
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
File: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json)
Hash identifier: 87LtUkzn6q1xsT4EYfLXwsLCB9E+J0b2koahz2i/v/M=
Subject key identifier: 8E:72:E6:A1:72:7B:95:1C:6D:99:6D:9B:6C:70:88:E4:5D:2B:A0:6D
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Certificate issuer: /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial: 08EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
Manifest number: 08DE
Signing time: Thu 22 Oct 2026 20:30:47 +0000
Manifest this update: Thu 22 Oct 2026 20:30:47 +0000
Manifest next update: Thu 29 Oct 2026 20:30:47 +0000
Files and hashes: 1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: C9f08HOs7Wmc0qeWWU5pxGVSd/FPXc25ubnhKhee3ag=)
2: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: y7Iz2rPJdAOlGQ4MtuTgFktbk+yS4xEJ9nZlCdDX5sY=)
3: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: 8lKBmwh4w3njS1t99CtRQ9cpWrcLS15+u5yFjKAOlNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 20:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2283 (0x8eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Validity
Not Before: Oct 22 20:30:47 2026 GMT
Not After : Oct 29 20:30:47 2026 GMT
Subject: CN=6ada7277-bdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:b1:66:da:42:dc:d3:1f:7b:bd:fb:f3:58:
e3:da:3e:89:d1:b5:23:4b:36:d7:f4:5d:7c:64:1b:
4f:0a:42:18:46:09:3e:ef:59:da:39:49:cf:5e:48:
64:65:c2:af:20:eb:af:af:72:ef:7c:3c:e2:2d:e0:
cf:82:5e:54:01:b6:b1:d6:f7:29:10:9a:00:9d:a5:
43:4c:0d:8f:62:07:5f:3d:84:8d:b7:9d:e2:b7:aa:
18:c2:86:32:1e:e9:33:db:79:d4:6a:89:fb:bb:fa:
e7:fb:a6:08:64:d6:e2:3a:61:fe:4d:73:4d:47:a4:
2f:9f:b4:6e:e2:a9:8e:21:96:92:69:81:39:f6:40:
ac:d5:60:0f:36:7c:75:f1:56:5b:a6:b2:5e:10:ff:
28:02:f5:04:aa:8e:2e:97:20:1b:02:cb:f6:b4:40:
ff:00:20:46:a8:6c:31:88:46:75:6f:d8:6d:35:71:
d9:0b:6e:42:50:eb:b3:fb:7f:9e:8c:30:6a:70:88:
15:ed:ea:3d:c0:a7:bb:46:07:5d:5c:f9:94:5b:a7:
4f:0d:06:76:a8:28:02:77:75:96:3d:0a:4f:ea:b6:
f3:6e:c1:75:8b:62:dd:34:3d:e6:1c:ee:21:ce:3e:
87:67:cd:e7:25:46:ed:a9:3a:06:c7:74:17:2b:2e:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:E6:A1:72:7B:95:1C:6D:99:6D:9B:6C:70:88:E4:5D:2B:A0:6D
X509v3 Authority Key Identifier:
keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:22:ab:20:41:fe:69:ed:f9:5f:25:63:be:96:2f:0c:01:77:
f9:0c:30:20:05:d8:43:b9:75:b1:95:72:c3:b3:b4:ea:3e:a7:
36:e0:6b:91:45:cd:63:de:72:60:14:04:a4:9b:6e:04:3d:9b:
f9:ed:a2:61:60:0b:04:2f:ea:9e:1d:31:f5:29:57:4e:9e:46:
4e:64:b4:c4:ee:ee:90:18:3d:45:5d:13:4f:14:6d:d8:3a:6c:
18:d7:0b:b2:44:72:89:22:e7:4d:56:21:73:ef:8f:0a:60:32:
84:65:1d:d6:c9:f3:a7:52:22:47:7b:17:0a:b9:9c:03:f1:e1:
02:d5:a9:34:aa:96:eb:15:ea:09:75:5b:05:3d:2f:1b:06:06:
09:5b:af:8d:05:f0:43:f5:3e:77:a9:45:44:6f:a3:0c:ed:93:
d2:f2:e5:7d:39:a5:48:12:5b:0c:dc:77:ba:a1:2d:de:3a:77:
b7:04:d2:a9:04:56:0a:17:22:02:7b:f3:cc:b9:9c:5d:08:08:
94:30:48:d3:1d:b8:a7:07:06:71:6c:d8:61:64:38:59:c4:25:
6b:46:ea:3e:fb:20:24:c2:d4:cd:25:ce:0c:1a:5e:30:e8:b4:
be:e3:1a:63:bf:e0:00:c7:cd:2e:4e:ea:53:b5:6e:e7:3e:3f:
7a:5c:87:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:11:54 2026 by rpki-client