
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
File: YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json)
Hash identifier: Zi4ZLugcvabga9kzfsr3iXgRaUSGLP3Rv77Pthftiks=
Subject key identifier: 0E:09:CB:01:5D:75:47:C1:CA:18:D8:FA:AF:FC:67:F7:50:D1:C4:9E
Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Certificate serial: 04E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
Manifest number: 04DC
Signing time: Thu 16 Apr 2026 23:43:51 +0000
Manifest this update: Thu 16 Apr 2026 23:43:51 +0000
Manifest next update: Thu 23 Apr 2026 23:43:51 +0000
Files and hashes: 1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: 1qOHreUS6JLDNbWhAFa1yzJ1qa/Zp8Nr4MV9YYCGp8s=)
2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: QGxKWKuwU4koWUT3cHCTo7iWv57eqY9PU0NUcULxizU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Validity
Not Before: Apr 16 23:43:51 2026 GMT
Not After : Apr 23 23:43:51 2026 GMT
Subject: CN=69e17437-824a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:41:ae:33:aa:f7:42:84:c1:68:2b:37:d8:
b6:cf:78:55:0d:1d:15:57:38:ff:74:89:a6:75:b0:
d2:e2:a7:c8:36:bf:c5:11:24:da:51:eb:ba:95:4d:
8b:b0:53:02:7c:58:9e:d9:12:9a:ff:d4:79:40:41:
d9:18:9d:16:71:fa:37:ff:ad:7a:ff:ae:6b:e1:4c:
8f:2e:5c:f0:b1:d4:28:de:76:3f:a3:5b:88:17:98:
61:46:08:74:b2:04:a1:2b:ad:8c:c1:a0:81:08:9b:
48:82:f0:1e:e4:15:0a:a6:c2:d3:12:6d:66:8e:c1:
35:a2:4f:cc:cd:ed:f3:56:8e:a9:f2:14:f6:54:46:
c5:57:21:7d:de:be:f5:6d:8a:1c:23:d2:da:55:e5:
9c:22:ca:bd:88:a2:aa:31:c6:f1:f3:25:89:a3:ee:
83:be:1f:a0:be:bd:95:bd:e4:fc:f5:9b:e1:54:c2:
f6:cb:4d:93:68:f1:50:8b:18:98:bf:72:fa:66:b6:
d1:e3:9b:a6:e7:97:f9:39:c6:40:6d:0b:eb:af:6b:
dc:cc:37:23:8a:d7:c4:70:22:b8:27:8e:f3:7f:2b:
f2:be:4c:a7:e7:8d:f1:3b:2d:15:de:cd:7d:be:21:
62:37:29:0f:68:44:fe:8f:d7:a1:bc:b8:0c:d3:6e:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:09:CB:01:5D:75:47:C1:CA:18:D8:FA:AF:FC:67:F7:50:D1:C4:9E
X509v3 Authority Key Identifier:
keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:2a:61:72:e3:f1:b6:83:43:75:32:6d:7a:12:59:dd:76:
57:04:a5:2b:5b:7e:c2:4b:3c:6e:29:f4:04:80:33:9c:0f:79:
b9:0c:f1:d8:f8:e5:bc:c8:f9:10:83:1c:d1:ef:8c:d0:52:61:
ac:a0:58:bc:09:4d:90:b9:5b:56:79:b8:51:d7:69:03:cb:4e:
1a:a0:fd:0a:fe:0e:09:61:14:9f:3f:3b:d7:78:38:72:7b:60:
c4:d0:80:d7:ac:61:c6:e6:cb:1d:30:de:8a:5c:06:51:39:f0:
d0:0e:f1:57:39:a3:86:91:3f:19:d2:8f:77:f9:c0:ce:bd:cf:
89:47:f1:d5:f1:83:cd:6d:b5:d4:ea:32:0d:a1:8a:fa:0c:63:
8f:9c:f4:4e:95:d5:73:dd:f6:a0:52:c3:81:5c:40:30:bd:f5:
02:26:92:2c:9f:89:a3:4a:e4:2c:0e:f4:01:a6:06:02:dc:5c:
0d:f5:b9:ff:cd:e3:23:0c:0f:8c:13:c4:36:93:65:51:fa:ef:
bc:16:61:23:a3:af:66:37:e2:ec:65:fd:12:cb:2c:81:19:99:
1d:a6:9e:00:78:ec:5d:00:71:14:28:09:a0:3f:29:17:36:75:
7b:23:97:59:a6:fe:bc:7d:0f:ea:47:c4:56:0b:9c:c3:c3:62:
2b:ea:d2:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhENjIxMTAvBgNVBAUTKDYyMUI4MUMxMDlFNUFBNzhEODI5RjMwQTU3REEzNTMz
MDgyNTRGNjkwHhcNMjYwNDE2MjM0MzUxWhcNMjYwNDIzMjM0MzUxWjAYMRYwFAYD
VQQDEw02OWUxNzQzNy04MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwJBrjOq90KEwWgrN9i2z3hVDR0VVzj/dImmdbDS4qfINr/FESTaUeu6lU2L
sFMCfFie2RKa/9R5QEHZGJ0Wcfo3/616/65r4UyPLlzwsdQo3nY/o1uIF5hhRgh0
sgShK62MwaCBCJtIgvAe5BUKpsLTEm1mjsE1ok/Mze3zVo6p8hT2VEbFVyF93r71
bYocI9LaVeWcIsq9iKKqMcbx8yWJo+6Dvh+gvr2VveT89ZvhVML2y02TaPFQixiY
v3L6ZrbR45um55f5OcZAbQvrr2vczDcjitfEcCK4J47zfyvyvkyn543xOy0V3s19
viFiNykPaET+j9ehvLgM0265dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4JywFd
dUfByhjY+q/8Z/dQ0cSeMB8GA1UdIwQYMBaAFGIbgcEJ5ap42CnzClfaNTMIJU9p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEQ2Mi9CQ0I0MEE1ODVG
Q0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFuallLZk1LVjlvMU13Z2xU
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lodUJ3UW5scW5qWUtmTUtWOW8xTXdnbFQyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEQ2Mi9CQ0I0MEE1ODVGQ0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFu
allLZk1LVjlvMU13Z2xUMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYN0qYXLj8baDQ3UybXoSWd12VwSlK1t+wks8bin0BIAznA95uQzx2PjlvMj5
EIMc0e+M0FJhrKBYvAlNkLlbVnm4UddpA8tOGqD9Cv4OCWEUnz8713g4cntgxNCA
16xhxubLHTDeilwGUTnw0A7xVzmjhpE/GdKPd/nAzr3PiUfx1fGDzW211OoyDaGK
+gxjj5z0TpXVc932oFLDgVxAML31AiaSLJ+Jo0rkLA70AaYGAtxcDfW5/83jIwwP
jBPENpNlUfrvvBZhI6OvZjfi7GX9EsssgRmZHaaeAHjsXQBxFCgJoD8pFzZ1eyOX
Wab+vH0P6kfEVgucw8NiK+rSEA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:01 2026 by rpki-client