
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier: 5cWrFAL+wbB6FR07AHRiR/AJz5BX7Igfd1kcNzaGaQI=
Subject key identifier: FD:D5:AA:B8:A8:52:58:8C:41:8D:50:AF:55:38:03:E5:82:0C:A0:61
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number: 019E
Signing time: Sat 03 Oct 2026 04:55:37 +0000
Manifest this update: Sat 03 Oct 2026 04:55:37 +0000
Manifest next update: Sat 10 Oct 2026 04:55:37 +0000
Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: cbm8i0H+8mFMYB4y4xQIfhcXiFfGqHkFJyl9WrW9CoQ=)
2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: 4w/KtATa6aV4CLBGHG101jgl2MC3PwI1hKq3pEho9UA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Validity
Not Before: Oct 3 04:55:37 2026 GMT
Not After : Oct 10 04:55:37 2026 GMT
Subject: CN=6ac08ac9-0eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:6c:aa:4a:bf:0f:99:77:0b:e2:8b:3b:b5:
7c:d4:f2:56:0a:3d:90:03:95:e8:cc:52:e3:08:6c:
54:8d:63:64:a9:f6:e4:b6:21:41:f8:bd:71:ca:c0:
29:eb:cc:22:da:2e:d6:b4:29:10:f9:9c:a8:c4:b7:
d1:b8:61:79:b0:c0:aa:f7:c1:ca:41:12:56:40:6d:
36:74:0e:32:db:09:53:17:b4:dd:75:cd:37:f1:18:
78:94:fd:85:80:7b:96:40:79:2a:72:39:44:47:06:
9d:2e:c8:47:b0:01:2d:ca:7a:b8:a1:19:43:fe:83:
c8:28:98:37:0e:4e:b7:d4:46:ca:fd:48:ba:c4:26:
17:6f:d9:f4:14:ed:ae:04:b6:9b:11:59:66:55:57:
a5:83:37:e8:cf:fc:c0:93:2b:d2:24:06:8a:39:08:
5a:59:bb:79:08:9f:34:93:4e:2c:48:20:b0:d8:c4:
a7:06:d6:f8:e7:a2:a6:61:23:e3:6d:8d:7f:d9:e0:
d2:ad:50:68:75:e1:d1:23:cc:4b:9f:47:6f:6d:1c:
c3:18:75:8c:b0:0d:b9:a6:8c:54:cb:e8:24:b1:3b:
f4:9c:c7:c9:08:1b:7e:cc:ef:0e:3a:c2:a8:a0:e5:
97:b0:a7:d3:6a:5b:24:9f:b7:d3:26:36:83:93:7e:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D5:AA:B8:A8:52:58:8C:41:8D:50:AF:55:38:03:E5:82:0C:A0:61
X509v3 Authority Key Identifier:
keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9c:22:96:a1:40:e7:c5:4c:a4:b0:47:f6:cc:76:f6:ac:ad:
75:44:f6:ca:b5:00:42:dd:1d:9e:68:5b:57:04:60:31:46:3a:
2d:34:db:21:77:52:d3:33:3a:f7:23:a6:7e:2d:41:5d:c5:62:
b9:22:5b:93:2c:0c:81:37:c9:3c:ba:af:ba:11:6e:da:ef:3c:
62:60:9c:62:7f:a7:3d:dc:4b:de:85:b9:9e:4c:7e:b1:6f:cb:
3d:c5:39:b4:f3:ae:5e:1e:82:2b:9b:b2:78:0b:2d:2b:80:5d:
de:b5:af:55:17:7c:4c:2f:37:35:92:e9:0f:38:d0:10:3f:a6:
df:fe:8a:13:9a:d4:37:40:96:7f:9e:f7:03:d6:0d:3d:e1:2e:
60:f0:bd:b8:73:f7:f0:59:1c:09:1d:9c:86:44:14:af:f7:20:
2e:78:ec:e5:b6:14:38:df:3e:0a:9b:10:7d:0b:03:9e:c1:39:
db:32:01:f8:7b:ed:22:25:40:3a:e2:4e:e0:93:1a:5e:48:30:
e0:19:4b:48:62:9d:22:92:ee:e0:6c:05:c9:cb:ec:e4:cb:35:
18:2c:b8:21:0e:a0:02:2b:c7:54:e1:2e:52:9e:6a:57:86:1f:
29:fa:dc:e7:b8:14:05:eb:2a:9a:67:ac:c8:1c:51:b0:11:e2:
21:aa:c4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:03:00 2026 by rpki-client