
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
File: YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json)
Hash identifier: ROkYJ2UYBaCoRN789Bos3/Z+RscJfHQb6JyxSFs+Yuw=
Subject key identifier: C8:9D:AA:2F:01:40:E2:6E:69:5B:98:D5:F6:30:ED:DB:71:4C:58:77
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial: 07A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
Manifest number: 0795
Signing time: Sat 28 Feb 2026 21:58:55 +0000
Manifest this update: Sat 28 Feb 2026 21:58:55 +0000
Manifest next update: Sat 07 Mar 2026 21:58:55 +0000
Files and hashes: 1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: B6ckiWtdtPOlHMGj+4ldTQ3TL5X1AeA+LgIEXa/U0EM=)
2: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: yNErv3iFNZ7PkQlpn19JFt4kfAqH63o4LgrhzyCQN8E=)
3: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: yJe95/CWUyK4PeGhQ3ocIht5rMeJRzfW/ftg8Li7myY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Validity
Not Before: Feb 28 21:58:55 2026 GMT
Not After : Mar 7 21:58:55 2026 GMT
Subject: CN=69a3651f-d585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:a3:fa:23:d4:04:a6:a8:52:17:ed:a0:32:
6a:14:13:34:7a:7e:be:7e:49:fb:9f:c3:6a:53:60:
26:11:12:eb:d0:20:f5:18:fb:a3:30:20:cf:31:af:
4b:1f:61:96:37:55:e2:8f:9d:7b:98:87:44:4c:00:
69:fe:e9:3a:7d:c1:91:67:20:03:a7:cc:e7:5d:ef:
63:65:c6:cf:72:08:55:03:a0:24:52:c7:a5:a5:ca:
11:3d:19:e2:78:ef:fd:cf:5d:0f:45:9c:88:df:1d:
9f:e1:8f:a8:80:1b:06:3d:ce:e2:00:d7:0a:9e:79:
24:48:65:00:ab:7f:47:a4:c2:a6:90:12:4e:f6:6f:
95:78:22:99:4d:6d:c3:e0:aa:8a:66:d2:47:99:8c:
cd:6c:1b:e4:fd:97:60:08:d2:d7:92:e3:62:c7:4f:
18:68:a3:a4:b3:dc:8e:dc:82:52:da:f3:32:18:6d:
bb:68:4e:f9:5f:99:21:61:69:e1:7f:19:95:0f:f9:
f2:e5:40:75:23:d0:6a:16:a2:90:93:60:b4:91:1d:
af:12:0b:17:a5:ec:72:4a:ff:8c:83:4d:5a:2f:97:
d7:80:5b:e4:c1:cc:87:f4:21:44:21:0e:84:d3:d4:
11:54:c6:83:39:73:f2:45:f1:2c:2c:04:d4:13:71:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:AA:2F:01:40:E2:6E:69:5B:98:D5:F6:30:ED:DB:71:4C:58:77
X509v3 Authority Key Identifier:
keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:33:0c:13:1f:46:a1:4e:d5:df:10:a2:d8:88:1a:c0:bd:7b:
74:a9:6c:9d:74:71:49:e0:0d:15:cc:27:dc:dc:e8:dc:b5:af:
f6:ce:0d:c9:d4:c5:60:99:31:35:d1:fd:48:cf:06:64:5d:69:
bd:fd:e6:57:06:2f:93:0a:49:d4:56:68:43:e0:ae:5d:ca:b3:
96:ad:af:b7:37:09:b9:46:71:11:80:e6:59:76:3d:be:42:be:
27:55:5d:fc:ef:55:f0:80:4c:29:44:69:00:38:36:d2:45:34:
f6:07:22:35:b1:56:34:d6:bf:06:d6:7a:a1:8c:b6:f3:b4:c5:
e0:bb:53:a4:ce:e4:32:d2:d2:80:9d:32:77:e7:d5:b9:c8:6e:
34:c6:f3:ae:49:10:19:e2:7d:9a:f5:e4:80:b4:17:4d:cd:34:
02:fa:e2:7f:8b:40:db:6d:f4:dd:1a:8e:93:1a:ab:a5:6b:15:
d2:e0:3c:c1:5c:37:98:9d:16:28:1a:15:c1:47:e0:50:51:78:
f8:09:a5:13:ce:d0:ab:58:ac:8d:98:87:16:8b:ed:ae:fc:be:
a7:69:ba:bf:bb:cc:41:69:2d:fe:ec:4e:46:11:59:69:69:1d:
f4:9d:69:a0:da:a5:56:49:80:a6:7d:c8:aa:a9:96:71:f6:20:
f1:71:54:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0
M0E5QTNFNEIwHhcNMjYwMjI4MjE1ODU1WhcNMjYwMzA3MjE1ODU1WjAYMRYwFAYD
VQQDDA02OWEzNjUxZi1kNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Lmj+iPUBKaoUhftoDJqFBM0en6+fkn7n8NqU2AmERLr0CD1GPujMCDPMa9L
H2GWN1Xij517mIdETABp/uk6fcGRZyADp8znXe9jZcbPcghVA6AkUselpcoRPRni
eO/9z10PRZyI3x2f4Y+ogBsGPc7iANcKnnkkSGUAq39HpMKmkBJO9m+VeCKZTW3D
4KqKZtJHmYzNbBvk/ZdgCNLXkuNix08YaKOks9yO3IJS2vMyGG27aE75X5khYWnh
fxmVD/ny5UB1I9BqFqKQk2C0kR2vEgsXpexySv+Mg01aL5fXgFvkwcyH9CFEIQ6E
09QRVMaDOXPyRfEsLATUE3E71wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMidqi8B
QOJuaVuY1fYw7dtxTFh3MB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy
OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2
UElJZERKaEJtekZEcWFQa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFDMMEx9GoU7V3xCi2IgawL17dKlsnXRxSeANFcwn3Nzo3LWv9s4NydTFYJkx
NdH9SM8GZF1pvf3mVwYvkwpJ1FZoQ+CuXcqzlq2vtzcJuUZxEYDmWXY9vkK+J1Vd
/O9V8IBMKURpADg20kU09gciNbFWNNa/BtZ6oYy287TF4LtTpM7kMtLSgJ0yd+fV
uchuNMbzrkkQGeJ9mvXkgLQXTc00Avrif4tA22303RqOkxqrpWsV0uA8wVw3mJ0W
KBoVwUfgUFF4+AmlE87Qq1isjZiHFovtrvy+p2m6v7vMQWkt/uxORhFZaWkd9J1p
oNqlVkmApn3IqqmWcfYg8XFUEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:56 2026 by rpki-client