
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json)
Hash identifier: wZeAZwI77RocRx5PbksPlgysDJdI0O9ieKLOeK+jDqw=
Subject key identifier: DE:B1:E6:1D:36:4E:0C:8F:A9:9E:90:09:83:0C:3E:08:4C:C8:D5:63
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
Manifest number: 57
Signing time: Fri 04 Sep 2026 16:05:43 +0000
Manifest this update: Fri 04 Sep 2026 16:05:43 +0000
Manifest next update: Fri 11 Sep 2026 16:05:43 +0000
Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: HLiKG2m9HYFlvl81Rl95YgZcJHbbNJExocHJK9RyS/4=)
2: 62A4D5365DE711F18D15F5F9BA833773.roa (hash: Yl758J5gQQ4kaYtkddFzVioKhcg++8qC0CLb5+Q1zpU=)
3: E685F69A372D11F1A4767B088F833773.roa (hash: 8hw1Iwg4OTU9hSWI7uga1fiJVmoAcZ8LAn7WtUDu3uY=)
4: AAEECC6A6E2D11F1A887915478A30FBC.roa (hash: JY+2F4fpy8yZBneZcoqizCFFml/1qiEJ9kZd9Mylttk=)
5: D8375D30A69B11F1A29A77493411F970.roa (hash: lOlX9Lvr/uUrJ7LnrKqqn7C2gTnu/MU8GWVidO+ZiN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Sep 4 16:05:43 2026 GMT
Not After : Sep 11 16:05:43 2026 GMT
Subject: CN=6a9aec57-1273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:e8:a1:ab:f6:aa:c1:31:0b:6e:af:53:c8:
51:3c:6f:0a:a1:af:e7:e6:e3:7b:04:dd:ef:60:37:
4c:46:7e:44:18:3f:77:81:82:11:b7:45:6e:8e:b4:
8f:23:7a:df:6e:c3:74:9c:b2:7f:67:c3:8d:dd:3f:
3b:cb:24:6e:fe:38:e4:37:47:16:28:2f:26:56:69:
2d:93:0c:d7:6b:69:57:dc:46:88:5b:25:f1:a4:8c:
66:e8:2d:be:a9:91:0b:f4:b4:43:c6:3e:0a:cd:b3:
02:f3:c6:b7:18:82:d9:00:29:4b:c0:4e:86:b8:b1:
8b:2b:9d:48:48:d0:06:16:93:10:81:f1:14:ac:7f:
ee:33:2a:8f:3d:d8:3c:55:1e:18:e8:02:87:ff:5b:
0f:15:f7:a2:ad:f9:e5:9c:1a:b2:37:61:82:6e:c7:
24:b7:f4:ae:62:02:68:32:90:64:74:c5:01:1b:fc:
62:3f:96:f5:63:0d:5f:a5:89:65:67:3c:aa:d9:3b:
38:b0:d7:70:b7:ff:4e:92:c6:0a:cc:27:2b:c2:bc:
2f:69:a2:53:21:d3:18:19:45:e7:12:29:1b:e9:36:
13:3c:47:fe:83:91:a6:8d:d7:91:59:51:d3:86:f6:
d9:d2:6b:79:55:96:8e:7b:60:7e:24:8c:8c:a1:2d:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:E6:1D:36:4E:0C:8F:A9:9E:90:09:83:0C:3E:08:4C:C8:D5:63
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:e2:c5:dd:fc:0a:72:7e:09:ae:08:c5:9f:12:2b:38:92:89:
b0:76:a9:83:94:b1:e6:a6:04:dc:58:e6:94:d5:d4:93:db:8e:
e3:fe:a5:53:40:3c:74:17:7c:d9:e9:1b:29:bb:90:a5:79:1e:
31:0a:e4:c3:6a:49:71:d8:fc:ea:9c:31:8a:cc:2b:06:74:ad:
02:0a:ac:59:93:a4:e8:5c:19:96:9e:5c:c4:2f:10:ac:b9:02:
32:7a:cc:94:17:a0:4c:4f:77:f4:66:b3:0a:b0:fa:35:a4:39:
f0:cc:0c:f3:06:4f:60:27:e6:dd:a0:dd:95:85:b4:b2:80:31:
2f:f3:e3:86:31:55:3b:ab:51:41:cf:d1:e6:57:96:d5:50:56:
b5:0f:6d:f6:cc:d1:98:e6:a0:7c:33:4a:30:84:57:aa:38:51:
1d:fe:9f:14:e5:ab:13:6d:20:6d:bd:c3:90:c8:25:8d:15:c3:
24:f8:d6:a8:33:a0:a4:37:eb:cd:41:25:ce:d9:ef:aa:c1:5c:
e5:54:01:d4:04:97:27:3d:c1:90:4b:4c:75:2f:1d:fa:0b:03:
5c:f6:90:a9:d2:e3:f3:f1:86:96:e8:14:09:f5:5a:5e:7a:2c:
69:a2:32:67:2f:a0:5d:cb:13:d1:5b:11:cb:63:6e:d2:f5:bf:
ad:89:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:23:02 2026 by rpki-client