
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/YVr7dR4ygSlyF3cyhc5g5iYw9vY.mft
File: YVr7dR4ygSlyF3cyhc5g5iYw9vY.mft (raw, json)
Hash identifier: yJR6RBdq+QjQkF1sjEt/WasiE0Uod5R/IWBljv/HXwM=
Subject key identifier: FF:4A:EE:C9:BE:C2:91:1D:2B:7A:18:59:0B:03:34:AC:EC:AE:A5:9D
Authority key identifier: 61:5A:FB:75:1E:32:81:29:72:17:77:32:85:CE:60:E6:26:30:F6:F6
Certificate issuer: /CN=A91B1018/serialNumber=615AFB751E3281297217773285CE60E62630F6F6
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YVr7dR4ygSlyF3cyhc5g5iYw9vY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/YVr7dR4ygSlyF3cyhc5g5iYw9vY.mft
Manifest number: 04
Signing time: Mon 31 Aug 2026 23:49:42 +0000
Manifest this update: Mon 31 Aug 2026 23:49:42 +0000
Manifest next update: Mon 07 Sep 2026 23:49:42 +0000
Files and hashes: 1: YVr7dR4ygSlyF3cyhc5g5iYw9vY.crl (hash: HGBu1wMi8/j/pD/QB/vZGPYd//YKZpHe+OfN57fk4Ew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/YVr7dR4ygSlyF3cyhc5g5iYw9vY.crl
rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/YVr7dR4ygSlyF3cyhc5g5iYw9vY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YVr7dR4ygSlyF3cyhc5g5iYw9vY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1018, serialNumber=615AFB751E3281297217773285CE60E62630F6F6
Validity
Not Before: Aug 31 23:49:42 2026 GMT
Not After : Sep 7 23:49:42 2026 GMT
Subject: CN=6a961316-36a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:10:6d:57:6f:49:97:cc:39:99:fb:15:39:d5:
ee:97:a2:f6:4b:24:24:ca:49:63:b6:c2:70:75:1f:
4a:97:12:b2:22:b0:93:41:2f:18:3f:cd:32:c5:c5:
c0:4f:36:9b:d7:80:ec:0c:92:cd:b8:14:01:6e:49:
b1:f0:c7:28:59:c7:de:8c:0e:0d:3e:8d:f0:16:fe:
0e:eb:83:9f:d1:6c:dd:f3:52:49:21:8d:8d:2a:ea:
9f:a8:c4:ae:f3:b6:e9:c2:85:20:ce:ad:d7:23:93:
1c:e8:9e:64:88:e5:cf:16:f0:2b:12:fa:61:90:07:
69:af:46:73:00:95:ca:36:8d:e5:a1:39:40:27:a4:
18:dd:25:a0:0e:dd:c5:f2:2a:fc:91:ca:d2:e9:75:
1e:b0:a0:45:e5:a9:09:01:bc:04:7e:15:67:bc:cb:
39:e0:e3:36:2a:03:96:55:17:1c:62:a2:b1:0c:56:
8e:b1:0b:c1:1b:42:7a:f1:be:ec:6a:cd:15:43:9e:
3b:4f:b2:14:dd:cd:43:69:d8:75:66:d6:f7:59:4a:
0f:df:7c:6d:7b:43:6f:78:b4:1d:a5:8e:58:b7:9d:
2c:81:a6:c1:20:f2:98:03:89:fc:fb:cc:f4:76:b2:
53:f5:05:23:a2:ae:ab:07:a6:4a:83:74:c8:36:b0:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4A:EE:C9:BE:C2:91:1D:2B:7A:18:59:0B:03:34:AC:EC:AE:A5:9D
X509v3 Authority Key Identifier:
keyid:61:5A:FB:75:1E:32:81:29:72:17:77:32:85:CE:60:E6:26:30:F6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/YVr7dR4ygSlyF3cyhc5g5iYw9vY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YVr7dR4ygSlyF3cyhc5g5iYw9vY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/YVr7dR4ygSlyF3cyhc5g5iYw9vY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a4:55:4e:90:67:7f:00:af:1c:64:c3:09:9f:ae:c7:1a:d8:
8f:dd:6c:cf:d7:35:af:75:85:8a:fd:9b:35:b5:68:33:f0:6a:
4c:f5:e8:8f:7c:db:d6:2e:95:30:f8:5a:de:79:16:74:25:0d:
cd:12:33:2c:bf:a4:c9:13:d8:ba:40:70:f4:2d:c0:b4:32:c3:
03:91:01:62:82:7b:90:5b:db:1a:f3:c7:65:ee:cc:39:11:8d:
18:e8:c6:5a:28:7b:d7:fc:8f:43:f6:20:44:2a:a5:9e:64:17:
57:e8:63:fb:48:1f:30:fe:f1:64:52:3f:2a:d9:cb:3b:1a:61:
e5:ef:b5:c9:27:20:75:41:59:58:01:9a:97:e3:7f:23:15:bd:
6c:c1:13:e4:37:ee:25:34:c5:12:11:7a:11:a8:58:06:e6:63:
48:70:28:b8:6d:91:25:2c:91:23:dc:00:2c:38:03:1a:5e:71:
ff:02:5c:7a:d0:c5:6d:99:83:0d:3b:99:5d:cb:9d:5f:78:dc:
05:ab:c4:e4:3a:2f:d9:ba:ff:02:fc:7e:0e:41:91:b7:c0:b9:
5c:52:f3:60:6d:3d:f7:88:12:39:eb:9f:12:93:d9:4c:b2:80:
05:f0:be:63:21:72:68:69:3c:7f:4e:3c:1b:83:9b:75:84:c3:
d3:8e:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:30:06 2026 by rpki-client