
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json)
Hash identifier: y3OyRGz53Ky9UNVZBTmP2PpiTQUEpPz/smtp2x1dC8k=
Subject key identifier: CA:A9:90:3B:EA:0A:D8:0E:E1:49:0F:0C:54:67:AE:8B:FD:21:08:D3
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
Manifest number: 012B
Signing time: Thu 05 Nov 2026 06:40:30 +0000
Manifest this update: Thu 05 Nov 2026 06:40:30 +0000
Manifest next update: Thu 12 Nov 2026 06:40:30 +0000
Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: AMT0UUm0m88HDW6dz8bbcKhBgJBdhJu0bhO7pqIJNUM=)
2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: N7637sJ4ur4GTyF+Kgrvo5G1u42FtOcjBttkvkfEsuY=)
3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: SPeu1aYoWIkZ55wzSsA2uT5JSXB8/d3J/ThweSnmrRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 06:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Validity
Not Before: Nov 5 06:40:30 2026 GMT
Not After : Nov 12 06:40:30 2026 GMT
Subject: CN=6aec24de-cbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:e1:3c:55:c2:e8:0b:53:0f:9b:46:30:89:
aa:f7:80:1e:58:ba:43:56:f9:ca:c5:ff:d9:af:ff:
d8:e2:31:4d:d6:9f:3b:6c:66:5a:c0:85:2c:e2:42:
8e:e0:09:8d:d8:55:31:70:a3:02:e7:96:0f:f3:d5:
5d:0d:2b:17:23:79:16:38:03:d5:37:65:45:40:3f:
26:da:da:8c:44:cf:8a:91:42:23:a1:89:06:d3:a0:
7b:5f:61:4e:ad:41:5f:03:34:ad:13:97:4e:df:90:
ce:de:1d:41:df:24:02:14:9f:9d:9a:19:96:e9:aa:
96:68:c3:61:71:2e:2d:da:29:0b:bd:91:97:33:8d:
92:ef:16:27:50:85:f2:7f:87:10:0a:fd:d2:ae:67:
92:79:ef:c9:5b:ad:6e:a7:4b:53:63:76:55:3f:a8:
98:a9:7c:0f:73:d1:22:bc:85:83:55:db:19:04:46:
5e:f4:29:e5:64:e5:03:60:db:9b:3d:2b:be:ed:89:
58:8d:7d:7a:e1:52:53:c5:33:a9:2d:b2:a5:1c:dc:
a9:9e:8f:7a:82:8a:a0:f9:9e:6c:3e:8d:d5:1c:e0:
40:58:61:f5:8b:18:b9:fc:88:4c:14:8b:74:92:a8:
e6:ef:dc:e6:3b:64:c2:ca:d7:d5:3e:a1:a5:32:39:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A9:90:3B:EA:0A:D8:0E:E1:49:0F:0C:54:67:AE:8B:FD:21:08:D3
X509v3 Authority Key Identifier:
keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:76:cc:1f:f5:d0:2d:46:60:7c:9e:38:ca:8f:1b:ab:ff:7d:
69:16:0e:78:b9:59:c3:18:08:dc:f7:6d:37:b1:6c:a9:52:52:
a6:9c:39:77:9c:e6:bb:bb:09:2e:ce:86:63:c8:3c:ca:1f:20:
2c:50:6c:7b:68:26:f6:f0:c7:92:63:24:29:22:65:0d:b9:6a:
9a:68:a0:ad:85:2a:33:a8:52:c6:5e:b7:10:f5:4c:35:d2:1d:
f3:51:49:0c:a5:fb:ab:d0:9b:07:01:bf:cf:93:31:f7:fa:89:
73:09:77:d8:3d:a6:60:90:be:e2:1e:45:f9:59:53:3d:2f:f1:
62:26:8e:32:ff:06:93:00:91:9b:95:32:d4:f5:e5:f1:b2:1f:
81:ce:21:e5:d9:6c:14:f3:91:9a:b4:3d:60:b2:90:87:09:12:
b3:ce:80:8d:db:f6:5d:31:e9:f6:61:72:a1:9b:33:e7:36:24:
6d:9f:1b:e2:53:74:11:50:ef:cb:69:60:ac:8e:de:45:c1:4c:
13:ed:67:b7:e3:6e:87:bb:87:eb:12:93:bd:ad:df:e0:72:e2:
1c:d3:f2:86:66:67:07:94:3b:d8:4c:4e:00:35:a0:42:75:44:
4e:ad:f5:a2:93:95:5e:59:f0:a0:a2:27:18:41:2b:27:b4:e9:
cf:1a:41:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNEMjExMTAvBgNVBAUTKDgxOEJCOTAzMzI3MTdGOTM1NzMwREFGMTQ3MDhGRkMy
RjYwNUYwNUYwHhcNMjYxMTA1MDY0MDMwWhcNMjYxMTEyMDY0MDMwWjAYMRYwFAYD
VQQDEw02YWVjMjRkZS1jYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4pLhPFXC6AtTD5tGMImq94AeWLpDVvnKxf/Zr//Y4jFN1p87bGZawIUs4kKO
4AmN2FUxcKMC55YP89VdDSsXI3kWOAPVN2VFQD8m2tqMRM+KkUIjoYkG06B7X2FO
rUFfAzStE5dO35DO3h1B3yQCFJ+dmhmW6aqWaMNhcS4t2ikLvZGXM42S7xYnUIXy
f4cQCv3SrmeSee/JW61up0tTY3ZVP6iYqXwPc9EivIWDVdsZBEZe9CnlZOUDYNub
PSu+7YlYjX164VJTxTOpLbKlHNypno96goqg+Z5sPo3VHOBAWGH1ixi5/IhMFIt0
kqjm79zmO2TCytfVPqGlMjkSAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqpkDvq
CtgO4UkPDFRnrov9IQjTMB8GA1UdIwQYMBaAFIGLuQMycX+TVzDa8UcI/8L2BfBf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0QyMS8zOEMyNjFFNDFD
MzgxMUYwQUE4NTdEMjdDNEY5QUUwMi9nWXU1QXpKeGY1TlhNTnJ4UndqX3d2WUY4
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0QyMS8zOEMyNjFFNDFDMzgxMUYwQUE4NTdEMjdDNEY5QUUwMi9nWXU1QXpKeGY1
TlhNTnJ4UndqX3d2WUY4RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACnbMH/XQLUZgfJ44yo8bq/99aRYOeLlZwxgI3PdtN7FsqVJSppw5d5zmu7sJ
Ls6GY8g8yh8gLFBse2gm9vDHkmMkKSJlDblqmmigrYUqM6hSxl63EPVMNdId81FJ
DKX7q9CbBwG/z5Mx9/qJcwl32D2mYJC+4h5F+VlTPS/xYiaOMv8GkwCRm5Uy1PXl
8bIfgc4h5dlsFPORmrQ9YLKQhwkSs86Ajdv2XTHp9mFyoZsz5zYkbZ8b4lN0EVDv
y2lgrI7eRcFME+1nt+Nuh7uH6xKTva3f4HLiHNPyhmZnB5Q72ExOADWgQnVETq31
opOVXlnwoKInGEErJ7TpzxpBMg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:32:36 2026 by rpki-client