
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
File: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json)
Hash identifier: 8Ec04Df+o1OiqqyzNtl2cALN779ciNTeLAFd89m2Fj4=
Subject key identifier: 9F:C6:4E:09:71:F0:C9:E0:F1:69:0A:8D:36:B4:96:1D:F4:6B:B6:80
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Certificate issuer: /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
Manifest number: 8F
Signing time: Thu 03 Sep 2026 07:50:27 +0000
Manifest this update: Thu 03 Sep 2026 07:50:26 +0000
Manifest next update: Thu 10 Sep 2026 07:50:26 +0000
Files and hashes: 1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: Yloa4GWg93c7FcwM41gtxK7NQqfkVAIZ6wXWjUioP84=)
2: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=)
3: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: 77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Validity
Not Before: Sep 3 07:50:26 2026 GMT
Not After : Sep 10 07:50:26 2026 GMT
Subject: CN=6a9926c3-0b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:aa:ed:d9:eb:98:af:1e:25:e1:c2:b8:5f:
a1:9f:2a:0f:2c:53:ce:bf:6d:11:f5:ad:32:b9:5d:
0b:e2:87:13:a9:78:ec:38:e4:04:10:ca:32:d4:83:
bc:90:9e:8e:59:b2:cf:1d:e8:2c:65:24:0f:93:b5:
9a:32:93:23:b5:b5:27:c1:43:e5:9c:fb:b3:84:25:
24:69:71:f7:24:f8:88:a9:cf:63:e4:6d:32:77:51:
fa:3e:38:e6:84:ee:f8:67:ad:94:3c:2a:74:f9:d7:
70:cf:9c:36:fa:28:dd:d0:5f:ef:01:0f:09:04:fd:
c1:cf:6a:35:64:2f:62:80:b9:eb:6d:97:4b:ed:3d:
ec:c1:df:63:80:3c:7c:9a:71:71:80:d8:84:a0:e2:
92:7f:03:e0:84:c3:36:f8:af:67:b1:76:ca:73:df:
ac:e7:d3:19:eb:fd:32:fd:c1:96:7e:b7:a9:02:94:
2d:40:cb:4d:d0:6c:ac:4d:20:69:7b:84:a4:77:28:
0e:79:e3:0d:55:a5:42:db:98:f5:ec:ca:5e:87:af:
67:ad:55:cf:c1:db:4d:f0:00:1e:df:d6:26:88:73:
3e:1f:5a:2c:af:13:99:85:9e:00:20:13:96:e1:4d:
26:6a:01:47:27:cf:8f:82:55:56:ef:aa:cb:97:ec:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:4E:09:71:F0:C9:E0:F1:69:0A:8D:36:B4:96:1D:F4:6B:B6:80
X509v3 Authority Key Identifier:
keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:22:cd:51:58:1e:a8:01:66:42:d4:c3:5f:ba:36:74:da:
59:74:60:12:4b:c1:08:b6:71:17:3e:bf:48:c3:52:d1:00:6f:
03:cb:34:ac:96:64:59:7c:11:8b:2f:d4:9f:a9:5d:2c:27:b4:
1e:28:a4:c2:96:bd:af:1f:56:3c:3d:bb:9a:ee:b9:0f:1d:26:
ff:21:51:87:dc:2c:d9:fb:6b:7b:e1:0f:27:86:54:0a:3b:c0:
72:f3:95:32:70:88:bd:e9:da:89:45:2a:6e:eb:cb:3e:35:f8:
3b:c2:da:e1:29:ac:39:30:de:07:c2:aa:f6:67:f9:89:f0:ef:
0d:e5:dc:69:e4:c2:4d:ec:41:80:5f:55:4e:43:d7:ed:f6:09:
d0:6e:c8:a6:b1:ef:d6:1f:a1:89:b6:f5:5b:60:7d:74:5f:32:
70:46:e0:be:b9:34:aa:c6:e8:72:b7:e5:a9:a4:24:4e:78:8c:
da:1d:71:94:2a:4c:8d:fe:33:da:80:b9:6a:fe:3a:08:73:b0:
7e:20:10:54:2b:b6:26:f1:10:8f:c2:8b:ec:d6:fa:cc:44:9a:
3c:1c:80:62:a4:7e:ed:e3:db:12:6a:03:9c:57:f5:f1:15:ec:
40:da:e3:98:15:be:9e:6f:12:fe:79:e7:d6:18:90:2b:bf:42:
4d:1c:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:40 2026 by rpki-client