
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json)
Hash identifier: DCIBfqW5MQ7IxSbsGGTbviEvwVrLf5YJmIOTnNbWu6Y=
Subject key identifier: CC:B7:DF:4B:97:10:DD:09:50:42:60:F7:DF:2F:60:E2:A7:D6:DE:51
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial: 0501
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
Manifest number: 04E9
Signing time: Sat 24 Oct 2026 23:44:57 +0000
Manifest this update: Sat 24 Oct 2026 23:44:56 +0000
Manifest next update: Sat 31 Oct 2026 23:44:56 +0000
Files and hashes: 1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: ZtmM2IsFZdW65Uqpoy42Z0CJpIrLPqGuXNgL2GmLKJY=)
2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: JTjRlKAfcNIA5ztze61fVTgp1O9yMXmNQyaweK8zv78=)
3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: K+H/sCg/7uo16p0l9r8hsE4GJ7oFMKIq4jprTznasVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 23:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294
Validity
Not Before: Oct 24 23:44:56 2026 GMT
Not After : Oct 31 23:44:56 2026 GMT
Subject: CN=6add42f9-b6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:99:56:d5:95:b7:99:39:76:71:f3:28:af:
c9:19:3f:fb:bc:b6:5d:89:5e:5d:a0:78:ef:33:c2:
8d:9d:ed:c4:d7:89:ec:d4:b5:c0:4c:d9:00:e6:7f:
73:e9:dc:43:d0:5c:93:d1:a4:07:07:7e:46:16:d7:
9e:f0:d7:67:9e:3c:49:5c:5e:9c:1e:68:be:79:2e:
b5:ec:d5:f7:43:38:db:f4:f5:2e:f3:58:38:65:e2:
18:df:6e:68:d4:76:68:0d:de:58:1a:ae:c6:42:42:
59:d7:27:74:db:a8:a0:86:c9:eb:5a:96:0b:62:1e:
f5:c9:f2:6a:e3:14:ee:2c:11:a0:2c:60:d4:67:7b:
de:d0:c8:0c:3f:24:8d:6a:40:18:69:ba:de:02:0d:
9b:95:41:da:9c:03:0d:44:ba:58:66:f2:da:a7:a3:
fe:39:c0:a0:f2:ff:7d:af:93:89:37:fb:65:b3:c8:
03:16:d5:dc:7d:c4:bd:7b:dc:c8:43:a3:e2:02:fb:
01:26:d1:85:9a:32:a5:66:3d:36:8d:d5:02:ce:73:
bd:22:d1:5f:e3:44:04:df:bb:cd:e9:dc:83:fa:1e:
b7:fb:3b:da:b4:10:c4:b3:bf:48:1c:67:a1:da:fb:
f3:73:07:92:08:4d:9b:aa:1a:01:0e:03:e8:6b:00:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B7:DF:4B:97:10:DD:09:50:42:60:F7:DF:2F:60:E2:A7:D6:DE:51
X509v3 Authority Key Identifier:
keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:83:75:82:11:9a:51:ed:e9:84:d3:44:6a:70:db:34:04:73:
f6:5b:63:07:54:96:ef:e2:00:94:34:45:c0:1c:d7:97:57:7e:
df:cc:0e:72:6c:fc:b2:c8:fe:5a:cb:b6:ba:9a:1d:12:4b:ad:
a6:c2:0f:34:b4:d3:8b:c2:bd:0f:bb:1a:cf:e9:46:96:c7:85:
7f:95:bc:83:a2:17:85:dc:4f:a7:58:39:79:f8:d7:ff:de:c9:
b3:cc:95:0d:4c:ce:9b:42:91:36:5a:15:e8:28:c3:46:89:2d:
ca:ff:ca:6a:d6:5e:cd:5d:de:3a:92:b6:0f:06:f8:15:b8:4b:
6d:be:24:fc:5c:de:14:8a:3a:85:85:82:54:bf:c5:49:ea:c0:
4d:d4:27:b7:54:6a:2d:1b:4f:77:b8:68:2f:b0:b1:f4:aa:cc:
3f:e6:d0:7c:0b:b6:10:a2:aa:97:f8:5d:2a:42:d0:30:d0:6f:
e0:40:79:ac:a5:1f:d9:a8:db:e7:60:5d:4e:fc:76:1f:47:3f:
ce:fa:40:34:d4:9c:6a:47:39:59:2b:f9:e1:1e:73:d8:3e:24:
6f:67:f0:20:3d:d5:e7:c6:a8:d3:03:10:27:69:44:e1:a0:d3:
92:99:e4:9b:cd:8d:bd:01:22:12:6e:94:b7:8f:a2:e1:da:19:
4f:99:8b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 15:53:13 2026 by rpki-client