
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
File: y70GgkBePlkg8UsDghSUjF410cM.mft (raw, json)
Hash identifier: kLF9pDvUemeftTxez889MQER069Oo7jo7szoLA+o3bA=
Subject key identifier: 19:33:9E:DE:81:BC:96:7F:4E:48:EC:E7:12:E2:13:47:3E:71:5E:DC
Authority key identifier: CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3
Certificate issuer: /CN=A916D4BE/serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
Manifest number: 0588
Signing time: Thu 08 Oct 2026 23:47:08 +0000
Manifest this update: Thu 08 Oct 2026 23:47:08 +0000
Manifest next update: Thu 15 Oct 2026 23:47:08 +0000
Files and hashes: 1: y70GgkBePlkg8UsDghSUjF410cM.crl (hash: sPksCwsdG5NOMcywttEshdnwnp5C8tMj9EfCHhMb3Ik=)
2: 6B6833B43D3211F180C94A7884EE528E.roa (hash: gzQgQxyi1t7zAFl1L1PXe5vPjsPRekeb+UDdZ8X5gRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl
rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D4BE, serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
Validity
Not Before: Oct 8 23:47:08 2026 GMT
Not After : Oct 15 23:47:08 2026 GMT
Subject: CN=6ac82b7c-afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:5d:9c:a4:5c:e2:62:f4:f4:11:2e:fb:43:
97:a8:ca:bf:65:3f:48:9a:0c:53:a2:9b:ec:11:1f:
b9:d3:06:94:d1:89:33:15:f2:21:30:25:37:b2:ea:
be:e2:d9:09:0c:87:ea:9a:2b:df:21:8f:6f:85:b6:
de:5c:b1:99:c9:fc:8b:8e:0a:f0:89:b4:24:03:4d:
34:a4:c0:00:af:e1:4a:04:9a:51:a2:07:ce:ad:81:
50:5f:2b:bc:d0:a2:04:3a:04:fa:5d:ea:f6:f2:e9:
b5:71:b3:4d:b4:81:20:8c:47:6d:46:a8:aa:25:ce:
73:c4:55:2e:83:41:c9:6c:d4:49:72:10:f2:48:a2:
b2:42:7c:7c:bc:04:cb:41:2f:61:4c:b6:cd:32:ae:
54:f2:e4:53:b1:ed:fa:2e:ff:d3:62:0d:72:0b:69:
03:e5:af:e5:73:f1:ef:98:49:15:e8:4f:0e:50:9e:
86:94:f8:e7:c5:f9:d2:1e:96:85:23:77:f8:42:eb:
ab:56:38:61:d4:3e:85:72:0f:5e:f8:b6:53:52:7f:
ba:4c:6c:4c:24:bf:78:1a:bb:8f:bc:74:cd:1c:fd:
c6:c5:fe:d0:d1:ac:24:ee:9b:f0:27:4d:e4:4c:f6:
18:96:3f:3b:f6:14:71:39:61:8e:57:d6:89:68:66:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:9E:DE:81:BC:96:7F:4E:48:EC:E7:12:E2:13:47:3E:71:5E:DC
X509v3 Authority Key Identifier:
keyid:CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:db:01:34:9a:0f:66:98:1c:46:28:19:7a:65:63:c1:bb:7e:
5c:06:aa:5a:a3:be:e2:42:ab:2c:b4:49:d0:3b:63:7b:0e:3a:
d6:a5:b2:fb:fd:a4:ee:1a:8e:7d:3c:61:63:33:74:2c:be:1e:
06:89:d8:1c:1c:37:67:61:4a:fe:6e:06:c0:f7:de:b0:88:90:
33:a3:4d:92:1d:7f:42:d7:dd:f5:94:6b:a2:aa:a3:77:c3:d9:
6d:a9:2a:c6:cc:d1:ba:62:fe:4b:42:47:07:7b:af:af:a9:91:
f8:a4:0e:f9:96:33:da:32:8c:7d:ab:b4:6b:0b:28:1f:94:f4:
5c:2b:ff:b0:3b:31:44:3b:de:c3:04:c6:a3:97:25:61:07:fe:
4c:14:03:e4:7c:ac:56:dc:75:e8:6a:ee:ca:40:28:e4:05:3b:
ad:d7:14:09:3f:c8:a0:5b:36:26:bd:91:91:79:86:a0:d6:14:
98:a6:e8:60:b9:d3:a9:4f:29:cf:63:5c:83:84:aa:f8:d3:bd:
41:d7:b2:ad:83:90:c9:af:47:3d:87:12:31:79:5c:49:50:46:
06:3e:65:f3:f0:13:1c:b6:e4:54:f2:99:b6:bc:20:f8:47:ff:
c6:60:52:54:d7:79:43:91:df:a4:fc:d8:ef:89:66:00:ae:48:
1b:01:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:40:15 2026 by rpki-client