
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File: 0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier: Ln85qwVfrh1wbkZRR6LkngMsPE66oOl323izwtHc9jU=
Subject key identifier: 88:C8:E3:FF:B8:42:34:BA:1F:B6:68:DA:E8:E1:96:22:23:E4:F5:4A
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer: /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial: 34D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number: 34C5
Signing time: Fri 02 Oct 2026 15:22:33 +0000
Manifest this update: Fri 02 Oct 2026 15:22:33 +0000
Manifest next update: Fri 09 Oct 2026 15:22:33 +0000
Files and hashes: 1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: kxs0y7J/k73nce/TIYk3aeDZG7NS68cvD0qWaJmTLfE=)
2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ej83i8NuEYKasou7W/9D745hYaGsqd2oMKEiRlHzF4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13527 (0x34d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Validity
Not Before: Oct 2 15:22:33 2026 GMT
Not After : Oct 9 15:22:33 2026 GMT
Subject: CN=6abfcc39-c28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:89:7a:28:bf:52:78:a4:00:21:52:2f:fa:
62:45:59:b3:1f:99:d9:56:a9:fc:c6:72:7d:49:f1:
16:db:33:f4:47:f9:3d:75:4f:a2:c1:b5:1d:c1:f6:
7e:cc:7b:90:35:23:b5:df:a0:16:1e:b9:02:b9:ad:
c4:f2:58:7a:b7:3b:04:02:7f:09:3a:f2:7d:9f:98:
45:72:13:b9:be:c3:a5:83:a8:f0:ab:94:1d:be:07:
a5:af:1a:bf:8d:cf:50:8a:0b:2a:a7:ad:1e:1c:bc:
d5:8c:4c:f0:b7:aa:38:cf:fa:5c:f0:f5:8d:11:a8:
5f:c5:a2:27:78:96:59:19:25:1e:a5:17:2e:1a:a1:
f8:84:90:cc:0d:20:b6:06:89:bd:fb:2c:98:a9:41:
85:2a:06:ad:19:4b:50:5c:bf:34:5f:66:c0:7c:7b:
91:42:10:70:b0:6d:c5:ab:74:06:4e:84:b1:a4:b6:
fb:e4:c0:25:e2:e0:92:a6:6e:78:36:e4:0d:c8:59:
22:36:7b:42:71:35:4d:6c:0a:46:95:de:09:0b:88:
1e:13:18:90:58:6a:21:bd:16:9c:57:c4:9f:d2:34:
fc:30:84:97:df:4d:e4:20:6c:30:e3:2a:04:bc:ae:
76:a0:3b:ab:b6:ab:75:25:e6:c3:97:18:bb:bd:35:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C8:E3:FF:B8:42:34:BA:1F:B6:68:DA:E8:E1:96:22:23:E4:F5:4A
X509v3 Authority Key Identifier:
keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:15:41:eb:23:a6:b6:30:72:c5:e0:34:20:fe:68:c8:ca:
cd:12:cd:79:7c:b5:ba:02:f6:d4:4e:36:62:dc:3c:01:9d:29:
92:04:dd:6f:f4:0a:b7:fd:ac:f7:00:e8:b0:27:a8:e2:c6:db:
8d:32:0d:5e:4c:21:4e:01:f2:b1:a9:37:24:d7:5b:66:65:ab:
84:78:07:18:3c:36:15:eb:4f:39:95:e9:e7:1f:47:3f:2e:45:
ea:74:ab:d2:62:82:d7:c2:76:cb:53:02:0c:7f:ad:27:f0:84:
a9:83:c2:5b:f8:18:2a:cc:cb:3a:73:cc:39:7e:6b:b1:91:ac:
c5:51:5f:02:33:44:6f:ca:97:d0:42:df:8b:4f:b2:f1:80:1f:
1f:7f:b1:e3:ac:b9:1c:d1:85:8f:e8:8b:11:09:48:55:95:56:
d6:9a:e2:61:ee:e0:94:5c:e9:9d:91:db:fa:6d:34:8d:5e:e7:
ca:f3:7c:d2:9d:23:e6:6f:03:47:4c:2e:57:4b:b5:bc:93:51:
77:2e:1c:58:a3:b6:83:e1:9c:13:36:68:2c:2a:8e:ee:ad:36:
ec:fa:39:57:49:95:a0:9d:ae:e9:58:3a:e2:bb:97:0e:3b:e8:
ab:dd:c2:96:6a:b5:22:44:10:1c:cc:5c:35:a1:65:98:30:e4:
26:d9:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:46:59 2026 by rpki-client