
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json)
Hash identifier: H1SKz0mOwW/sb0vlgmZxQHKY2FM4qXiKRi3X4px0gU8=
Subject key identifier: 53:CF:63:46:31:07:38:7A:61:82:DC:E3:D6:F3:DC:30:FD:CE:51:AC
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial: 270B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
Manifest number: 26F0
Signing time: Fri 04 Sep 2026 15:38:53 +0000
Manifest this update: Fri 04 Sep 2026 15:38:52 +0000
Manifest next update: Fri 11 Sep 2026 15:38:52 +0000
Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: CeDlmVo53ZUGNhxOV7lRiJxaVFKLoltvTchkJJdxXwY=)
2: FBD68828FCBF11F0A4D02CBC666F56BC.roa (hash: SxJM2aFKgBGF6I9rZ7S9/EziiSoyCz/xteiPP/MBsS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9995 (0x270b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Validity
Not Before: Sep 4 15:38:52 2026 GMT
Not After : Sep 11 15:38:52 2026 GMT
Subject: CN=6a9ae60d-830b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:09:e7:a8:04:df:ee:9b:ad:56:20:cc:2b:
6a:21:dc:cf:be:c4:cc:82:8c:02:b6:1d:32:c2:8c:
97:f8:90:50:03:2f:2e:9b:bd:06:9b:03:80:9b:89:
5a:f8:9b:e1:71:41:e7:7f:5e:e4:70:ce:99:e1:0c:
06:04:a6:b6:38:c8:04:c5:e1:73:2a:71:00:96:bb:
78:e7:83:f0:c3:aa:2e:44:f0:f2:82:2b:43:4c:e3:
a9:ae:5b:25:90:6f:15:c6:2b:92:61:51:d4:2b:2e:
a6:c5:2e:fe:7b:45:21:e9:2c:b7:c9:e2:55:9b:78:
c5:15:47:0c:15:90:e8:2f:f0:e1:b4:3c:07:ad:bc:
fb:f0:f4:e8:fb:d3:fe:af:d6:eb:fc:af:4c:49:3f:
f0:7e:ec:8d:4b:c2:aa:32:8f:9c:b2:66:05:31:86:
5b:c1:f2:f7:94:16:33:9b:a5:3b:0c:ce:c5:0b:bd:
ff:d5:7e:f1:87:51:9b:75:7e:21:10:33:56:cb:26:
03:0e:df:df:0a:29:16:4c:a4:ec:8e:4b:1d:92:23:
57:36:9c:30:97:82:fc:20:9a:c9:4a:b0:47:14:50:
6a:59:32:44:c1:98:05:6b:da:12:dd:12:6e:af:bd:
a7:a6:e6:a5:c7:f3:5d:52:7e:31:07:cb:8f:ab:64:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:63:46:31:07:38:7A:61:82:DC:E3:D6:F3:DC:30:FD:CE:51:AC
X509v3 Authority Key Identifier:
keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:aa:72:29:8a:9c:18:15:41:3a:08:9c:6c:cc:9a:25:93:42:
1c:15:36:2b:f1:2e:65:9e:8c:9a:6b:21:b9:8a:54:de:a5:3d:
87:56:46:8e:97:f1:a9:88:a1:41:98:f6:d4:c7:cd:c8:97:38:
49:a0:2a:20:50:39:be:69:38:ec:c3:ff:c3:e0:1c:ec:27:9b:
d4:e2:5c:46:d0:b3:6a:c5:91:f7:33:84:ff:e9:34:93:64:4c:
96:6b:a8:70:1a:33:70:5a:fd:cd:4f:c3:a4:a0:51:35:fa:fd:
e1:d8:d3:51:78:f6:b8:ab:2c:57:21:e7:05:3e:72:6b:6c:c1:
11:71:b1:16:34:96:d1:ee:81:9e:8d:ef:6f:f0:2b:72:36:3a:
97:d1:53:64:19:d4:7c:b7:4a:59:bb:b3:49:32:6b:eb:dc:c1:
ea:20:ad:26:d5:c6:f3:a7:92:36:57:e9:b8:33:4e:e9:d3:fd:
6f:da:f0:03:bd:73:48:c4:28:49:fc:45:8b:b5:5b:98:92:02:
96:02:73:45:a5:f5:2a:61:1c:28:ee:c8:de:a9:b2:44:47:ce:
0c:7f:11:32:0e:bd:2d:9c:03:d9:40:9b:4b:13:ec:5f:61:4a:
7c:13:12:cd:d1:c1:35:08:a8:b8:49:26:f9:48:ed:88:07:fd:
52:fb:12:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1
MjkxNTQzNjMwHhcNMjYwOTA0MTUzODUyWhcNMjYwOTExMTUzODUyWjAYMRYwFAYD
VQQDEw02YTlhZTYwZC04MzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthAJ56gE3+6brVYgzCtqIdzPvsTMgowCth0ywoyX+JBQAy8um70GmwOAm4la
+JvhcUHnf17kcM6Z4QwGBKa2OMgExeFzKnEAlrt454Pww6ouRPDygitDTOOprlsl
kG8VxiuSYVHUKy6mxS7+e0Uh6Sy3yeJVm3jFFUcMFZDoL/DhtDwHrbz78PTo+9P+
r9br/K9MST/wfuyNS8KqMo+csmYFMYZbwfL3lBYzm6U7DM7FC73/1X7xh1GbdX4h
EDNWyyYDDt/fCikWTKTsjksdkiNXNpwwl4L8IJrJSrBHFFBqWTJEwZgFa9oS3RJu
r72npualx/NdUn4xB8uPq2Tw6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPPY0Yx
Bzh6YYLc49bz3DD9zlGsMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE
M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR
Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI
R29jRHVfdVVLakZTa1ZRMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo6pyKYqcGBVBOgicbMyaJZNCHBU2K/EuZZ6MmmshuYpU3qU9h1ZGjpfxqYih
QZj21MfNyJc4SaAqIFA5vmk47MP/w+Ac7Ceb1OJcRtCzasWR9zOE/+k0k2RMlmuo
cBozcFr9zU/DpKBRNfr94djTUXj2uKssVyHnBT5ya2zBEXGxFjSW0e6Bno3vb/Ar
cjY6l9FTZBnUfLdKWbuzSTJr69zB6iCtJtXG86eSNlfpuDNO6dP9b9rwA71zSMQo
SfxFi7VbmJIClgJzRaX1KmEcKO7I3qmyREfODH8RMg69LZwD2UCbSxPsX2FKfBMS
zdHBNQiouEkm+UjtiAf9UvsSJg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:59:45 2026 by rpki-client