
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json)
Hash identifier: CjxRJ1xrhvfj4Hpm9StWDtgEBO9tajwlRsAUYiJlMXY=
Subject key identifier: 3D:A7:3E:38:AF:85:1F:59:1A:EC:62:CC:CB:31:E0:3D:04:E5:7D:1C
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial: 02ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
Manifest number: 02E0
Signing time: Mon 21 Sep 2026 01:04:56 +0000
Manifest this update: Mon 21 Sep 2026 01:04:56 +0000
Manifest next update: Mon 28 Sep 2026 01:04:56 +0000
Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: OUrIrUr2+ChCLZ4yD75gYIIlTOikW0XJGpiz8OnQxQ8=)
2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=)
3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Validity
Not Before: Sep 21 01:04:56 2026 GMT
Not After : Sep 28 01:04:56 2026 GMT
Subject: CN=6ab082b8-fe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:d3:6d:e0:20:20:43:cf:6f:80:10:3e:df:
b4:86:f9:1a:59:e7:54:8e:bd:a9:26:81:06:f9:da:
40:2d:df:51:c0:b4:5d:e7:87:93:fd:55:1c:bb:af:
54:67:43:38:43:a3:e6:7d:d1:6a:ad:b5:44:70:b8:
84:5c:bd:df:71:57:27:73:52:8b:3d:91:61:e1:0c:
90:39:11:24:66:65:5b:eb:30:02:27:c1:1e:15:76:
42:eb:e2:8a:b1:1b:4e:94:47:99:86:d9:a3:25:a2:
a2:46:5c:bf:ce:ff:ff:d5:84:8b:50:19:7f:43:13:
fc:8a:36:d2:80:98:3f:da:e1:1d:eb:7c:af:e7:c3:
b0:8f:3b:b5:8e:8d:c7:c6:65:7e:0e:e7:45:40:8f:
8c:f2:87:58:1a:55:64:02:7d:9f:6f:07:d9:b2:46:
41:db:1a:c7:2d:6b:52:a0:12:cd:f0:92:5c:4e:1e:
0f:17:92:5d:47:8a:05:a9:90:19:76:b7:35:0a:77:
cf:a9:a5:1c:82:a8:75:32:06:c8:96:22:37:4b:29:
54:b5:0d:aa:05:3d:0b:8b:56:5e:26:57:f8:ed:2d:
2a:a5:a1:7d:8a:fd:f8:f1:af:46:27:8c:14:12:71:
6a:64:a6:e7:49:b7:c6:a8:63:d2:97:9d:fb:ec:a8:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A7:3E:38:AF:85:1F:59:1A:EC:62:CC:CB:31:E0:3D:04:E5:7D:1C
X509v3 Authority Key Identifier:
keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:a0:8b:42:26:88:0d:e1:75:60:e9:b9:43:41:98:c5:7f:dc:
9c:8b:e5:c0:bb:b0:32:a0:69:be:ce:98:67:ce:fc:88:16:76:
4c:9c:b3:ae:dc:9f:e1:2a:da:16:ad:c5:d3:00:cb:45:64:6c:
5e:5b:bf:bc:67:08:7a:b6:e4:5b:f6:31:1e:77:35:46:6a:74:
17:ff:05:03:df:30:4f:02:a8:22:8f:c0:20:da:96:b8:fe:00:
1c:a4:bf:e9:5c:bf:20:95:54:15:ce:60:43:fb:5c:07:5f:70:
39:4f:98:a3:50:1d:46:b9:09:4c:e3:5c:dd:7a:9e:5f:3e:50:
15:3b:74:06:db:fd:fc:e3:7b:df:54:63:36:6c:10:be:e7:6b:
f0:fb:66:a9:5f:6d:49:26:86:0b:15:eb:03:14:7c:b0:72:90:
72:ef:d4:f0:b1:27:8c:60:6f:5c:4b:70:cd:a2:4d:25:91:93:
0c:2b:df:55:46:c9:04:3d:bf:8e:9c:c3:82:c4:c9:22:59:04:
2d:f9:3e:7e:c1:db:ed:2f:9b:95:b3:17:89:c5:ee:b6:69:dc:
7a:0e:73:f7:9a:68:ed:84:28:34:20:97:e4:b4:91:12:ec:62:
44:7b:09:4c:cc:ba:70:c2:bd:cd:62:92:dd:15:6e:11:cc:75:
e4:e9:10:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4
RUU0QUYxQ0QwHhcNMjYwOTIxMDEwNDU2WhcNMjYwOTI4MDEwNDU2WjAYMRYwFAYD
VQQDEw02YWIwODJiOC1mZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn5HTbeAgIEPPb4AQPt+0hvkaWedUjr2pJoEG+dpALd9RwLRd54eT/VUcu69U
Z0M4Q6PmfdFqrbVEcLiEXL3fcVcnc1KLPZFh4QyQOREkZmVb6zACJ8EeFXZC6+KK
sRtOlEeZhtmjJaKiRly/zv//1YSLUBl/QxP8ijbSgJg/2uEd63yv58Owjzu1jo3H
xmV+DudFQI+M8odYGlVkAn2fbwfZskZB2xrHLWtSoBLN8JJcTh4PF5JdR4oFqZAZ
drc1CnfPqaUcgqh1MgbIliI3SylUtQ2qBT0Li1ZeJlf47S0qpaF9iv348a9GJ4wU
EnFqZKbnSbfGqGPSl5377KiDbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2nPjiv
hR9ZGuxizMsx4D0E5X0cMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0
MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto
MndRbDV6WjlWY0tPNUs4YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIaCLQiaIDeF1YOm5Q0GYxX/cnIvlwLuwMqBpvs6YZ878iBZ2TJyzrtyf4Sra
Fq3F0wDLRWRsXlu/vGcIerbkW/YxHnc1Rmp0F/8FA98wTwKoIo/AINqWuP4AHKS/
6Vy/IJVUFc5gQ/tcB19wOU+Yo1AdRrkJTONc3XqeXz5QFTt0Btv9/ON731RjNmwQ
vudr8PtmqV9tSSaGCxXrAxR8sHKQcu/U8LEnjGBvXEtwzaJNJZGTDCvfVUbJBD2/
jpzDgsTJIlkELfk+fsHb7S+blbMXicXutmnceg5z95po7YQoNCCX5LSREuxiRHsJ
TMy6cMK9zWKS3RVuEcx15OkQCA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:07:54 2026 by rpki-client