
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json)
Hash identifier: EBRJyejyyFtn6cs0N323yx2J2f+xmfvD219AvOYrpzs=
Subject key identifier: 12:F9:E8:A7:25:09:41:27:7E:60:C2:4D:D7:20:5E:69:60:58:EC:30
Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Certificate serial: 0AC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
Manifest number: 0ABB
Signing time: Mon 12 Oct 2026 19:36:02 +0000
Manifest this update: Mon 12 Oct 2026 19:36:02 +0000
Manifest next update: Mon 19 Oct 2026 19:36:02 +0000
Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: 55WV8GUNyYLp2/Y7mT3hyBjQiTZ67Raiy9bFoUTtdTc=)
2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: gzbpBLHjuyIbIn1f9T7JlFlrPpRUrvtd4lxp7A9hka0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 19:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2755 (0xac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Validity
Not Before: Oct 12 19:36:02 2026 GMT
Not After : Oct 19 19:36:02 2026 GMT
Subject: CN=6acd36a2-bdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:5d:b9:ff:05:63:75:ee:15:d9:b0:65:11:
b0:fe:69:9b:07:a0:1a:68:d5:3d:ce:6f:c3:64:a5:
19:d5:7e:e7:44:59:9c:04:55:84:85:2e:00:26:a9:
3c:41:47:a3:34:ef:72:3b:91:9c:ae:f3:f1:9e:d5:
4c:39:ba:37:8a:a7:b1:d3:ea:ec:cb:4e:7f:2a:8a:
5a:46:6a:7b:26:7d:a4:cb:e0:53:9c:1b:6b:38:bb:
36:b3:5f:58:e4:67:7c:0d:af:ec:17:d4:33:72:75:
a6:2a:3d:68:1f:be:bc:3e:ce:f4:a2:b5:47:98:77:
3b:21:05:7d:72:19:13:f5:e5:a3:9d:14:0b:a3:c4:
c6:d7:e5:a2:ba:f3:84:b7:d6:af:13:d1:30:21:50:
2f:af:d8:04:ee:0b:5b:6d:2f:38:b0:a0:0e:86:17:
ba:bc:34:41:7d:9d:9c:d7:51:aa:3d:8a:d5:e4:69:
18:92:24:c4:09:b3:7d:ff:44:48:e1:5e:b7:fa:e7:
5d:37:e6:a1:b2:15:5d:e3:4c:67:d1:b0:cf:4d:42:
95:72:fa:46:6e:59:91:e4:50:62:fb:a2:9c:7b:1e:
70:bc:ed:9b:a4:fa:fe:10:25:e5:e1:a7:0f:48:fa:
7e:bc:96:b5:e3:df:78:4d:55:4f:16:4e:a9:26:f4:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:E8:A7:25:09:41:27:7E:60:C2:4D:D7:20:5E:69:60:58:EC:30
X509v3 Authority Key Identifier:
keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:5a:90:8c:27:bd:30:23:f3:11:ab:72:bc:bd:8d:f9:d9:51:
f4:0a:98:47:3e:e5:58:8d:cf:e2:fc:d3:dc:8d:32:04:4d:13:
bc:33:eb:ee:7a:04:b4:60:bb:f2:60:51:26:5a:4a:14:47:80:
a4:45:06:ae:85:85:d2:01:9a:97:07:64:c5:20:ff:a9:ad:b1:
e4:70:43:75:d2:bf:e2:a5:c5:60:38:10:f3:1f:62:ba:47:0a:
2a:3b:87:77:34:7f:79:33:95:4f:77:42:16:5a:2a:e3:9e:df:
f4:ba:1b:cf:89:ae:8f:74:87:a0:da:2e:c3:5b:09:22:69:7d:
c4:ea:d0:6e:94:15:0b:a6:57:b0:81:f7:73:89:bd:48:a0:f3:
8c:a5:fe:32:92:9d:93:fd:f5:2d:34:bf:a7:91:b3:73:41:40:
ff:f7:7e:ff:d1:44:a9:d8:27:20:27:fb:98:3e:28:3f:fa:e3:
a3:9d:cd:b7:98:e0:61:2a:30:18:79:0b:4e:13:1b:db:2f:06:
d1:04:3a:27:8f:df:79:46:85:ec:5c:c9:17:b4:c6:41:b2:f6:
22:75:1b:f9:6a:1b:65:d6:52:bf:73:cd:ea:70:87:83:49:b9:
2d:68:1b:88:a2:6d:df:dd:34:97:c6:17:e7:e1:da:a0:ca:43:
ac:80:9b:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4
ODhGQTYzNDQwHhcNMjYxMDEyMTkzNjAyWhcNMjYxMDE5MTkzNjAyWjAYMRYwFAYD
VQQDEw02YWNkMzZhMi1iZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA14dduf8FY3XuFdmwZRGw/mmbB6AaaNU9zm/DZKUZ1X7nRFmcBFWEhS4AJqk8
QUejNO9yO5GcrvPxntVMObo3iqex0+rsy05/KopaRmp7Jn2ky+BTnBtrOLs2s19Y
5Gd8Da/sF9QzcnWmKj1oH768Ps70orVHmHc7IQV9chkT9eWjnRQLo8TG1+WiuvOE
t9avE9EwIVAvr9gE7gtbbS84sKAOhhe6vDRBfZ2c11GqPYrV5GkYkiTECbN9/0RI
4V63+uddN+ahshVd40xn0bDPTUKVcvpGblmR5FBi+6Kcex5wvO2bpPr+ECXl4acP
SPp+vJa14994TVVPFk6pJvQfTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBL56Kcl
CUEnfmDCTdcgXmlgWOwwMB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz
OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5
NjhwRW9VdmJjeGFJajZZMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM1qQjCe9MCPzEatyvL2N+dlR9AqYRz7lWI3P4vzT3I0yBE0TvDPr7noEtGC7
8mBRJlpKFEeApEUGroWF0gGalwdkxSD/qa2x5HBDddK/4qXFYDgQ8x9iukcKKjuH
dzR/eTOVT3dCFloq457f9Lobz4muj3SHoNouw1sJIml9xOrQbpQVC6ZXsIH3c4m9
SKDzjKX+MpKdk/31LTS/p5Gzc0FA//d+/9FEqdgnICf7mD4oP/rjo53Nt5jgYSow
GHkLThMb2y8G0QQ6J4/feUaF7FzJF7TGQbL2InUb+WobZdZSv3PN6nCHg0m5LWgb
iKJt3900l8YX5+HaoMpDrICbYQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:37:26 2026 by rpki-client