
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File: Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier: di1MahMsdbb4WL6JWPVUwSbUHATao8wMl1N6YSqta7g=
Subject key identifier: F9:5B:0C:76:22:0B:16:9B:85:EA:62:00:EE:63:1F:C5:34:7D:5B:68
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer: /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial: 02C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number: 02B9
Signing time: Sat 31 Oct 2026 01:46:38 +0000
Manifest this update: Sat 31 Oct 2026 01:46:38 +0000
Manifest next update: Sat 07 Nov 2026 01:46:38 +0000
Files and hashes: 1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: GDy94QyPSPa2YWiY4lW7KqESeEOJLoreY6VeNYyXagA=)
2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: IMnX87QNvHpbvo82n1RR69kUclsVgTYA0yTOvxNI1Gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 01:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Validity
Not Before: Oct 31 01:46:38 2026 GMT
Not After : Nov 7 01:46:38 2026 GMT
Subject: CN=6ae5487e-df17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:16:66:03:dd:1e:be:b4:70:ed:c4:da:09:
fd:d7:57:d8:c9:39:01:cc:46:de:26:fb:c9:7a:70:
db:25:df:b9:47:f2:f2:ef:68:d3:37:8a:c2:f7:66:
56:d0:bc:42:7b:24:50:4c:ba:46:d7:4e:60:bf:ae:
7e:f5:e3:94:2b:2d:bf:25:32:7c:32:91:3b:21:01:
53:1b:e8:f0:5b:d5:54:b0:5a:4e:0b:1f:fb:23:0a:
75:07:c9:b0:69:84:f2:8e:74:aa:eb:66:a3:3a:5a:
43:1e:7c:0c:75:ca:96:d5:ed:88:27:04:71:28:99:
8c:e3:46:a5:95:5f:d4:f7:80:f5:65:ab:49:f3:ba:
b7:05:f1:a6:2a:21:b8:ca:f7:aa:fb:2f:e9:e8:a3:
e8:70:24:47:1a:da:ce:b4:98:1e:48:2f:0f:8d:df:
4b:3d:06:40:4b:69:e8:95:28:7e:0a:22:2e:d6:e2:
41:59:83:aa:0d:12:23:c5:2e:1b:26:9e:5d:11:58:
93:00:dd:dd:d8:02:1e:9d:7f:e3:33:55:27:13:af:
b1:f6:67:77:4b:b3:a5:60:f5:21:96:9c:29:75:b0:
b0:9f:44:f4:ed:8d:66:25:d0:8c:84:ac:d9:f9:c7:
8d:ab:38:ad:2e:b4:c2:54:59:c6:ea:1c:cf:4c:00:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:0C:76:22:0B:16:9B:85:EA:62:00:EE:63:1F:C5:34:7D:5B:68
X509v3 Authority Key Identifier:
keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7d:bd:7a:1a:01:9b:43:1d:54:e5:2b:dc:79:0d:b1:73:51:
79:a6:fc:00:03:97:07:83:1d:b0:4f:dc:24:d8:c1:fb:74:71:
50:93:55:7f:62:3d:8e:ce:d5:71:e7:e9:b1:9f:d8:84:07:7e:
77:bf:3e:bf:72:90:94:27:8b:33:c6:ee:98:1b:4c:98:36:b8:
e2:41:ea:48:01:62:a4:a3:fb:e0:41:7e:4e:d5:25:82:d4:9b:
ae:e6:f7:2e:63:e3:0d:2d:5f:7c:c2:93:d3:5d:16:b2:e5:8e:
3b:cd:a3:c2:d3:cc:13:4f:e7:17:e2:c2:fa:f3:17:41:fc:cf:
c1:70:d8:2d:08:47:aa:45:e0:b3:08:ce:4a:2a:cc:f2:d7:30:
84:7b:a3:70:8d:07:d5:85:7d:86:97:51:af:9d:d0:c3:21:4e:
66:d4:e2:c0:20:70:91:eb:64:68:54:cb:5e:cd:be:8c:05:26:
90:d7:80:09:ab:0e:18:9d:af:4d:63:fc:d4:d2:67:57:e9:3a:
cb:23:7c:22:94:c7:6b:d9:8d:01:be:e0:cf:cb:fc:54:d5:ee:
de:51:bf:34:33:5d:7b:4d:b7:76:79:e5:32:a3:e2:96:63:b7:
a9:0b:68:96:bf:04:99:d6:a7:34:9f:7f:be:3e:b7:8f:0e:d5:
44:04:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:41:24 2026 by rpki-client