
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json)
Hash identifier: Ive3LSgMc5JofzN5nPTQIpEYnit203MeOthuLg1/gmM=
Subject key identifier: 46:BF:CF:88:64:AA:D1:0D:AE:E8:2E:FF:4F:6D:AC:FC:E3:44:AF:74
Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16
Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
Manifest number: 0261
Signing time: Mon 21 Sep 2026 02:19:42 +0000
Manifest this update: Mon 21 Sep 2026 02:19:42 +0000
Manifest next update: Mon 28 Sep 2026 02:19:42 +0000
Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: wtvdafQ5UxQzUkf7z4kDrjJV5I7pqrfeXZFuZ+E22RQ=)
2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: 5W92E32XU1AG2SE7ILAomrNCfIvth1YE0xyocchPZ5Y=)
3: 25342138B11C11F182DE95AD4511F970.roa (hash: JNorVh4J5hD1g3opD5QXvy6/Z2sqrAUvUx2i2WRBflw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl
rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
Validity
Not Before: Sep 21 02:19:42 2026 GMT
Not After : Sep 28 02:19:42 2026 GMT
Subject: CN=6ab0943e-614c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:0d:e9:c4:f4:5e:7f:8e:cb:fa:bd:19:a6:
ab:10:40:29:14:24:bf:b0:6b:20:c0:50:4f:21:66:
79:fd:c4:eb:21:8c:68:76:5d:46:3c:e9:b7:82:57:
2a:f2:1d:c0:f7:e0:a4:94:18:88:7e:3b:2c:21:ab:
e2:20:f9:d1:f5:cd:9c:b7:6b:94:4e:ff:11:a7:ee:
96:b7:e5:1e:06:33:dc:ff:90:c7:6d:54:fc:7e:a9:
25:ad:e1:ba:73:ee:25:57:f3:1e:5b:03:46:b4:76:
d5:37:67:a5:3d:6e:d2:8c:c4:4f:67:d6:c1:72:77:
0b:ab:d3:b3:b8:30:34:8f:13:92:38:c3:08:f2:28:
0c:2d:3e:ea:9a:4d:a7:d2:70:60:33:53:57:3a:db:
0e:da:e4:ed:9e:93:19:00:59:4c:bd:e1:ee:ec:f3:
f8:40:17:de:18:49:d9:bc:f6:d4:58:09:f8:90:a8:
73:4c:f4:69:06:76:20:37:a4:bf:5b:0a:96:a3:b4:
21:bf:10:f0:e4:1e:11:e8:20:34:fa:b7:0d:16:09:
20:cf:e6:25:79:89:99:69:fc:f0:27:df:fd:3d:47:
b9:f6:8a:89:8f:06:23:00:3a:94:aa:0c:c7:bc:29:
94:9d:52:86:9e:1b:59:e2:79:e1:de:d6:e2:32:7a:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:CF:88:64:AA:D1:0D:AE:E8:2E:FF:4F:6D:AC:FC:E3:44:AF:74
X509v3 Authority Key Identifier:
keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:cf:cc:2d:24:d5:4b:16:76:09:df:e3:b7:26:38:09:5c:
02:b8:5a:5e:48:28:32:c5:8d:a1:01:6a:ea:9f:05:c8:63:a9:
3b:b5:d0:78:c1:78:b4:0f:71:e6:a3:fc:c1:d6:6a:5c:b0:d1:
0c:e4:46:b1:dd:33:05:b7:42:57:62:b0:73:93:33:96:e3:ea:
98:24:63:5e:7e:47:25:1d:4a:a9:3f:8c:a4:82:23:fc:a3:f0:
a0:0e:1b:b0:51:72:f6:5d:43:0d:de:99:fa:b5:38:92:d4:44:
38:6e:1b:3d:ba:ab:1b:e2:30:77:04:13:38:38:da:2a:14:cf:
ba:76:00:ef:ea:39:7b:85:a3:e0:60:6e:1f:0b:92:f2:61:90:
cd:c1:3a:d4:da:98:be:9c:a1:6b:86:f1:49:53:4f:ef:03:7a:
19:12:33:a6:8b:73:aa:da:96:8e:f3:1d:91:05:fa:27:ca:0f:
2f:77:18:c4:e4:cc:9a:34:28:39:45:26:2c:a9:cd:09:b1:3c:
88:d0:62:ac:f2:5b:61:8b:6c:2f:64:bd:8a:33:95:8b:ab:98:
cf:22:1b:07:98:b6:7c:92:5a:39:71:d7:2f:1f:b4:79:63:a0:
6e:c5:47:3a:07:2c:d0:cf:bd:3f:74:dc:fe:74:a1:bd:0a:05:
61:68:6e:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0
NTRDODRDMTYwHhcNMjYwOTIxMDIxOTQyWhcNMjYwOTI4MDIxOTQyWjAYMRYwFAYD
VQQDEw02YWIwOTQzZS02MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnVYN6cT0Xn+Oy/q9GaarEEApFCS/sGsgwFBPIWZ5/cTrIYxodl1GPOm3glcq
8h3A9+CklBiIfjssIaviIPnR9c2ct2uUTv8Rp+6Wt+UeBjPc/5DHbVT8fqklreG6
c+4lV/MeWwNGtHbVN2elPW7SjMRPZ9bBcncLq9OzuDA0jxOSOMMI8igMLT7qmk2n
0nBgM1NXOtsO2uTtnpMZAFlMveHu7PP4QBfeGEnZvPbUWAn4kKhzTPRpBnYgN6S/
WwqWo7QhvxDw5B4R6CA0+rcNFgkgz+YleYmZafzwJ9/9PUe59oqJjwYjADqUqgzH
vCmUnVKGnhtZ4nnh3tbiMnrLAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEa/z4hk
qtENrugu/09trPzjRK90MB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB
MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU
QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU
N1JEaTdWcVhxSGxGVElUQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHS/PzC0k1UsWdgnf47cmOAlcArhaXkgoMsWNoQFq6p8FyGOpO7XQeMF4tA9x
5qP8wdZqXLDRDORGsd0zBbdCV2Kwc5MzluPqmCRjXn5HJR1KqT+MpIIj/KPwoA4b
sFFy9l1DDd6Z+rU4ktREOG4bPbqrG+IwdwQTODjaKhTPunYA7+o5e4Wj4GBuHwuS
8mGQzcE61NqYvpyha4bxSVNP7wN6GRIzpotzqtqWjvMdkQX6J8oPL3cYxOTMmjQo
OUUmLKnNCbE8iNBirPJbYYtsL2S9ijOVi6uYzyIbB5i2fJJaOXHXLx+0eWOgbsVH
Ogcs0M+9P3Tc/nShvQoFYWhuDw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:43:24 2026 by rpki-client