
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier: tcJk6dSNGVhqyoic/m0jDmZfBFvyOaDtTvowGoC/ZrY=
Subject key identifier: A3:B0:74:38:ED:FA:8B:03:01:26:E3:88:0D:22:0E:05:13:37:1A:28
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial: 089C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number: 087F
Signing time: Sun 20 Sep 2026 20:45:50 +0000
Manifest this update: Sun 20 Sep 2026 20:45:49 +0000
Manifest next update: Sun 27 Sep 2026 20:45:49 +0000
Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: V3YI785RXkW3AjEUsopf8rIzSg8B9GBSUnB6XqfviHI=)
2: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=)
3: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=)
4: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204 (0x89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Validity
Not Before: Sep 20 20:45:49 2026 GMT
Not After : Sep 27 20:45:49 2026 GMT
Subject: CN=6ab045fe-d6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8d:42:6c:3a:b3:7f:0d:0b:6b:02:03:5c:e1:
b3:d0:07:ad:3c:84:56:b6:6c:b6:4c:d7:b9:46:6d:
cd:e6:e8:49:07:1e:83:1c:13:d3:30:48:08:8d:86:
63:36:ea:78:19:27:41:b5:f9:1f:60:13:fe:ca:f0:
2e:37:c5:7c:3f:10:0b:65:fa:66:3d:55:b3:0f:de:
7d:76:f6:0a:84:40:a8:a8:1c:01:5c:95:c5:a3:7f:
5c:dc:07:d6:9a:af:af:53:34:60:a9:92:23:ac:2b:
02:6f:83:13:7e:b9:37:b5:ff:7d:25:18:ef:35:57:
b4:64:34:3c:49:9e:44:44:6c:21:1f:35:67:36:48:
4d:d7:ec:c6:18:fb:78:5b:88:4a:8a:e4:f0:44:93:
fd:46:39:b6:4a:b8:30:6b:4c:a1:cc:71:82:64:c9:
cc:8b:48:2a:70:01:6a:ba:78:04:60:4f:92:91:f5:
0a:f6:a9:92:3d:51:0a:bf:ac:52:99:93:81:f9:9d:
ad:1f:b5:36:2a:26:19:f3:fd:fb:a3:74:f3:10:d7:
36:4b:36:f2:86:71:57:3c:92:43:36:c2:5f:c0:ad:
83:40:39:14:b6:60:27:cd:10:a1:bc:95:dc:49:ee:
2e:64:81:c6:cc:af:9f:8a:cf:7e:17:fb:08:54:35:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B0:74:38:ED:FA:8B:03:01:26:E3:88:0D:22:0E:05:13:37:1A:28
X509v3 Authority Key Identifier:
keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:4b:4e:dd:ad:37:1b:3b:d6:5f:53:b3:84:56:75:e8:0a:f3:
38:f7:7e:da:34:1d:70:c7:3d:4f:91:fb:af:97:8b:7f:14:2b:
1f:14:d5:35:7a:b1:66:16:6d:6b:7c:10:1a:e2:6b:8f:08:ed:
d4:b0:f0:10:62:ef:7b:66:8b:9b:09:39:ee:87:c3:fc:21:51:
46:c3:ef:39:7c:49:66:ab:dd:bc:ea:31:d9:3d:df:f7:3e:92:
62:23:aa:9f:1c:65:ac:9e:0c:23:61:ee:44:4f:bd:67:9c:61:
11:68:1a:94:4e:0f:b5:72:85:06:f4:73:bd:c5:c0:7b:90:19:
60:15:8d:66:50:a1:24:ae:57:e3:76:0a:49:2d:06:d0:9b:36:
6b:33:3d:a6:ab:81:bc:8a:5b:02:7c:d3:8c:6b:dd:1a:89:fd:
92:b6:7b:00:42:95:50:2f:65:ec:36:80:6d:7b:03:cd:71:a1:
a2:d9:45:c6:7e:93:e8:e5:00:eb:98:e3:88:e1:e6:b3:68:1f:
18:b5:36:05:a2:77:16:66:07:73:e2:e2:35:ae:27:1e:33:22:
0d:d1:d7:05:14:a5:f2:eb:7e:d7:1d:8d:6d:e8:b0:bd:4b:31:
67:99:ba:2a:37:75:a6:d0:dd:6f:d5:d2:62:05:d2:6a:7c:3a:
56:13:0f:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAzOTUxMTAvBgNVBAUTKDYyQ0Q2RTY1MEQyMDlFNTBFRUZENjZDMzUyODhCNjA2
RjM2MkU4MEYwHhcNMjYwOTIwMjA0NTQ5WhcNMjYwOTI3MjA0NTQ5WjAYMRYwFAYD
VQQDEw02YWIwNDVmZS1kNmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA741CbDqzfw0LawIDXOGz0AetPIRWtmy2TNe5Rm3N5uhJBx6DHBPTMEgIjYZj
Nup4GSdBtfkfYBP+yvAuN8V8PxALZfpmPVWzD959dvYKhECoqBwBXJXFo39c3AfW
mq+vUzRgqZIjrCsCb4MTfrk3tf99JRjvNVe0ZDQ8SZ5ERGwhHzVnNkhN1+zGGPt4
W4hKiuTwRJP9Rjm2Srgwa0yhzHGCZMnMi0gqcAFqungEYE+SkfUK9qmSPVEKv6xS
mZOB+Z2tH7U2KiYZ8/37o3TzENc2SzbyhnFXPJJDNsJfwK2DQDkUtmAnzRChvJXc
Se4uZIHGzK+fis9+F/sIVDUknQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOwdDjt
+osDASbjiA0iDgUTNxooMB8GA1UdIwQYMBaAFGLNbmUNIJ5Q7v1mw1KItgbzYugP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDM5NS9FQjY3MjI2NDE0
Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25sRHVfV2JEVW9pMkJ2Tmk2
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzMXVaUTBnbmxEdV9XYkRVb2kyQnZOaTZBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDM5NS9FQjY3MjI2NDE0Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25s
RHVfV2JEVW9pMkJ2Tmk2QTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc0tO3a03GzvWX1OzhFZ16ArzOPd+2jQdcMc9T5H7r5eLfxQrHxTVNXqxZhZt
a3wQGuJrjwjt1LDwEGLve2aLmwk57ofD/CFRRsPvOXxJZqvdvOox2T3f9z6SYiOq
nxxlrJ4MI2HuRE+9Z5xhEWgalE4PtXKFBvRzvcXAe5AZYBWNZlChJK5X43YKSS0G
0Js2azM9pquBvIpbAnzTjGvdGon9krZ7AEKVUC9l7DaAbXsDzXGhotlFxn6T6OUA
65jjiOHms2gfGLU2BaJ3FmYHc+LiNa4nHjMiDdHXBRSl8ut+1x2NbeiwvUsxZ5m6
Kjd1ptDdb9XSYgXSanw6VhMP9A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:52:10 2026 by rpki-client