
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
File: Py6661HMOPlbMj3QyF7oMK_jN7M.mft (raw, json)
Hash identifier: C/n2N0Lw4DEZtXeY/GE70XcaOrxmYTEK7u/3KdTq9l8=
Subject key identifier: 3C:E9:4B:E0:09:2A:E3:5D:54:77:BD:0C:02:67:B9:2B:F8:C7:A5:8A
Authority key identifier: 3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3
Certificate issuer: /CN=A91C430B/serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
Manifest number: B8
Signing time: Wed 07 Oct 2026 07:26:17 +0000
Manifest this update: Wed 07 Oct 2026 07:26:17 +0000
Manifest next update: Wed 14 Oct 2026 07:26:17 +0000
Files and hashes: 1: Py6661HMOPlbMj3QyF7oMK_jN7M.crl (hash: XsFrdlPh2yDvzp7I3F1vcSmPyP5CXHBeko+eODmZjZg=)
2: B32AFC52A7CF11F0923B7A2BC4F9AE02.roa (hash: 1uCfLlF3eOYzrWGfrDsn6fFJeWHxdlAShDA4pPyjH1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl
rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C430B, serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3
Validity
Not Before: Oct 7 07:26:17 2026 GMT
Not After : Oct 14 07:26:17 2026 GMT
Subject: CN=6ac5f419-4ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:0d:46:5a:03:fc:82:ef:8f:3d:a4:dc:f1:
80:8a:c9:e5:72:8f:37:2e:33:44:1d:b4:c4:9b:02:
dd:88:2d:62:a7:1d:41:4f:00:21:26:84:63:09:50:
e0:64:3a:35:6c:47:ee:f6:a0:a8:89:1c:f6:1a:26:
d1:93:bd:cf:48:49:96:d4:53:d9:f3:b5:a9:75:7a:
20:bc:64:ee:ab:9b:43:53:9e:fd:8e:89:76:b7:ed:
0e:d1:d6:47:05:57:a4:1e:68:c6:82:2c:3f:c7:ff:
20:ce:2a:0e:e9:68:d1:bd:8e:16:25:fa:f8:6a:cf:
61:97:b4:ee:77:d7:81:2f:50:90:5a:92:86:48:a0:
f8:11:07:cd:1a:24:4e:0f:fe:7a:7c:d6:9a:8e:de:
34:8b:73:ba:89:e6:51:f6:07:6a:4a:47:48:4c:a7:
a8:89:64:7d:84:31:b4:e8:9a:ca:d2:51:90:99:47:
ce:97:a6:d8:d5:bf:a6:72:d1:3a:05:55:dc:d6:93:
00:01:4e:7b:1d:01:ca:60:06:50:66:cc:52:e8:45:
de:4a:dc:6e:d9:98:97:2a:87:f6:ff:a0:ec:3c:8c:
24:fb:39:57:1a:d6:c8:14:1c:8f:0e:9e:ca:50:bc:
45:80:41:77:e2:a0:50:de:ff:68:e8:ec:f9:a3:15:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:4B:E0:09:2A:E3:5D:54:77:BD:0C:02:67:B9:2B:F8:C7:A5:8A
X509v3 Authority Key Identifier:
keyid:3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0b:a6:d3:bf:5a:f2:a2:0e:46:5e:47:4c:e8:5a:16:23:43:
4a:27:1d:f2:ed:cb:65:74:5a:ce:d9:1a:72:de:54:aa:11:13:
a7:53:ae:be:f4:33:1b:d9:e6:a9:ce:f5:fb:93:d0:99:1e:ef:
95:9c:38:1d:5c:db:21:8c:5e:4b:9d:56:6b:65:d8:03:1c:80:
78:be:1e:a9:17:9d:84:06:72:12:77:35:15:ca:0f:72:59:62:
d3:ec:98:91:bf:3e:f4:c1:d3:9a:4a:39:fe:77:b4:c3:1c:aa:
d6:aa:ea:79:32:08:ed:c4:a6:20:9e:a0:84:16:36:19:84:ea:
7b:e6:7c:75:8a:c5:6d:14:b1:e4:94:94:63:05:5a:4d:91:59:
80:8f:4b:9c:8e:8c:d1:b0:ae:d0:0f:72:c8:57:8d:ec:2d:48:
11:36:4b:2f:92:93:b8:e2:4e:39:3d:f3:f8:8a:2e:06:b4:95:
c4:87:57:19:6b:dc:da:cd:20:74:d8:66:b1:16:00:54:9b:53:
c0:7e:a8:c9:07:1e:85:0d:c0:15:55:fd:53:4c:0c:dd:e4:5d:
f3:88:e1:c1:5c:f6:50:b4:78:0e:3f:1b:b4:ff:4b:5a:24:fa:
b3:12:f2:62:07:f0:4a:aa:a4:40:2b:b3:44:1b:a7:61:92:5c:
9f:6c:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:27:34 2026 by rpki-client