
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier: t8Me4KlMRoonWLyd0FEhxl5NWee+NEpmx5khadyTQCE=
Subject key identifier: E6:90:0C:73:C4:37:D8:F4:4D:96:D5:FF:DE:6D:CE:F2:A1:70:3E:F1
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer: /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial: 02EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number: 02E3
Signing time: Sun 11 Oct 2026 01:24:23 +0000
Manifest this update: Sun 11 Oct 2026 01:24:23 +0000
Manifest next update: Sun 18 Oct 2026 01:24:23 +0000
Files and hashes: 1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: eMAzTw4KM65UQkeVbmI9VqxeqaQ/fhPIl8fwtr9KQ3E=)
2: oMdy5kzjAyoSbArhjS-NYZ-b3hM.asa (hash: n2kIMp96ssGTJd5NFtbFt9lhgVF98uEeuBTbEwn87ko=)
3: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: wIOi13R4/dA4DTHTJMojbNkaTsZfB7lqp2vrNL+3Iok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 01:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Validity
Not Before: Oct 11 01:24:23 2026 GMT
Not After : Oct 18 01:24:23 2026 GMT
Subject: CN=6acae547-24f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:63:72:0c:c5:61:a3:24:af:4f:35:4f:d2:
cd:22:1c:80:08:a9:32:22:11:e7:54:7a:ff:01:38:
55:00:ef:87:c6:94:6b:50:8f:02:e9:44:0a:f1:8e:
15:36:4b:2d:a2:bf:57:e5:b3:0f:0d:fb:07:83:3f:
25:72:90:90:36:64:92:3e:c1:da:2e:6d:6c:62:d5:
5b:45:23:af:f9:4f:2b:d0:5a:b4:3d:14:13:ef:2d:
c1:a9:17:09:3f:c4:b4:ce:39:7d:77:89:55:02:df:
c3:b6:bb:9c:50:c0:0f:a9:3a:64:6c:fd:34:81:4c:
6a:e6:cf:08:d2:03:a9:07:c1:67:0c:fc:21:bf:73:
99:b7:9a:47:df:e0:8b:4e:3c:9a:46:3b:91:85:44:
b1:a5:b9:d2:62:ee:c1:fa:f1:3d:f4:73:fc:45:d9:
b9:7c:03:d6:91:52:95:de:5e:7a:87:0c:b6:b0:48:
05:7f:a2:25:3e:7f:ca:f7:7e:6a:8b:23:93:1c:c6:
af:03:98:99:8e:b0:79:4f:a3:22:f5:57:27:47:84:
8a:dd:69:aa:9a:6e:a0:b8:ca:10:02:b8:af:e2:6d:
36:74:89:d6:0c:4b:95:f2:8b:69:32:92:fb:28:33:
c6:b1:a2:2b:2f:d1:c2:7d:c1:8a:18:1d:73:f5:ae:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:90:0C:73:C4:37:D8:F4:4D:96:D5:FF:DE:6D:CE:F2:A1:70:3E:F1
X509v3 Authority Key Identifier:
keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:32:2a:da:fe:f1:bb:88:a1:77:77:d0:dd:b2:6a:c8:1a:85:
94:8e:2a:03:34:8e:d2:17:51:07:52:76:0d:9d:49:d3:ae:1b:
3e:5b:61:4f:4c:92:5d:8e:4f:f7:fd:bc:95:61:93:3e:6c:61:
8d:e8:5e:26:a1:f8:93:2b:19:45:18:e7:d8:2a:36:a3:bb:d7:
f0:d3:54:40:dc:83:f2:8a:47:b0:92:3d:09:8d:99:ef:8c:e1:
47:7f:9b:79:72:2b:d7:7e:19:3e:f4:5f:9b:34:b3:22:ad:37:
39:99:32:68:89:8e:dc:60:7f:37:aa:d8:5e:b0:ec:f3:19:35:
27:c0:31:63:5c:ce:cf:c4:9b:b4:07:5e:b5:ea:09:38:97:ba:
ca:65:b0:d7:72:b7:80:64:e8:f3:27:50:75:4c:10:60:22:50:
8f:99:81:68:2c:1b:fc:fc:20:97:07:db:84:20:85:05:80:ab:
e5:fd:38:9d:91:c5:75:fa:94:83:70:63:ad:84:bc:87:80:07:
c2:fb:e5:4b:0e:2a:a2:4d:62:b2:7f:b5:3b:f8:c0:f2:10:ae:
f5:21:ce:52:3b:50:18:54:2f:e7:e0:80:e3:53:15:86:b1:48:
35:32:f8:01:c8:e6:07:3c:39:45:98:f9:63:f8:7f:87:e1:e5:
d1:f6:70:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgxNEUxMTAvBgNVBAUTKENBMzgwMzY5OUFENUIwOTA2QzAwNzk3QTNBMUU5Q0Q5
NUI2NTkxQjEwHhcNMjYxMDExMDEyNDIzWhcNMjYxMDE4MDEyNDIzWjAYMRYwFAYD
VQQDEw02YWNhZTU0Ny0yNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Y5jcgzFYaMkr081T9LNIhyACKkyIhHnVHr/AThVAO+HxpRrUI8C6UQK8Y4V
Nkstor9X5bMPDfsHgz8lcpCQNmSSPsHaLm1sYtVbRSOv+U8r0Fq0PRQT7y3BqRcJ
P8S0zjl9d4lVAt/DtrucUMAPqTpkbP00gUxq5s8I0gOpB8FnDPwhv3OZt5pH3+CL
TjyaRjuRhUSxpbnSYu7B+vE99HP8Rdm5fAPWkVKV3l56hwy2sEgFf6IlPn/K935q
iyOTHMavA5iZjrB5T6Mi9VcnR4SK3Wmqmm6guMoQAriv4m02dInWDEuV8otpMpL7
KDPGsaIrL9HCfcGKGB1z9a6PuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaQDHPE
N9j0TZbV/95tzvKhcD7xMB8GA1UdIwQYMBaAFMo4A2ma1bCQbAB5ejoenNlbZZGx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE0RS84MEM5NUFBRTVG
MjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNKQnNBSGw2T2g2YzJWdGxr
YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lqZ0RhWnJWc0pCc0FIbDZPaDZjMlZ0bGtiRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODE0RS84MEM5NUFBRTVGMjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNK
QnNBSGw2T2g2YzJWdGxrYkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvTIq2v7xu4ihd3fQ3bJqyBqFlI4qAzSO0hdRB1J2DZ1J064bPlthT0ySXY5P
9/28lWGTPmxhjeheJqH4kysZRRjn2Co2o7vX8NNUQNyD8opHsJI9CY2Z74zhR3+b
eXIr134ZPvRfmzSzIq03OZkyaImO3GB/N6rYXrDs8xk1J8AxY1zOz8SbtAdeteoJ
OJe6ymWw13K3gGTo8ydQdUwQYCJQj5mBaCwb/PwglwfbhCCFBYCr5f04nZHFdfqU
g3BjrYS8h4AHwvvlSw4qok1isn+1O/jA8hCu9SHOUjtQGFQv5+CA41MVhrFINTL4
AcjmBzw5RZj5Y/h/h+Hl0fZwwQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:52:42 2026 by rpki-client