
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File: Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier: TZvm2kBla+9B1ssTs6VgpZfdjITLqMUirb1EKIIYwn0=
Subject key identifier: 0F:19:5F:5C:F0:2A:0A:BC:D6:64:14:A4:3F:C8:83:4A:DD:D8:E1:5E
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer: /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number: 02A0
Signing time: Fri 11 Sep 2026 01:41:31 +0000
Manifest this update: Fri 11 Sep 2026 01:41:31 +0000
Manifest next update: Fri 18 Sep 2026 01:41:31 +0000
Files and hashes: 1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: kTVwkNxsLWpWtF4xze3Q1VoIWxO2BpE4YXKWNNLv6C8=)
2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: IMnX87QNvHpbvo82n1RR69kUclsVgTYA0yTOvxNI1Gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Validity
Not Before: Sep 11 01:41:31 2026 GMT
Not After : Sep 18 01:41:31 2026 GMT
Subject: CN=6aa35c4b-2192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:c2:5c:40:d5:d2:a0:b7:ac:5d:f2:4b:9a:
c8:ca:2b:63:62:8a:ec:b3:bc:6c:7e:ff:6f:e9:97:
65:e1:dd:f3:3d:53:1b:aa:3e:45:3f:e8:86:f3:4d:
d6:9d:19:ff:e2:58:ad:b9:78:68:5b:bd:27:37:0a:
d9:4e:83:0a:24:90:c1:a1:b4:fe:b9:7e:f5:9f:61:
4e:92:eb:41:f0:3b:e8:51:8d:bc:8a:9f:d6:22:1b:
97:75:3e:8e:89:65:19:51:99:01:ef:d1:8f:23:de:
c4:3b:65:b8:f0:ad:85:be:a1:d1:a8:fd:d5:07:22:
da:af:1b:79:ee:cc:29:eb:ca:98:ed:27:d5:76:2d:
5e:7a:e4:34:c1:c1:0a:f8:26:ba:9b:24:68:d5:8c:
6f:4a:71:92:48:55:60:23:bd:4b:36:0e:6f:29:e9:
5d:ec:2c:aa:bb:4e:63:f2:e5:6f:93:b6:42:3d:20:
a8:03:51:ba:8e:b4:a7:65:b3:e5:6d:a9:e5:d8:8d:
6b:d0:10:0a:22:a3:61:14:63:96:f7:66:a8:91:46:
f1:59:3f:d2:a5:6a:a6:6d:78:f6:e4:54:17:a5:36:
7a:98:c5:4a:ee:95:17:92:8f:f3:ee:8f:64:d6:0f:
46:af:0f:3b:c8:56:d5:1a:ac:07:91:ed:19:3e:1d:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:5F:5C:F0:2A:0A:BC:D6:64:14:A4:3F:C8:83:4A:DD:D8:E1:5E
X509v3 Authority Key Identifier:
keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:c0:ee:fd:a4:72:83:e9:bc:58:5f:61:bb:93:cf:6e:b7:6c:
8f:cb:14:7a:b6:10:d1:62:bb:ef:8b:95:f8:36:e7:c5:95:05:
ce:51:87:e9:72:69:38:1b:8f:b8:89:9b:78:d3:0a:45:b2:77:
32:50:c2:75:79:75:f4:4b:ac:ed:52:1f:17:6c:54:9c:b2:c5:
ac:0e:34:bf:34:e3:79:2e:93:3f:77:ce:d4:f6:2b:70:6c:09:
e7:b5:d4:2e:40:75:f7:48:1c:25:36:46:fa:d2:0e:b9:5d:ab:
a6:d8:11:58:b8:40:19:c3:56:5d:b9:88:40:37:a7:1e:33:29:
72:da:6e:82:85:8c:9d:5a:54:b6:58:cc:5a:04:1c:04:11:c8:
86:0b:87:9a:fd:91:4b:11:3b:f6:d9:8d:92:e7:22:ba:25:8c:
49:56:54:60:35:2c:62:b5:60:e6:24:b2:db:8f:00:67:e2:9a:
ab:ef:0d:c3:14:c1:85:2c:23:03:ff:0a:b1:72:39:4d:71:28:
3f:28:bf:3a:62:17:7c:bc:ce:64:56:e8:9d:9b:14:db:5f:50:
6b:3a:c3:db:7b:0e:6d:4c:7a:fe:70:d9:a2:ff:d5:41:f8:58:
c6:26:6c:c2:6c:bb:39:6f:25:ea:bf:c4:ab:a1:3f:cd:e9:02:
ca:c3:7e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:16:06 2026 by rpki-client