c:56:40:f6:ca:58:e3:c2:3b:87:04:
56:f2:bd:12:07:28:0c:cd:7c:fa:01:fe:d0:d9:b4:c5:a2:3a:
bc:f8:38:27:f8:e2:eb:90:b3:70:06:c1:46:2e:f7:68:4b:62:
ce:48:f6:0a:3b:d5:03:ce:ec:cc:fa:27:cf:58:2f:99:1f:db:
32:cd:87:76:11:57:bc:fe:a2:13:fb:9c:ce:20:0e:42:d1:4b:
07:97:a0:22:03:1e:6e:4f:ce:6a:9a:f0:a3:6b:b9:d2:c6:2f:
67:14:d6:36:e7:6e:b3:30:26:d3:c1:44:4e:a8:d2:ab:bb:4f:
f5:4b:13:97:0a:a2:0c:2e:74:ac:07:ff:ea:28:6d:70:d7:e1:
70:9f:d7:85:17:23:96:64:e1:97:0d:62:2a:90:f6:71:1d:5a:
1a:0f:4d:ef:47:f3:40:e4:56:51:d0:e5:a4:b4:06:89:1b:ad:
29:b2:ef:1b:20:c7:c1:c8:74:97:0a:b7:4f:b6:b0:77:e1:3b:
8d:f2:1b:71:a8:28:05:29:ed:32:72:fa:3d:6e:27:e1:35:51:
d7:ff:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:15:06 2026 by rpki-client