
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json)
Hash identifier: 7aUwSno3PhLK17cpp5iAKuC5xDTVHIWI++aw0NK8ZgU=
Subject key identifier: 35:58:98:F4:AA:92:57:BC:82:69:6D:37:8B:77:19:8A:7C:34:4B:FF
Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
Manifest number: 01DD
Signing time: Wed 07 Oct 2026 04:08:31 +0000
Manifest this update: Wed 07 Oct 2026 04:08:30 +0000
Manifest next update: Wed 14 Oct 2026 04:08:30 +0000
Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: 0Y6HnKj0u6RlkieuGsL0+AgwEbRcjF8opwaiW7sVHPY=)
2: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nQQCvcP4Ab62KnLuqB+2dhOJymAwNDUrlbhEiMGFBCY=)
3: DAF8A746E01B11F097920A16646F56BC.roa (hash: ddW0Ynay18N2vbuqKbzQBFWoQChkJES43ys+thhHWto=)
4: 1B7430784BD411F1A6EB1F4394833773.roa (hash: oe2ZCXIQb92ROAH/nNeoR+2JzTpi9XU0AorFDG3Oc4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Validity
Not Before: Oct 7 04:08:30 2026 GMT
Not After : Oct 14 04:08:30 2026 GMT
Subject: CN=6ac5c5be-ec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:44:51:fa:d5:e7:61:84:a3:6e:16:15:b5:
61:0a:47:55:a4:72:06:43:95:c9:98:77:42:08:54:
57:f4:b1:c6:48:d9:c9:a1:22:bf:ab:4c:e7:cc:e3:
66:62:0a:00:44:02:20:ed:be:ac:5c:03:f9:b0:bd:
58:e9:75:9d:44:69:37:ef:93:25:14:20:3a:ff:34:
7a:d4:25:3f:e9:60:ff:b7:56:48:b5:b9:99:0f:99:
81:a7:07:24:16:00:b2:cf:30:b5:6e:b1:bb:23:8e:
13:e5:26:0b:52:66:23:13:46:b4:74:6f:a1:5f:b5:
59:ae:03:ec:94:6a:ae:55:69:a2:79:14:2b:3c:88:
07:92:45:c5:5f:2a:e4:2c:51:b9:bf:fb:1f:eb:47:
31:eb:32:7f:39:30:a6:ee:54:62:41:f7:07:cc:d5:
5f:7b:1b:32:c3:5b:22:77:09:36:87:9f:7b:40:e0:
43:ee:db:78:b8:c8:9a:20:a8:97:e5:c4:f6:b3:0c:
2c:3d:56:b8:e2:5f:f2:18:e6:91:11:38:f2:26:8f:
13:40:96:a0:68:06:cd:ca:c1:f9:62:86:81:88:9e:
45:26:af:fc:9e:7d:26:39:00:71:ca:b6:8d:e7:02:
82:a5:83:a6:5e:30:aa:29:ae:51:9a:f4:1a:3b:3e:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:58:98:F4:AA:92:57:BC:82:69:6D:37:8B:77:19:8A:7C:34:4B:FF
X509v3 Authority Key Identifier:
keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:95:d7:65:9e:d2:a6:bc:d8:9e:34:20:42:33:e5:bc:c2:1a:
62:79:19:2a:ae:78:f7:0e:fa:ac:c2:a8:dd:a3:b3:88:af:22:
51:18:55:fb:ed:ee:10:ae:7d:53:31:e8:d3:c3:ea:a0:68:b3:
44:c0:9a:55:b2:f3:7c:be:cb:ef:11:e6:c6:5b:48:55:eb:30:
72:d7:83:0d:bc:29:cb:11:9b:c5:b3:44:ee:ea:40:bf:2d:d7:
89:89:94:0f:d6:cc:3b:a5:e6:ee:e2:d7:4c:d9:72:10:bb:7d:
be:56:df:91:63:0c:a3:ca:5b:cc:e3:24:62:50:46:c0:c0:93:
ed:cf:0f:c0:11:db:f3:92:46:4b:e7:b9:ce:9b:5f:96:7b:31:
25:bd:24:f4:08:0c:9a:f2:53:8e:5e:d2:4c:63:bb:dc:bb:33:
b7:12:e3:c4:7f:76:47:7a:0e:2e:12:08:a5:46:2f:be:ac:4f:
16:91:44:8b:7c:f9:fe:5e:8e:31:13:ea:17:22:9f:c7:0e:76:
49:db:fa:87:35:96:d4:48:df:35:b1:ba:a7:71:fc:95:55:37:
78:af:b3:d7:1d:c5:a5:82:fc:96:cd:b9:85:3e:10:1f:e6:c4:
7c:83:2d:64:11:e8:28:6f:28:45:36:b8:66:f8:5f:f6:25:4e:
46:7e:1a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:53:59 2026 by rpki-client