
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json)
Hash identifier: LTiJtWP1jG1+b6atwU/2qmvyLE/n8bju/8IT4STVfm4=
Subject key identifier: B0:F8:C0:18:D6:DB:CB:78:86:2B:EA:1A:F7:6C:BC:63:5B:50:CA:80
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial: 0D6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
Manifest number: 0D62
Signing time: Fri 02 Oct 2026 18:14:26 +0000
Manifest this update: Fri 02 Oct 2026 18:14:25 +0000
Manifest next update: Fri 09 Oct 2026 18:14:25 +0000
Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: 38gBsL+lseP2yDUeIGi05pcNkQ44HwivD1Q/YQwXdsc=)
2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: SEF/lx3q5Pq/2u0T3UwtlNSUgGkL6u5d5TOpErwQ7Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3437 (0xd6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Validity
Not Before: Oct 2 18:14:25 2026 GMT
Not After : Oct 9 18:14:25 2026 GMT
Subject: CN=6abff481-8df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:9c:1a:eb:52:3e:29:9f:e1:79:31:d4:a9:
29:d6:27:17:54:71:5f:15:e4:88:b4:ec:75:3a:77:
30:f7:12:99:aa:ae:c6:ad:88:ea:86:c4:3b:1e:c3:
90:19:6b:e9:17:ab:83:11:b1:70:96:a7:e0:95:0a:
c7:d7:27:63:b4:73:99:08:38:99:45:e1:c2:72:45:
35:fc:9a:30:7f:ba:af:3b:db:e1:ab:46:e3:fc:0a:
79:3b:9f:ff:51:ec:6e:5a:ec:43:62:d8:60:67:67:
85:64:1a:3c:07:6a:e5:46:9c:4e:62:2a:bf:e8:21:
58:aa:a9:83:8a:e5:93:62:44:11:eb:d0:a7:32:b1:
1a:d0:06:45:f7:d2:22:76:97:9b:d6:4d:89:7b:75:
92:c6:f2:7f:7e:52:53:8a:25:d5:84:15:24:d3:7d:
f7:4b:ca:59:ca:f1:88:ca:42:49:e5:5a:9d:1b:58:
21:51:fc:02:72:c6:e6:b7:87:8a:3b:59:6a:2d:12:
c3:c9:12:01:79:d5:0d:f0:36:cc:83:05:86:78:0a:
c8:a4:2c:41:d6:63:aa:63:e0:ce:58:cc:98:ef:03:
01:30:a3:df:82:97:84:09:10:8f:0d:2b:8b:10:bb:
7f:f4:89:01:6e:9d:c5:04:ef:75:14:5d:be:01:10:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:C0:18:D6:DB:CB:78:86:2B:EA:1A:F7:6C:BC:63:5B:50:CA:80
X509v3 Authority Key Identifier:
keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c8:8c:9e:d2:98:53:33:07:d1:cf:91:14:54:b6:5c:85:7d:
fc:ac:eb:3e:ee:bb:8c:8b:6a:86:30:7c:24:e3:9b:7a:31:c6:
44:ba:02:c9:3e:2b:e6:f6:3c:50:6b:3f:0f:37:87:10:2f:ba:
21:fd:de:0c:d8:e2:9b:50:9f:10:a0:89:0f:c6:53:f4:fe:10:
cd:95:55:95:01:91:32:6a:e6:b0:c5:28:f6:b3:6a:ff:e9:ad:
16:3a:5b:d2:9d:fd:4a:e4:e4:08:3d:46:77:36:5b:83:a0:92:
91:77:e5:b6:47:db:85:11:50:a7:9b:12:39:58:6e:38:ed:cd:
f4:3e:ca:5b:53:28:b2:f1:2a:7b:a0:51:33:34:0d:ec:55:00:
c7:79:9b:51:b3:14:3c:1e:2a:9c:8e:15:9e:1d:7c:04:18:a4:
bf:54:57:99:ad:b7:16:f5:90:9f:05:eb:7f:53:e6:81:ab:4e:
e0:83:b8:50:43:d4:73:f0:11:1f:6e:2e:08:62:9f:7f:19:ab:
71:c7:ca:05:0b:8b:38:c9:73:45:f6:c5:42:94:96:b2:19:90:
8b:25:81:d9:76:6d:ae:d9:90:5a:55:8c:c9:bd:5e:54:ec:5d:
99:81:d3:6d:43:60:99:f9:4c:dc:93:41:8c:6d:bd:37:d9:2c:
f9:31:84:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC
ODFFNkFEMUQwHhcNMjYxMDAyMTgxNDI1WhcNMjYxMDA5MTgxNDI1WjAYMRYwFAYD
VQQDEw02YWJmZjQ4MS04ZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1b6cGutSPimf4Xkx1Kkp1icXVHFfFeSItOx1Oncw9xKZqq7GrYjqhsQ7HsOQ
GWvpF6uDEbFwlqfglQrH1ydjtHOZCDiZReHCckU1/Jowf7qvO9vhq0bj/Ap5O5//
UexuWuxDYthgZ2eFZBo8B2rlRpxOYiq/6CFYqqmDiuWTYkQR69CnMrEa0AZF99Ii
dpeb1k2Je3WSxvJ/flJTiiXVhBUk0333S8pZyvGIykJJ5VqdG1ghUfwCcsbmt4eK
O1lqLRLDyRIBedUN8DbMgwWGeArIpCxB1mOqY+DOWMyY7wMBMKPfgpeECRCPDSuL
ELt/9IkBbp3FBO91FF2+ARArZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLD4wBjW
28t4hivqGvdsvGNbUMqAMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG
OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5
VHR1UmpONGJjMFc0SG1yUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADsiMntKYUzMH0c+RFFS2XIV9/KzrPu67jItqhjB8JOObejHGRLoCyT4r5vY8
UGs/DzeHEC+6If3eDNjim1CfEKCJD8ZT9P4QzZVVlQGRMmrmsMUo9rNq/+mtFjpb
0p39SuTkCD1GdzZbg6CSkXfltkfbhRFQp5sSOVhuOO3N9D7KW1MosvEqe6BRMzQN
7FUAx3mbUbMUPB4qnI4Vnh18BBikv1RXma23FvWQnwXrf1PmgatO4IO4UEPUc/AR
H24uCGKffxmrccfKBQuLOMlzRfbFQpSWshmQiyWB2XZtrtmQWlWMyb1eVOxdmYHT
bUNgmflM3JNBjG29N9ks+TGEcQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:30:40 2026 by rpki-client