
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier: S4CqyvI0AOhkhUDQNZg/JAMrhsi87TMtsJ9/SN3PAJs=
Subject key identifier: 9F:9B:F9:82:16:57:FE:8C:1A:A6:3C:2C:B2:2B:2D:E1:B7:6B:82:47
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 027B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number: 0269
Signing time: Tue 13 Oct 2026 02:36:04 +0000
Manifest this update: Tue 13 Oct 2026 02:36:04 +0000
Manifest next update: Tue 20 Oct 2026 02:36:04 +0000
Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: 37AgqjGXIGgDymhWHRGm18Lh3BGsjk07NOsrC1Gy9Dw=)
2: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=)
3: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=)
4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Oct 13 02:36:04 2026 GMT
Not After : Oct 20 02:36:04 2026 GMT
Subject: CN=6acd9914-1cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:c6:dc:62:32:06:66:21:ec:e1:44:0c:f7:
36:4c:2b:1b:ec:a9:47:c5:66:28:62:1b:22:3d:37:
f7:f8:77:ee:68:ce:00:8a:7a:a4:d1:76:1d:b4:83:
19:53:78:2b:f1:82:53:9e:e4:af:b3:18:b7:27:b0:
11:48:f1:d6:fa:71:cc:7b:15:fa:e8:3b:cc:4a:bb:
c1:1a:2a:03:d3:9c:ab:bd:b9:06:ae:19:0c:1f:57:
e3:81:15:86:d6:be:04:ad:74:88:d9:05:a9:7b:bc:
2b:00:7a:cf:e8:bc:cf:3c:c3:be:0e:9c:f8:8f:62:
7b:38:a5:49:aa:dd:6d:c8:e2:4a:b2:8c:44:4c:0c:
43:ca:be:03:ba:90:ef:d7:e7:c9:92:30:15:4f:a1:
6a:44:18:bd:f0:fb:62:a7:7d:cc:e6:ba:78:bf:95:
7d:e9:7a:d0:49:6c:79:64:93:79:1a:49:2d:0f:cd:
42:3e:89:b3:85:08:6d:74:79:a8:8f:9e:95:52:7a:
5a:0b:a7:01:e8:55:52:93:b2:00:21:e2:5d:4e:69:
aa:d6:3a:12:81:a1:a1:61:36:ef:79:b3:f9:54:10:
8c:61:8c:8c:57:da:8c:89:99:0c:34:bd:4f:3f:33:
ab:3b:de:34:ca:ce:05:29:bb:95:d1:56:1f:af:92:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:F9:82:16:57:FE:8C:1A:A6:3C:2C:B2:2B:2D:E1:B7:6B:82:47
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:3c:04:54:23:4c:57:df:72:e1:01:ef:ce:c1:4a:8a:7a:5b:
27:0a:89:01:a8:85:5d:a0:8e:e3:ff:3c:ac:6a:1b:be:22:b9:
9d:dc:d3:65:b6:41:5a:1a:7d:a6:25:70:9a:26:d6:c1:08:93:
04:ae:ae:6c:1f:cb:e3:3e:7c:f6:75:33:01:9d:5a:cb:56:7d:
74:b3:ea:88:c7:03:2a:5c:0a:57:1e:7a:f3:5c:a1:05:8d:b1:
74:1d:f5:af:f2:67:f6:27:45:5b:f2:20:92:d1:76:8c:ab:8f:
72:44:80:8d:18:13:67:9d:70:37:3a:67:35:bc:48:c9:21:11:
2e:5b:9d:50:52:1b:d5:57:d2:b8:9a:ed:1b:a0:03:65:aa:23:
51:17:74:6a:39:10:68:e4:8b:b7:52:2a:14:5a:32:a6:07:63:
df:33:91:c7:89:72:ef:1c:96:bd:63:6f:c1:a0:fc:bf:0d:85:
6f:8d:55:53:4d:8d:e3:83:20:d2:60:83:8e:28:f5:00:43:fc:
73:ea:33:1c:4f:3f:91:e8:c4:ea:16:46:4a:b3:97:2e:a1:ca:
9d:4d:ea:df:f7:80:e5:81:cf:27:5a:e2:b0:dd:30:1a:9e:d4:
1d:cf:12:fa:ab:9d:52:f1:5c:86:56:40:d2:d8:27:8f:61:49:
42:82:6d:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC
M0VCOEI2MzAwHhcNMjYxMDEzMDIzNjA0WhcNMjYxMDIwMDIzNjA0WjAYMRYwFAYD
VQQDEw02YWNkOTkxNC0xY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6I7G3GIyBmYh7OFEDPc2TCsb7KlHxWYoYhsiPTf3+HfuaM4Ainqk0XYdtIMZ
U3gr8YJTnuSvsxi3J7ARSPHW+nHMexX66DvMSrvBGioD05yrvbkGrhkMH1fjgRWG
1r4ErXSI2QWpe7wrAHrP6LzPPMO+Dpz4j2J7OKVJqt1tyOJKsoxETAxDyr4DupDv
1+fJkjAVT6FqRBi98Ptip33M5rp4v5V96XrQSWx5ZJN5GkktD81CPomzhQhtdHmo
j56VUnpaC6cB6FVSk7IAIeJdTmmq1joSgaGhYTbvebP5VBCMYYyMV9qMiZkMNL1P
PzOrO940ys4FKbuV0VYfr5LokwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+b+YIW
V/6MGqY8LLIrLeG3a4JHMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB
ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2
VS1rcE9LTTA3R3V6NjR0akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABjwEVCNMV99y4QHvzsFKinpbJwqJAaiFXaCO4/88rGobviK5ndzTZbZBWhp9
piVwmibWwQiTBK6ubB/L4z589nUzAZ1ay1Z9dLPqiMcDKlwKVx5681yhBY2xdB31
r/Jn9idFW/IgktF2jKuPckSAjRgTZ51wNzpnNbxIySERLludUFIb1VfSuJrtG6AD
ZaojURd0ajkQaOSLt1IqFFoypgdj3zORx4ly7xyWvWNvwaD8vw2Fb41VU02N44Mg
0mCDjij1AEP8c+ozHE8/kejE6hZGSrOXLqHKnU3q3/eA5YHPJ1risN0wGp7UHc8S
+qudUvFchlZA0tgnj2FJQoJtyQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:18:42 2026 by rpki-client