
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
File: y8ZgM3D76EzM4GToT08m7b7CZ7E.mft (raw, json)
Hash identifier: NLPCcLjD3ShKTGfhfHrNxMPKvbz/nw9qT8rOFNxhzf4=
Subject key identifier: 01:19:E0:8C:8E:77:1B:9A:2D:7C:E1:49:A8:0A:33:2B:60:88:43:2F
Authority key identifier: CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1
Certificate issuer: /CN=A91D9CA8/serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
Manifest number: 0107
Signing time: Mon 01 Jun 2026 07:02:15 +0000
Manifest this update: Mon 01 Jun 2026 07:02:14 +0000
Manifest next update: Mon 08 Jun 2026 07:02:14 +0000
Files and hashes: 1: y8ZgM3D76EzM4GToT08m7b7CZ7E.crl (hash: ehLU27tZei3lx0TEA/rg5f1MpRmjQ/bq1Ih5vr1CADI=)
2: 459A40A0399111F0B589186BC4F9AE02.roa (hash: scPqVoYPhM9N9nt8I3yfdS2nCVlGwPE0LU2L+VLMObQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.crl
rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=CBC6603370FBE84CCCE064E84F4F26EDBEC267B1
Validity
Not Before: Jun 1 07:02:14 2026 GMT
Not After : Jun 8 07:02:14 2026 GMT
Subject: CN=6a1d2e76-a921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:af:46:de:05:46:b0:70:48:9f:a5:31:f1:
2f:a3:40:af:5e:e1:da:37:f7:eb:13:58:a5:d3:ef:
34:2a:9d:67:31:af:fb:78:de:b5:15:c2:31:29:b8:
0c:03:5e:10:f4:88:5b:d3:17:b8:40:94:11:ea:ce:
ad:0f:7f:6e:08:f6:dc:58:3d:90:ac:71:05:37:af:
f1:1f:e7:1b:8f:af:07:3f:89:82:a1:9b:02:d0:31:
47:d5:14:05:9f:d1:67:2b:84:ba:d1:b7:1f:66:6f:
f3:76:33:33:98:5f:93:cc:61:f0:2e:fb:cd:a7:8c:
ac:c3:e8:a0:34:b0:ef:63:e6:73:1d:68:05:b6:8a:
b3:9d:eb:e6:3d:b1:f5:57:99:56:ca:c8:fe:e4:33:
69:64:e9:48:e8:15:6b:10:81:2e:11:48:50:08:c2:
18:fa:23:51:63:f4:5b:ec:1c:96:3b:b9:12:36:2c:
71:ab:9c:34:4b:4f:45:ef:eb:68:7b:58:d9:bf:ea:
cf:41:c8:68:70:80:cf:1d:97:28:2c:3b:92:08:82:
80:9d:e7:21:0e:56:9d:9b:9e:50:b9:82:ab:96:0c:
60:d8:13:24:e1:3e:49:15:ad:f1:11:fb:8b:0c:f3:
92:fe:bf:10:a6:be:98:ca:bf:ad:65:ae:e7:97:44:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:19:E0:8C:8E:77:1B:9A:2D:7C:E1:49:A8:0A:33:2B:60:88:43:2F
X509v3 Authority Key Identifier:
keyid:CB:C6:60:33:70:FB:E8:4C:CC:E0:64:E8:4F:4F:26:ED:BE:C2:67:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y8ZgM3D76EzM4GToT08m7b7CZ7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/20DA2746E4FD11EFAC1CE67FC4F9AE02/y8ZgM3D76EzM4GToT08m7b7CZ7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:fc:cc:27:72:a2:35:8c:22:f3:f6:f0:9b:29:2f:87:86:5b:
09:c1:fa:b1:45:0c:eb:29:4a:61:d6:46:0e:3b:8e:00:c8:32:
17:6f:51:e0:32:f4:4d:d8:cc:a9:98:8b:6f:b1:74:79:e0:79:
68:8c:23:88:8a:45:34:bf:61:94:5a:10:0a:b6:d0:8f:fa:c0:
14:1a:08:27:f2:a8:1a:ab:31:8b:07:f5:fb:f6:91:46:ac:e2:
59:01:36:d1:91:df:aa:b0:16:24:41:a6:e1:5d:60:2d:0c:ae:
eb:46:21:39:86:59:62:d2:74:4c:a0:8e:f7:e1:64:42:c5:69:
24:e6:ce:1f:0d:f7:f1:d3:79:92:f1:6b:8d:3c:ad:45:67:30:
e8:41:d3:9c:59:a9:63:ad:78:36:b6:29:94:e0:45:75:b8:0d:
c5:e2:44:46:f9:9b:c0:e7:6b:d8:28:7c:24:c4:d5:86:12:1a:
d9:f6:a7:a8:66:33:c8:68:52:55:1c:1c:0d:76:a9:b6:5b:f5:
59:c3:92:33:c8:4d:b8:21:9c:68:d1:9f:f1:7e:09:c5:b7:de:
20:8f:71:fd:6e:f0:e1:8c:0d:18:0d:ef:49:2e:9a:54:b8:f1:
26:ad:8c:b1:d4:f7:6b:67:f8:81:f1:b3:62:ea:cb:0e:34:af:
76:db:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:36 2026 by rpki-client