
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
File: yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json)
Hash identifier: dGYgjiXrt8SBZs74kC5NddshwVimYNVloxaYcv8tnIk=
Subject key identifier: F7:AB:20:EC:BE:38:CC:92:FC:AF:EF:34:E6:5B:57:50:B9:F7:B6:16
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Certificate issuer: /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
Manifest number: 011F
Signing time: Mon 05 Oct 2026 06:15:59 +0000
Manifest this update: Mon 05 Oct 2026 06:15:58 +0000
Manifest next update: Mon 12 Oct 2026 06:15:58 +0000
Files and hashes: 1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: /BZhI/R+lzkaFw8okSK9Q3gtmpOwOveOdq5eW0LTEEM=)
2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: RuktCzrTPaGz98KGZYkjHYICRA/av1re9f1mOeT+Khk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Validity
Not Before: Oct 5 06:15:58 2026 GMT
Not After : Oct 12 06:15:58 2026 GMT
Subject: CN=6ac3409f-1dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:cc:6e:34:16:c5:85:c6:6a:82:2e:9a:80:
8a:2a:fa:4d:f6:6b:04:08:72:e8:ae:26:d1:7e:d6:
b7:d4:c4:33:6d:d0:25:09:50:bf:21:5a:7c:44:bc:
69:a2:cd:d5:39:b8:dd:1c:2e:c3:c5:a7:97:82:93:
68:38:f8:93:83:1f:32:b6:c1:e0:a2:97:ce:67:f3:
d8:99:23:82:c6:7f:3a:cf:d4:9b:e9:03:94:a6:eb:
01:22:55:c1:3b:7a:87:d9:15:76:71:85:99:40:4d:
09:92:dc:f3:89:4d:4a:9d:80:59:3c:07:f9:53:18:
53:f2:e5:f7:40:75:66:54:d7:00:d4:1e:eb:36:fe:
26:2a:90:39:d0:5b:ec:08:5f:f6:91:65:48:05:e8:
f5:3f:94:96:cf:bd:11:fd:61:be:d2:ab:05:ab:b8:
c4:ad:0f:d4:8f:d4:9e:86:1d:9b:1d:12:c3:a7:eb:
76:19:f7:d2:28:67:bd:9d:a8:f2:81:0c:0d:de:1e:
ad:f3:dd:28:b9:8a:e9:52:c4:0e:f4:e3:78:d7:14:
77:06:37:5f:a0:ff:11:ee:24:23:6a:64:ad:4f:47:
04:5c:c3:27:4f:bd:e1:5d:49:1f:bf:1b:41:d9:4d:
ee:51:fa:71:c6:d0:a0:2a:39:13:88:0d:49:06:3e:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AB:20:EC:BE:38:CC:92:FC:AF:EF:34:E6:5B:57:50:B9:F7:B6:16
X509v3 Authority Key Identifier:
keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f1:8d:1a:d3:bf:1a:85:4e:64:2d:0a:25:9f:9a:5f:e1:4a:
d4:35:31:be:18:dc:41:4a:24:91:9c:1d:15:37:7f:bc:8b:d9:
d6:37:8f:39:45:9a:45:05:d6:36:6f:23:cf:89:c2:31:14:ba:
91:42:bd:5e:53:cc:73:98:8d:e3:b7:30:5a:c6:a6:49:56:cb:
fa:ff:7d:6a:2a:87:de:9a:a4:2a:8f:42:3d:25:33:c0:26:40:
f2:25:30:19:04:0a:d1:fa:cf:e8:42:b4:06:09:c3:c2:1f:4b:
97:c2:9e:00:0a:46:d6:de:c8:c2:3d:34:34:5d:7c:dd:b4:62:
6f:35:40:f9:7c:49:91:bc:26:55:17:a4:cd:ee:42:fc:4b:95:
3c:b2:0d:24:bc:5f:2e:7b:96:3b:11:58:c0:f0:10:be:22:41:
34:1c:fe:bd:49:05:c5:b5:be:2e:54:8e:46:64:5e:71:74:c5:
15:99:a1:a8:9e:09:d3:17:d8:b6:12:a6:f1:67:57:d9:7f:c5:
3e:47:09:f6:6b:53:2c:a8:65:71:a9:5d:7f:c2:52:91:5f:c1:
86:79:a5:42:34:95:55:6f:ac:87:d9:98:f1:a5:bd:35:c8:73:
c5:5e:c2:35:0e:45:ca:57:42:79:c0:8b:af:cc:3c:1a:82:24:
df:84:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:56:46 2026 by rpki-client