
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json)
Hash identifier: kDp4quV7rptXYtMVdKY7u/26QS3THpTgNEHJo6p8s5o=
Subject key identifier: B2:24:84:8A:8D:47:85:FF:AF:1C:DD:56:5D:6F:AF:5B:0C:05:DA:26
Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57
Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457
Certificate serial: 0439
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
Manifest number: 042D
Signing time: Mon 05 Oct 2026 00:17:10 +0000
Manifest this update: Mon 05 Oct 2026 00:17:09 +0000
Manifest next update: Mon 12 Oct 2026 00:17:09 +0000
Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: Wx4Xu/DCxBSeOkdEZBgUy1ChqngxkFeNXX1FU24kkok=)
2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: WqjKBxQe2fFRZs4kqddr9GvMdc6frPevC+o56pVgm04=)
3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: v/YstiUDt5AHMIY3l8QrkWhxof9v0AFEbtY42FYgngA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl
rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457
Validity
Not Before: Oct 5 00:17:09 2026 GMT
Not After : Oct 12 00:17:09 2026 GMT
Subject: CN=6ac2ec86-7a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:53:83:f6:b1:b8:1b:c9:79:04:16:6f:e7:
13:8c:d3:46:98:c7:89:d1:f2:5d:1d:fa:56:68:9b:
7e:23:22:53:ad:60:e3:6d:a9:dc:4d:8b:89:02:c6:
20:9a:f7:3f:13:ad:61:84:1b:b0:9f:c7:2b:d4:e7:
ff:f6:ca:cd:f9:aa:f1:cc:6d:cb:67:5c:3d:fe:12:
66:18:13:5d:74:e7:f8:d9:a9:af:d2:6a:df:4a:a9:
79:c9:cd:59:c3:e4:b2:a1:ab:28:28:42:03:25:29:
ad:b9:a0:cb:32:61:e8:d1:ae:b1:6a:80:3a:57:72:
c5:ed:f5:2a:70:27:3b:0d:eb:64:cb:93:6d:16:b4:
c8:e0:8c:ac:9a:52:e9:f0:ec:6f:1f:f3:5e:f9:8a:
b6:ef:14:70:b5:2e:0e:78:39:b7:9f:b8:4f:44:6d:
d0:9f:f0:02:33:19:31:99:b4:5a:a9:17:ce:90:04:
c4:f2:d8:53:b8:3a:d9:76:4c:13:cd:45:d8:4c:f8:
07:03:cf:43:07:2b:b3:3b:97:4b:0b:07:0f:36:fe:
60:c6:e2:56:aa:fa:9d:96:d1:d5:9a:6f:b3:b0:f5:
88:2f:28:16:c2:84:e2:8e:56:4d:68:f3:1f:d8:f9:
43:ad:1b:14:ce:2c:05:bc:fd:79:a1:24:de:a7:23:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:24:84:8A:8D:47:85:FF:AF:1C:DD:56:5D:6F:AF:5B:0C:05:DA:26
X509v3 Authority Key Identifier:
keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fe:8b:d8:a3:85:e1:b7:ad:be:ef:44:b2:03:86:58:d3:12:
2c:7c:7a:7f:75:9a:ff:a5:83:31:4d:13:f6:6d:9a:1b:20:67:
f0:86:5d:28:7f:f2:13:dc:e4:0a:fd:f3:06:11:a1:0c:63:66:
5f:37:e0:9b:c4:7e:33:ae:40:05:ba:b9:15:3f:e4:7f:bb:30:
f3:36:df:0b:f3:f0:45:8e:be:9b:37:01:d6:3a:3a:b4:51:a1:
4e:18:36:5e:53:6b:cf:ac:19:49:f5:8e:9c:ab:8e:58:df:8b:
e2:fd:58:3c:bb:cc:f3:5e:55:fd:5b:9a:67:29:4c:f2:43:2e:
d1:a3:8f:a7:56:84:7f:e5:7b:ed:25:97:f3:d7:b4:3d:65:28:
35:fd:38:15:a2:b7:75:95:8e:3a:60:dc:94:43:ab:dd:e4:5b:
93:66:56:e4:dc:97:77:f9:26:ac:38:fb:9b:56:d7:1b:0b:48:
94:bc:15:67:c3:43:f0:3f:0c:78:d4:d6:66:72:cd:c4:ca:08:
49:63:48:05:71:b3:a9:6a:90:3d:e5:50:c6:49:ce:5a:f0:bf:
54:fd:fd:1f:f7:7e:49:83:24:d7:dd:c2:a8:f4:03:2e:2f:1f:
d9:d4:45:fc:a4:39:d7:60:85:fa:ad:10:3b:de:cb:16:01:44:
b9:5f:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:54:23 2026 by rpki-client