
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
File: YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json)
Hash identifier: WhTueOAaXKl1lGLA71RqliiJJxNgcA2+O5VrFqakUgY=
Subject key identifier: 68:64:8B:89:4C:29:E9:2B:9F:31:84:ED:1A:0C:7A:32:65:7A:6C:53
Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D
Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
Certificate serial: 0417
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
Manifest number: 0410
Signing time: Sat 03 Oct 2026 00:40:32 +0000
Manifest this update: Sat 03 Oct 2026 00:40:32 +0000
Manifest next update: Sat 10 Oct 2026 00:40:32 +0000
Files and hashes: 1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: c8Msjim39nLGo0DHAWPTIXM1SYejgchulDXgRUz1pKo=)
2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: Cjy/SWLQH86e7gQzB7H8gnQKLtLg5bLdlkR56jFW4Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl
rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
Validity
Not Before: Oct 3 00:40:32 2026 GMT
Not After : Oct 10 00:40:32 2026 GMT
Subject: CN=6ac04f00-fbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:49:83:49:89:ed:b0:5c:8d:f8:fa:e2:c0:
72:ef:c4:5f:89:23:0c:1a:ed:93:60:ca:d3:2b:f0:
7e:c8:64:de:36:ca:e6:9b:ee:4d:a1:8d:fa:7f:d3:
e3:ec:ee:de:c6:d1:89:8a:ac:bd:e9:16:2f:25:9b:
25:b1:1e:7e:1c:ca:e3:fa:01:a6:2b:14:d2:f7:a9:
74:f3:ce:ff:4f:e7:99:5d:1d:50:63:0a:8d:76:aa:
19:8b:df:ad:53:7f:d1:ee:f1:77:db:45:d1:73:03:
fe:ed:59:78:cf:2f:e9:46:b5:2e:92:62:a0:83:84:
86:76:6d:95:60:6c:0c:5f:64:d2:d7:a1:5c:45:9e:
62:ad:fc:00:84:23:30:63:ff:b9:e4:26:a7:0b:eb:
b5:60:4b:eb:df:49:bf:f8:79:31:2b:87:32:58:71:
1a:62:59:78:04:13:00:76:23:d9:55:f9:04:da:e8:
67:43:0a:a2:25:c3:58:cd:51:5a:ac:97:3a:f3:d5:
f8:ce:81:50:58:63:0a:38:a3:ad:a7:3f:b4:41:bf:
0a:bf:99:b3:6e:32:c4:bf:5e:69:c8:55:b4:11:82:
2a:56:9a:35:72:bf:ef:b5:12:61:01:5b:0c:f1:09:
dd:c3:78:93:fa:52:03:ba:c8:bf:2a:27:97:66:c0:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:64:8B:89:4C:29:E9:2B:9F:31:84:ED:1A:0C:7A:32:65:7A:6C:53
X509v3 Authority Key Identifier:
keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fa:da:c4:6c:fc:fa:94:c2:d6:bb:7d:eb:80:c5:c7:df:b4:
d1:be:96:0a:59:66:f9:72:b2:33:74:14:e7:f9:46:93:8d:00:
b1:03:68:50:ac:1a:b4:58:d0:e8:83:c9:ec:c7:e4:cd:b6:2b:
a1:49:38:2f:6c:ff:cc:f7:4f:5e:12:03:eb:4a:b2:c5:3f:7c:
db:20:76:37:d0:8f:1d:3f:3e:69:ca:f2:08:ea:a4:f1:15:d7:
1a:aa:2c:49:ad:12:a4:8f:6b:6c:6c:7d:6d:73:98:b9:a5:bb:
2e:eb:10:6e:41:d0:2b:0e:6c:48:15:91:30:28:5b:2e:f3:0d:
15:6c:3b:a0:f0:a8:4f:9f:0a:3f:85:ef:65:d8:89:ec:63:59:
1b:5c:52:60:98:90:d5:39:47:4c:21:7d:3a:5d:e6:6b:bf:e1:
68:06:44:54:0d:ed:bf:54:77:de:d6:10:a0:95:4b:69:5a:e0:
44:f7:35:61:e1:8f:23:64:a8:35:7d:68:6e:b7:69:f3:52:96:
94:c0:18:52:8e:aa:d6:45:aa:ff:95:77:4a:67:18:8b:f0:d6:
a2:e3:94:32:4d:0b:94:10:0f:2b:15:c9:8c:bd:f2:a0:69:67:
a9:99:37:53:6d:73:c5:ff:e2:ba:b7:23:a0:a0:f5:fb:a2:8a:
1a:b4:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:49 2026 by rpki-client