
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
File: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json)
Hash identifier: U8dSNzP5AAimYfyPqMyHfcOcpuPeNk/OaK0OAej4eVo=
Subject key identifier: 5C:8B:56:94:07:30:C6:A0:F3:DF:75:26:30:00:01:82:F3:D5:FB:69
Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC
Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
Manifest number: EC
Signing time: Thu 29 Oct 2026 07:10:27 +0000
Manifest this update: Thu 29 Oct 2026 07:10:26 +0000
Manifest next update: Thu 05 Nov 2026 07:10:26 +0000
Files and hashes: 1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: HCIgL0oIJErpZZs2AW0LCIlxTT/GHdv40qGVkb8VOZY=)
2: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: 7SJ1ORslsA+v/W3McAZxGP+GfP6rTmlULhaLVUpn64U=)
3: 053416126DB211F0962DC55BC4F9AE02.roa (hash: q6w/n00PdZjJkqVXecEqO9H7uXsW/x2wJfIgbUL2NNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl
rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 07:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
Validity
Not Before: Oct 29 07:10:26 2026 GMT
Not After : Nov 5 07:10:26 2026 GMT
Subject: CN=6ae2f163-9d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:d9:ff:d2:74:14:d8:07:67:7a:7f:3f:70:
a4:3a:93:6c:32:bd:72:22:13:d7:10:f0:3a:87:7f:
47:a1:6e:92:06:b7:0c:84:c3:68:6d:86:2a:ec:9a:
f6:84:c1:9a:95:b4:3f:3c:ca:2b:d0:52:8b:51:d5:
2e:eb:cb:6b:d7:4e:1b:ab:42:89:0b:05:73:1b:5d:
b7:33:72:46:f6:25:bd:2c:21:45:aa:f0:3b:07:3b:
03:c8:82:38:d7:68:a2:6d:ab:07:e2:9b:e9:c3:57:
c6:9c:1a:07:34:e7:8d:bb:a3:f3:10:e4:79:f4:86:
c5:7b:ff:bd:12:db:fa:16:2e:a3:df:41:ad:f2:07:
c6:4e:3c:65:d8:12:fe:6e:ad:74:47:b4:28:22:39:
e0:fb:fa:26:f9:06:53:66:19:e1:d1:37:bb:71:c1:
f1:9c:34:fd:06:c1:06:ac:fc:36:11:18:91:ca:dc:
7a:01:3f:63:ae:60:fb:d5:3f:82:72:69:46:ad:5a:
2a:93:31:60:e0:39:b9:50:04:82:9f:45:71:7e:44:
de:20:ad:ae:e4:4c:fa:33:39:7b:2f:47:64:a6:fd:
16:c1:10:37:b9:1b:00:77:63:bf:b3:b1:45:7f:04:
87:6f:5d:85:7a:65:40:2c:4e:f5:d9:fd:1e:58:55:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:56:94:07:30:C6:A0:F3:DF:75:26:30:00:01:82:F3:D5:FB:69
X509v3 Authority Key Identifier:
keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d3:10:74:33:1c:57:c1:e7:14:98:a8:2c:a1:00:59:df:53:
50:52:3b:d6:55:40:6f:2a:aa:ac:1a:85:76:02:d3:62:47:92:
eb:2f:35:04:dd:0d:a7:cb:4c:e0:a2:b5:45:d4:1a:2c:b7:fc:
c4:b3:44:0b:0e:86:d1:f9:90:1e:14:07:a8:d5:01:c9:72:32:
6e:01:00:a7:47:b5:46:f0:9a:6b:ca:72:02:e1:a6:49:1c:13:
c2:40:81:e3:01:dd:29:09:e1:3d:80:fa:f6:67:6c:21:f8:98:
2a:98:11:2c:eb:4a:09:75:94:8e:de:63:28:d2:d9:49:24:be:
b1:39:7e:67:0a:58:5b:04:e1:37:e1:1d:e6:dc:39:33:f8:c8:
6b:53:1b:0a:53:53:31:c6:04:68:a3:cc:70:b5:5b:68:b1:26:
d9:a1:79:b8:42:24:03:91:ea:2d:9b:9b:f2:b2:4e:cd:2d:0d:
fe:14:c0:31:66:1b:40:ec:62:74:c1:45:e6:17:c8:ce:09:33:
d9:23:2f:39:a3:8c:6f:ec:7b:68:61:33:ee:8d:73:5e:14:00:
f9:55:c2:51:69:bd:55:58:95:4d:d3:cb:c7:11:29:70:d8:59:
a5:00:87:82:d6:48:a0:90:a0:33:1f:7c:6c:dc:5c:35:dc:f1:
23:21:3c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:01 2026 by rpki-client