
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json)
Hash identifier: 4UZv2q4agsXSP8J0WJBy6nn5QiVAnoSGKBaZQW322H4=
Subject key identifier: B6:B9:B0:8C:12:5D:35:5D:E5:CA:8D:0E:99:47:B9:EF:FC:86:61:C8
Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Certificate serial: 034B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
Manifest number: 0343
Signing time: Mon 27 Jul 2026 02:09:15 +0000
Manifest this update: Mon 27 Jul 2026 02:09:15 +0000
Manifest next update: Mon 03 Aug 2026 02:09:15 +0000
Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: YJOohtl/KIm706acykZXasN0v/kGQOjsOr7C/cDLZVI=)
2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: 36bHjTlr+0HE0f10oYmhOfC+GpQPqJLk/D3JPOs1dH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Validity
Not Before: Jul 27 02:09:15 2026 GMT
Not After : Aug 3 02:09:15 2026 GMT
Subject: CN=6a66bdcb-1740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:c1:98:11:a9:e7:7c:2e:4b:d8:cf:b0:e8:
d7:91:9a:df:fb:11:92:4f:ad:9b:ef:89:6d:2a:55:
5e:fd:19:7c:fe:c1:63:ae:ca:7c:10:7e:e6:4f:62:
90:2a:bf:b2:cd:6b:a8:5b:54:44:33:3a:9f:77:0e:
82:9d:4d:1a:0b:c9:7b:70:9c:ba:5c:71:ff:bc:7a:
55:09:1f:b8:09:72:90:fb:1b:05:f4:5e:93:0f:30:
8c:b4:05:5d:ef:88:34:5f:99:c8:23:96:10:ce:cf:
08:e4:d4:80:0e:f8:74:7b:e2:1a:74:45:0d:4d:00:
68:f6:d7:b5:ab:5c:38:87:11:cb:cc:14:3d:8b:ab:
cd:07:73:94:46:f9:1e:bf:e9:e5:d4:51:99:1e:08:
76:fb:b1:88:a8:b3:b6:a6:37:4a:d5:9b:74:54:0f:
bc:90:ec:eb:f3:3d:18:6f:06:30:0c:19:6c:2b:1e:
e3:c1:35:f9:66:64:2a:07:5e:b6:30:b5:46:61:ea:
4c:76:1d:3c:96:89:6e:a7:0a:ab:29:06:cf:ec:76:
9d:b1:ba:e4:a9:5a:6f:f3:b2:f4:c9:af:9b:5f:b6:
e7:56:21:7b:c5:c1:50:b5:82:97:6c:28:a0:12:4c:
a9:99:ab:07:d4:24:b0:39:d1:6e:83:b8:03:b9:19:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:B0:8C:12:5D:35:5D:E5:CA:8D:0E:99:47:B9:EF:FC:86:61:C8
X509v3 Authority Key Identifier:
keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:cd:ba:b4:5d:5c:2d:5d:84:f2:b1:7a:bb:d6:2a:48:e8:f8:
6e:3f:74:0e:9e:8b:24:80:8e:eb:f2:14:7c:d3:6e:e1:8a:92:
99:6b:1a:ea:cd:06:c5:ec:a6:95:88:5e:ff:71:fa:13:0f:49:
64:b7:8b:fc:07:d7:f5:e1:4f:d6:c0:b9:fd:d0:7e:c0:22:6e:
19:86:16:83:ce:54:1a:68:6a:3a:4b:37:73:08:ef:a6:4d:d2:
41:5b:09:77:30:b7:cd:6f:14:0d:58:e5:20:1d:b8:c4:77:e8:
2d:6b:78:ea:3d:5f:c7:26:58:5e:fe:8a:00:25:26:13:3b:70:
15:2b:ba:f1:e4:ca:40:98:27:43:04:b0:eb:96:c0:44:b4:5d:
86:e1:9f:d7:c7:fd:76:52:97:24:51:c7:a6:d7:13:02:ff:17:
5e:62:0a:16:8c:9f:0b:c4:88:ea:8c:36:ad:39:f3:46:66:7f:
63:72:41:ab:4d:d9:17:e6:3f:35:ed:94:d3:df:92:5a:0c:01:
d5:3c:d5:ec:c5:85:71:24:8d:6e:07:ec:df:cf:35:ab:dc:ce:
6b:4d:ea:b7:06:e8:9a:c8:b5:2c:47:1d:80:08:70:4a:ab:06:
09:2b:e0:cb:90:0f:2c:a9:a7:d0:75:08:c7:f5:ab:3d:5b:45:
30:1a:f1:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3
N0NGNkFGMDAwHhcNMjYwNzI3MDIwOTE1WhcNMjYwODAzMDIwOTE1WjAYMRYwFAYD
VQQDEw02YTY2YmRjYi0xNzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwnBmBGp53wuS9jPsOjXkZrf+xGST62b74ltKlVe/Rl8/sFjrsp8EH7mT2KQ
Kr+yzWuoW1REMzqfdw6CnU0aC8l7cJy6XHH/vHpVCR+4CXKQ+xsF9F6TDzCMtAVd
74g0X5nII5YQzs8I5NSADvh0e+IadEUNTQBo9te1q1w4hxHLzBQ9i6vNB3OURvke
v+nl1FGZHgh2+7GIqLO2pjdK1Zt0VA+8kOzr8z0YbwYwDBlsKx7jwTX5ZmQqB162
MLVGYepMdh08lolupwqrKQbP7HadsbrkqVpv87L0ya+bX7bnViF7xcFQtYKXbCig
EkypmasH1CSwOdFug7gDuRm81wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLa5sIwS
XTVd5cqNDplHue/8hmHIMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy
RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ
LWxWTktFTDFoQmgzejJyd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM826tF1cLV2E8rF6u9YqSOj4bj90Dp6LJICO6/IUfNNu4YqSmWsa6s0Gxeym
lYhe/3H6Ew9JZLeL/AfX9eFP1sC5/dB+wCJuGYYWg85UGmhqOks3cwjvpk3SQVsJ
dzC3zW8UDVjlIB24xHfoLWt46j1fxyZYXv6KACUmEztwFSu68eTKQJgnQwSw65bA
RLRdhuGf18f9dlKXJFHHptcTAv8XXmIKFoyfC8SI6ow2rTnzRmZ/Y3JBq03ZF+Y/
Ne2U09+SWgwB1TzV7MWFcSSNbgfs3881q9zOa03qtwbomsi1LEcdgAhwSqsGCSvg
y5APLKmn0HUIx/WrPVtFMBrxew==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:24 2026 by rpki-client