
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json)
Hash identifier: 5t61r7jkqHsTf8Odj1dOvQoFG0OmbUxhkIcHfJx6DNQ=
Subject key identifier: 77:5F:07:40:93:CA:1C:60:9D:D8:2D:A8:12:A5:26:80:6C:C7:FC:1E
Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Certificate serial: 0F9C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
Manifest number: 0F7C
Signing time: Thu 08 Oct 2026 17:36:22 +0000
Manifest this update: Thu 08 Oct 2026 17:36:22 +0000
Manifest next update: Thu 15 Oct 2026 17:36:22 +0000
Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: qPfUMevM3TY1cEwZ97Qyhoh28OhWH3oIxwr1qHGx+HQ=)
2: 5C154406988911E991B10838C4F9AE02.roa (hash: tQrQ6Cd+gUF5DxrjyCWytmMItl98qXXXMjLohZ6qa3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3996 (0xf9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Validity
Not Before: Oct 8 17:36:22 2026 GMT
Not After : Oct 15 17:36:22 2026 GMT
Subject: CN=6ac7d496-11fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:e7:b0:2d:d1:5c:5c:14:a3:9c:3d:ad:8c:
29:60:fe:25:d5:47:a1:e2:b9:14:42:1f:23:88:44:
c3:0f:ac:c8:55:73:d6:8b:45:6e:8e:cb:8b:6b:e2:
3d:86:78:84:7a:0f:64:dc:12:be:e8:a4:08:3a:a0:
ab:8f:83:40:a6:92:e1:33:db:60:69:3b:40:89:aa:
8c:44:08:5a:18:77:d3:75:5f:db:01:96:0d:ff:e2:
70:76:83:f8:a5:80:d7:91:a2:69:69:42:ef:da:d5:
c2:eb:7a:90:1a:9e:fb:60:82:49:94:d1:32:c1:dd:
2b:69:55:25:3f:fa:10:fc:b0:c4:b5:c8:49:a8:b5:
82:4f:c3:bc:51:61:ba:cd:32:df:a2:7b:8d:3f:2a:
60:d5:22:ce:65:70:ea:f5:88:14:8c:a2:b0:35:d6:
2f:eb:00:98:9f:51:bd:0b:e4:cf:29:81:7b:93:0f:
1f:8f:b7:ba:9b:e5:32:c5:f4:61:49:e2:b0:e6:da:
7e:d6:e3:56:3d:44:be:34:ee:95:02:64:63:2c:c1:
6d:df:a1:ad:02:e8:ad:d2:55:5e:d0:59:f0:ad:5b:
70:13:ec:6c:ac:dc:4d:3a:de:c9:40:8e:7c:16:92:
58:85:89:cc:aa:28:af:2b:73:a1:12:37:6b:c9:9d:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5F:07:40:93:CA:1C:60:9D:D8:2D:A8:12:A5:26:80:6C:C7:FC:1E
X509v3 Authority Key Identifier:
keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:ff:1a:5b:6d:02:e6:8d:20:8e:e1:e2:7d:cd:36:31:d6:d4:
9c:a7:fd:a0:c6:80:b5:da:25:e0:7e:56:0c:30:d6:39:62:92:
dc:0a:8e:9f:9e:89:7d:29:c3:b1:9f:76:7a:7a:9e:bb:48:79:
88:c8:30:6c:9a:22:30:56:95:0d:42:21:7b:e2:a2:b5:66:4e:
6c:88:36:c4:51:45:2f:f4:fc:f1:24:60:a3:c8:87:9d:ba:83:
65:26:46:fb:15:6d:82:f3:fb:bb:31:f1:7b:cd:19:55:a0:e6:
7c:bf:6d:a9:7e:72:8c:bb:5a:37:5f:ff:d1:45:59:3d:39:67:
44:09:63:79:eb:8a:08:5b:e8:02:8b:74:42:7f:74:5c:3e:9b:
21:40:50:52:04:43:f8:c7:e3:e4:90:2e:e7:76:f4:f6:14:85:
09:6f:cd:d6:88:6c:57:44:a2:a3:f6:81:b4:a5:b8:c5:0e:7a:
56:ce:63:a2:d8:7b:ff:dc:cb:50:99:95:62:35:ea:65:ea:7d:
f5:69:02:26:79:51:77:7e:17:25:c6:27:b7:9c:17:9a:08:25:
a8:e4:d6:da:94:76:84:41:c1:97:dd:7f:18:ba:45:58:46:2e:
db:c5:cc:80:d4:c2:66:e7:76:cf:c8:a7:33:57:4b:3f:c3:81:
4b:e4:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:34:56 2026 by rpki-client