
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json)
Hash identifier: AfOAPPAbxxDPXtXfRlFX0GQ2HzSjJHchr/oHPg8uU5g=
Subject key identifier: 82:25:DA:4D:E0:18:C1:D6:D1:B4:90:BC:F5:A6:9E:77:CA:68:A9:A3
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial: 06B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
Manifest number: 06AD
Signing time: Tue 06 Oct 2026 22:33:34 +0000
Manifest this update: Tue 06 Oct 2026 22:33:33 +0000
Manifest next update: Tue 13 Oct 2026 22:33:33 +0000
Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: 2x2tBoHzxP4WjgpPlPH1Q6rVGRDPaUQPh+BfGjhZoAw=)
2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: 4mnGG9mctkzjRMjeZiJm8EP2Ry3MqPxpfShzQMCXH5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717 (0x6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Validity
Not Before: Oct 6 22:33:33 2026 GMT
Not After : Oct 13 22:33:33 2026 GMT
Subject: CN=6ac5773e-910c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:f3:b2:26:63:e6:83:11:85:26:2c:7f:cd:
e7:45:fa:d3:96:74:47:68:20:13:87:0f:29:37:35:
05:a8:f9:74:f0:f6:98:8d:1b:10:2e:85:6f:55:44:
99:38:e9:32:cb:19:6d:46:02:7e:76:b0:d8:76:6e:
6f:cf:fe:c5:2d:ed:d2:a3:dd:e3:99:2d:be:78:6e:
03:bc:84:cd:f1:40:e1:ab:f9:ca:6b:af:b0:c2:68:
6d:19:e1:4e:d5:f5:9b:ae:6e:ac:71:50:38:e0:d2:
6a:c8:da:62:1b:d7:ab:75:62:45:56:4f:e3:91:7c:
92:3a:1a:00:0c:e6:c6:7e:ce:a0:bc:84:4a:ae:ef:
ad:31:3d:4d:30:d5:d6:5e:9f:f8:b1:0f:d6:7e:7f:
81:53:2e:ce:16:4e:f6:f4:26:fb:c6:ba:7a:aa:96:
c7:ad:3e:f1:b0:a2:a0:a4:95:b3:bf:d7:81:38:97:
3b:59:56:4b:eb:c3:15:da:6c:8d:45:35:6d:e4:f1:
cf:6e:b5:80:d7:63:c9:79:7a:45:d4:ca:ca:c3:b5:
ba:5f:b0:ee:e9:f8:38:98:ed:da:99:4b:7a:fd:50:
4d:5e:f6:4d:d9:ec:5d:e4:87:72:6d:b4:23:59:c2:
99:48:4e:a9:17:48:66:52:f8:94:7a:40:b2:92:df:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:DA:4D:E0:18:C1:D6:D1:B4:90:BC:F5:A6:9E:77:CA:68:A9:A3
X509v3 Authority Key Identifier:
keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:88:fe:9d:8b:2b:51:07:96:fc:ef:7e:45:11:1b:36:d3:29:
37:70:d7:64:6c:6d:08:40:5c:be:e8:75:55:5c:d7:37:aa:ec:
fc:24:9c:3c:e8:b2:e1:fd:df:e7:17:dc:a4:b8:59:61:9e:6b:
af:56:44:c1:f1:7d:7c:57:ab:2a:72:f9:a9:28:eb:91:80:43:
09:31:45:bd:17:8f:69:cd:dd:01:dd:f1:2a:2e:4f:25:54:d3:
c0:16:fc:38:0d:3a:a5:e8:ad:c5:cc:9e:3b:20:da:c0:a6:38:
80:d5:46:da:ed:08:ba:54:21:9a:ef:76:03:4a:df:1f:42:01:
1b:2c:8a:50:1f:3d:0d:6b:9d:0f:a4:27:c9:80:23:69:99:8f:
f6:d7:68:b8:30:56:63:6b:9e:47:cd:f8:84:88:00:b2:6d:56:
5b:35:0a:83:f1:d2:fe:19:bd:30:d9:c5:64:b3:cb:ef:00:ec:
c1:d1:64:68:f4:53:50:60:cf:0a:e3:a4:42:ab:74:fd:be:d8:
6b:12:68:4d:5a:25:bf:75:3d:e5:a7:59:7a:b0:81:de:84:81:
be:91:33:ea:ef:59:87:9f:d6:96:ec:18:dc:a4:a1:50:7e:2a:
65:41:3b:64:4c:64:6f:73:fd:17:e4:05:9f:28:43:14:59:7c:
7f:b3:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:11:33 2026 by rpki-client