
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
File: ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json)
Hash identifier: HDuy/AIRW9D2Kmyyv87FHHdCEEU2SEzOLmBnHxshjJY=
Subject key identifier: 4C:95:0E:AA:57:54:1C:B5:C3:C5:50:B5:29:71:F6:DB:71:3F:80:F8
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial: 0AC0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
Manifest number: 0AB6
Signing time: Thu 16 Apr 2026 19:23:07 +0000
Manifest this update: Thu 16 Apr 2026 19:23:06 +0000
Manifest next update: Thu 23 Apr 2026 19:23:06 +0000
Files and hashes: 1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: 1GARfmMjUJizo0uCi6CIQT96JWsdnd4WsSNvO5YPM9I=)
2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2752 (0xac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Validity
Not Before: Apr 16 19:23:06 2026 GMT
Not After : Apr 23 19:23:06 2026 GMT
Subject: CN=69e1371b-97d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:5f:d7:e6:98:62:6f:2c:2d:86:e1:31:29:
f4:69:85:1e:1d:13:ab:36:33:1b:55:45:04:58:16:
4e:45:d1:ed:7a:99:5b:82:d7:61:6a:a0:a1:42:b4:
83:f4:e5:79:70:c5:2c:cb:b1:e5:07:2c:76:c5:d6:
c8:ed:2a:e1:3b:a1:af:c1:88:1c:1b:79:cf:f6:aa:
80:22:2b:26:d0:0a:0d:1e:e8:be:95:18:dd:c8:a6:
f7:1a:48:41:20:e5:f9:71:f3:75:eb:41:49:f3:6f:
54:35:4e:d1:e2:9a:ec:84:46:c3:47:83:56:f8:63:
c3:9a:38:1d:c8:f1:48:05:22:27:4a:87:80:9f:a3:
b8:ba:97:3e:cb:5a:db:b1:11:1e:20:35:26:70:19:
c7:ef:cf:00:29:e6:c6:b0:ea:30:e7:76:72:2d:6c:
5a:d0:f3:ac:4e:4e:cb:5f:78:26:1c:3a:bf:69:7b:
07:a1:02:03:7c:72:ef:53:6c:8f:a4:a4:5d:9f:61:
b6:1c:45:8a:04:b4:01:b0:79:10:f4:00:59:be:98:
22:ca:13:8c:10:39:6a:4e:ef:ed:b7:33:7c:a7:7e:
70:8d:cf:7f:a5:f6:b3:1f:e9:79:57:17:55:fb:ba:
4e:05:94:c9:fb:1e:61:81:4e:f9:81:89:22:49:b8:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:0E:AA:57:54:1C:B5:C3:C5:50:B5:29:71:F6:DB:71:3F:80:F8
X509v3 Authority Key Identifier:
keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:fc:d5:2a:00:19:f5:1d:62:8a:3c:58:92:f4:51:28:09:
ae:08:e7:88:6e:a9:db:2b:7b:c5:9f:db:60:34:14:d6:1b:04:
e6:6e:fe:e9:dc:ea:7b:36:38:98:33:70:d7:1e:95:0c:32:26:
51:79:c9:24:95:ea:76:42:7d:d1:97:c6:30:25:e9:50:12:ec:
9f:20:e3:c2:dd:87:54:d2:8f:34:95:e1:9e:c7:63:08:f4:29:
e7:d2:4d:9f:b2:84:3b:d5:a0:fe:7c:c5:f9:d2:28:d0:87:4f:
d0:32:dc:0e:59:9a:06:9f:06:df:e9:fc:cd:17:b9:17:ff:30:
50:bf:de:22:da:2d:53:ff:f5:7b:a4:cf:53:c9:b5:fa:2d:c0:
f6:a5:12:84:e2:36:d5:fc:61:c7:bb:ac:01:e3:23:07:69:18:
56:cc:ed:ce:e1:bb:bf:93:39:80:14:9f:a2:46:34:6b:a6:fd:
c8:1e:22:a1:18:14:06:a3:4e:c9:b0:46:1d:50:fa:44:8b:53:
f7:10:7c:e6:7b:76:d9:40:1b:eb:db:aa:62:ac:d2:1a:a8:be:
27:ae:68:d7:0b:9e:fd:93:3f:0d:b1:20:82:3f:f0:4d:bb:17:
d6:73:5b:d1:0a:c3:41:08:db:6f:c9:3a:80:31:f8:fb:32:14:
c2:39:a9:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDlGMkU1Nzg4RUY3OTU4NUJBQjc2MTk4NzdEMzk2MjdB
QjJFNUQ1MTkwHhcNMjYwNDE2MTkyMzA2WhcNMjYwNDIzMTkyMzA2WjAYMRYwFAYD
VQQDEw02OWUxMzcxYi05N2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoqFf1+aYYm8sLYbhMSn0aYUeHROrNjMbVUUEWBZORdHteplbgtdhaqChQrSD
9OV5cMUsy7HlByx2xdbI7SrhO6GvwYgcG3nP9qqAIism0AoNHui+lRjdyKb3GkhB
IOX5cfN160FJ829UNU7R4prshEbDR4NW+GPDmjgdyPFIBSInSoeAn6O4upc+y1rb
sREeIDUmcBnH788AKebGsOow53ZyLWxa0POsTk7LX3gmHDq/aXsHoQIDfHLvU2yP
pKRdn2G2HEWKBLQBsHkQ9ABZvpgiyhOMEDlqTu/ttzN8p35wjc9/pfazH+l5VxdV
+7pOBZTJ+x5hgU75gYkiSbjGdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyVDqpX
VBy1w8VQtSlx9ttxP4D4MB8GA1UdIwQYMBaAFJ8uV4jveVhbq3YZh305Ynqy5dUZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80NTdBOEU4Mjcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdGdXJkaG1IZlRsaWVyTGwx
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL255NVhpTzk1V0Z1cmRobUhmVGxpZXJMbDFSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTdBNi80NTdBOEU4MjczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdG
dXJkaG1IZlRsaWVyTGwxUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiIj81SoAGfUdYoo8WJL0USgJrgjniG6p2yt7xZ/bYDQU1hsE5m7+6dzqezY4
mDNw1x6VDDImUXnJJJXqdkJ90ZfGMCXpUBLsnyDjwt2HVNKPNJXhnsdjCPQp59JN
n7KEO9Wg/nzF+dIo0IdP0DLcDlmaBp8G3+n8zRe5F/8wUL/eItotU//1e6TPU8m1
+i3A9qUShOI21fxhx7usAeMjB2kYVsztzuG7v5M5gBSfokY0a6b9yB4ioRgUBqNO
ybBGHVD6RItT9xB85nt22UAb69uqYqzSGqi+J65o1wue/ZM/DbEggj/wTbsX1nNb
0QrDQQjbb8k6gDH4+zIUwjmpIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:55 2026 by rpki-client