
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json)
Hash identifier: FGCuhGeqeWc671ltEdx4/S7ttPQyaUrkSZqrLTt8lP0=
Subject key identifier: 51:91:29:7E:8C:3E:CB:FD:85:36:9A:36:46:60:C8:64:F6:01:22:74
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial: 3297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
Manifest number: 326C
Signing time: Sat 24 Oct 2026 15:23:12 +0000
Manifest this update: Sat 24 Oct 2026 15:23:11 +0000
Manifest next update: Sat 31 Oct 2026 15:23:11 +0000
Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: jlDTVecwtSuI5AhgDAGTZQQTu2SOFQngP/zGcxzl+6Q=)
2: 858F2428399511F18707CD8AA2833773.roa (hash: cUr0clqCyCkiUIq/VycqLhOHK0HYu8G+EZ7N59Y9lRQ=)
3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: MdDzMLI4SVTxhDtydILyjc8VZa9vktRLqWXwp+LVEtE=)
4: 8952805A8D7811F1A80E34DA3311F970.roa (hash: jjgBEIUdIis7R6NqXuQTMTwt421DRMenCtuYpNqdCJA=)
5: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: l4FF/86A72/pQWVDtqFOaJrDc/AFvwdU+PSOUvI8AEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 15:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12951 (0x3297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Validity
Not Before: Oct 24 15:23:11 2026 GMT
Not After : Oct 31 15:23:11 2026 GMT
Subject: CN=6adccd60-a35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:63:02:b3:59:98:13:77:60:14:77:17:9e:
ee:ac:e6:67:9f:94:7c:57:2e:98:75:a8:db:55:48:
b3:c3:dd:83:6f:3c:d4:ba:2b:aa:1b:e7:38:ce:ba:
0d:7a:a2:a4:c6:53:fe:a2:b1:24:59:82:1a:94:54:
4c:43:cd:4f:a2:29:88:b7:95:a7:fe:1d:be:b9:c0:
f5:0e:fe:69:b1:53:1c:88:c6:b9:eb:ea:a5:72:ba:
2a:fd:08:86:02:69:f0:6d:cd:8a:e2:fb:23:fc:24:
b9:78:da:9f:62:fd:e4:bc:5d:5a:79:70:45:db:07:
d2:58:db:52:b5:c5:81:51:0f:75:2f:3d:30:6a:13:
26:e1:96:f1:f3:79:fb:c6:5f:bb:25:93:b3:40:54:
f9:7c:0d:5c:8a:d7:c8:9c:a1:e9:9f:da:e9:6c:1f:
b1:0e:6b:b3:8e:14:d0:c6:67:8a:5f:68:f2:48:bf:
ea:f6:d9:fb:b4:04:8e:e0:50:25:75:e8:9b:00:12:
91:1d:77:af:0b:b1:e2:42:23:2a:9f:c6:fa:78:e2:
ba:60:70:e2:0f:fb:3f:32:4f:a0:d3:83:cb:1f:7a:
59:8f:74:65:c3:ca:23:2d:de:94:2d:bb:df:f3:dd:
d1:e7:a8:ce:a2:cf:29:bf:7f:f2:50:d3:93:de:f0:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:29:7E:8C:3E:CB:FD:85:36:9A:36:46:60:C8:64:F6:01:22:74
X509v3 Authority Key Identifier:
keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6f:d8:66:62:9f:7d:eb:aa:4c:27:9a:61:ed:9b:64:9e:90:
b5:bc:5f:ef:e9:16:94:51:26:57:d7:e2:16:d9:9c:a3:2f:5e:
62:f1:2a:5c:85:f9:59:a1:eb:7c:86:b8:75:99:2b:06:fa:77:
17:18:d5:f5:c0:13:ce:7b:dd:c1:c3:da:ee:02:73:d8:cc:c6:
40:4a:75:00:a6:ac:d6:b5:3b:43:d3:aa:ee:15:13:5d:51:d7:
1c:96:37:2f:70:a4:79:ed:fb:8f:f2:fd:b6:97:84:4d:1c:a6:
2c:7f:b7:92:64:cf:99:07:27:f7:e2:01:66:e3:82:1a:3f:53:
af:2d:96:3b:9b:71:2b:f5:68:ff:43:db:85:52:e4:70:e1:96:
47:2f:7f:1f:5a:f4:59:19:37:0c:53:3e:9c:5c:71:3f:13:f3:
22:ad:b8:c4:f9:12:46:74:71:04:fb:18:95:94:3f:b2:fc:54:
f7:bc:d3:55:a5:b3:f6:95:1f:d9:07:20:26:3d:4a:29:38:4f:
fa:5a:de:31:2f:2c:26:32:50:6c:ee:13:98:eb:78:ec:72:94:
75:e2:44:22:b5:f3:99:28:a8:e0:a8:9b:13:74:13:4c:e0:07:
0f:e5:27:b5:fe:8e:9e:bb:e3:7a:5e:94:66:12:ba:2a:72:aa:
ca:68:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:49:26 2026 by rpki-client