
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json)
Hash identifier: w9/x+GJ6rHlr2SK8Pdd9TD+hjT0UTlDLl0jihoVP7n4=
Subject key identifier: 83:48:9E:DC:5E:60:2F:57:B9:68:81:60:52:3E:6B:D9:E0:DD:3B:5A
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
Manifest number: 7A
Signing time: Mon 26 Oct 2026 16:06:50 +0000
Manifest this update: Mon 26 Oct 2026 16:06:49 +0000
Manifest next update: Mon 02 Nov 2026 16:06:49 +0000
Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: RgGS/MADViPlNGJtIzsbZ5m97oXKey8Dab0MFpbX/Ko=)
2: D8375D30A69B11F1A29A77493411F970.roa (hash: Oq6EWPqn9hAjR/n1Fw9l1YNrmCrCY3C/1Z//Amm/UOA=)
3: E685F69A372D11F1A4767B088F833773.roa (hash: qIG7a6gdz6oI8FkLXCBwV639Fz6ChKdcrnk7T65shfM=)
4: 62A4D5365DE711F18D15F5F9BA833773.roa (hash: uMoIZpT3mVn5fR59fAlPiMybbcDA63m6Onzt5jjfoy8=)
5: AAEECC6A6E2D11F1A887915478A30FBC.roa (hash: KDmIL0UVKyRTr72nl0LWwKgCMUpqUwyvh8foGwA2BHY=)
6: 7DD523E4B5BF11F1A1B9E4684011F970.roa (hash: navXUxd42r8K849QLWHVk8UDG4xLM10KkyvQqrJsOcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Oct 26 16:06:49 2026 GMT
Not After : Nov 2 16:06:49 2026 GMT
Subject: CN=6adf7a9a-fe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:3e:9d:47:75:7e:a5:5a:71:1d:bb:98:8c:
da:79:cf:7c:3a:33:92:d7:e8:9e:27:cb:2e:b9:a2:
00:82:66:2b:fb:bb:5e:42:eb:82:2f:af:2c:c6:db:
e1:02:e1:02:77:05:3c:91:77:d4:83:24:37:1f:96:
c6:1b:87:4f:43:ba:e8:56:7b:d0:ef:9d:f2:0c:a8:
2d:87:b8:41:52:e6:6f:8d:06:a8:94:85:04:cf:07:
7d:8e:47:10:8d:e9:45:36:54:2d:a7:a0:d9:d7:c0:
22:15:0c:0e:d3:9a:b8:83:2e:ab:ab:98:b3:48:03:
5c:b4:70:8b:cb:bf:b5:0e:ff:ee:c0:33:bc:37:8b:
d1:30:d9:d4:52:c3:fc:f9:22:1f:65:a0:48:b0:52:
7f:bc:4e:cb:3b:39:4e:79:a4:10:29:7d:8f:46:d4:
a1:3c:42:13:42:00:64:b1:e6:b0:0f:97:7c:b2:a8:
4e:c9:3b:76:39:42:6b:fb:40:3f:25:f4:28:b6:01:
3b:bc:26:91:22:c8:01:41:a8:59:00:c1:e4:4f:3b:
ab:5d:03:be:82:ef:14:11:2d:12:ec:5e:e2:87:5d:
77:bf:78:45:ca:57:1b:20:35:ac:3f:ba:45:45:68:
63:fb:40:8a:2e:5e:bf:88:5c:fe:5a:2e:41:82:ba:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:9E:DC:5E:60:2F:57:B9:68:81:60:52:3E:6B:D9:E0:DD:3B:5A
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:14:bf:9b:fc:46:d3:18:93:eb:e5:56:5f:63:a4:74:38:eb:
58:2f:7c:75:ea:72:31:a6:3f:0d:69:48:d7:9d:6a:d2:9d:12:
8d:dd:88:b9:a2:48:1d:15:b7:1e:5e:fc:22:1d:87:87:c2:fc:
12:75:86:f9:f6:f3:c9:dc:96:de:8a:c6:3e:ea:59:9a:46:12:
e6:c4:ad:64:f1:00:18:ed:f6:8c:c9:28:a9:a2:34:7f:73:f4:
9e:63:46:d7:8a:b3:89:84:0c:ad:11:9a:3f:88:6d:b6:a2:da:
61:42:53:02:4c:e6:d7:84:d6:cd:13:83:b9:85:1d:61:ba:48:
a3:da:68:2c:fd:ba:23:93:ec:0e:0f:2d:57:45:13:9e:d8:3b:
03:62:e2:05:d6:27:a1:4a:c6:a5:40:89:a2:87:a9:bb:bf:7d:
81:6b:5f:be:57:5e:98:b5:2d:92:b4:4e:43:45:95:78:f9:ee:
cd:73:05:63:d4:06:6f:98:26:17:84:20:2a:cf:24:33:16:ee:
4e:49:b9:9e:15:bc:fb:47:5e:cd:71:13:cc:4b:30:4b:c4:ca:
5e:ac:a3:8a:15:5e:dc:84:66:5e:85:e9:f7:48:d1:94:6d:2d:
45:29:5f:56:d7:7f:eb:12:51:3c:47:8c:d9:da:fd:bd:53:9d:
94:c8:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:23:03 2026 by rpki-client