
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
File: YoElNRN3xZBrhJugUmeYfheuLeQ.mft (raw, json)
Hash identifier: acTbn93vsDsASVlFX1K01uisN28cma11XkZc6998JHU=
Subject key identifier: 0B:C9:75:69:32:A5:38:8A:6E:82:16:DD:41:E1:D4:03:8D:18:5D:CB
Authority key identifier: 62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4
Certificate issuer: /CN=A914E801/serialNumber=628125351377C5906B849BA05267987E17AE2DE4
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
Manifest number: 62
Signing time: Fri 23 Oct 2026 08:40:46 +0000
Manifest this update: Fri 23 Oct 2026 08:40:46 +0000
Manifest next update: Fri 30 Oct 2026 08:40:46 +0000
Files and hashes: 1: YoElNRN3xZBrhJugUmeYfheuLeQ.crl (hash: WJZSzr6sgIp4tPJTqo0PIg4pe0xY82lHzzvvM9WLm+Q=)
2: 4AC8B7E8A29D11F1A26B6F213311F970.roa (hash: dxMdek+58sIZa90avTdWzvPwFD/txWFdftq82oLuB4g=)
3: E426603AA29C11F1B8B5B60D3311F970.roa (hash: Nv3QmjlVhbAgsVcim0US8JDU8UTwNmJE6Th9Fn9Q2oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl
rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 08:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E801, serialNumber=628125351377C5906B849BA05267987E17AE2DE4
Validity
Not Before: Oct 23 08:40:46 2026 GMT
Not After : Oct 30 08:40:46 2026 GMT
Subject: CN=6adb1d8e-ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:46:87:85:dd:39:9d:17:80:2a:55:8d:49:
3a:6b:1e:57:74:98:02:4e:e9:a8:2f:24:7d:b8:a1:
62:af:d0:7c:f7:97:fc:7e:06:96:e0:f4:d3:2b:57:
89:5e:4e:4b:aa:a8:49:18:e2:9b:af:1d:73:97:7e:
13:76:0c:c0:89:d9:f7:d9:75:56:32:09:f2:b8:06:
8b:8e:37:a6:a5:11:8b:dc:d5:01:5a:24:d7:83:57:
b7:ff:f5:a2:9a:8f:07:54:ce:9b:41:02:f1:77:26:
2d:63:5d:30:03:f1:0d:bd:33:e0:b4:77:14:2b:29:
c1:d0:d5:cc:63:50:f6:5e:f5:29:9e:70:48:35:5b:
3b:53:15:57:57:37:a9:8c:9a:6a:f1:86:30:a5:f4:
bd:c9:54:e7:0b:97:2c:6f:14:e0:cb:f5:f3:0a:d0:
a2:d5:b6:4b:b9:15:84:b3:10:08:03:b0:56:42:26:
e3:11:d2:70:8f:18:48:04:ed:e6:82:d9:0b:39:9a:
9c:96:03:60:84:88:af:0a:6c:6f:20:d5:f0:93:10:
2d:f4:6f:a0:31:56:e1:3d:47:d1:3f:73:5b:34:02:
2c:bb:c2:76:dc:a6:f1:75:05:ed:aa:59:59:34:32:
05:bf:f5:19:1c:17:8e:e3:b8:7c:bd:39:c5:39:2f:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C9:75:69:32:A5:38:8A:6E:82:16:DD:41:E1:D4:03:8D:18:5D:CB
X509v3 Authority Key Identifier:
keyid:62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:59:b8:65:94:be:38:e1:29:8d:98:85:2a:e1:8c:f5:93:23:
62:a5:e1:71:b9:7e:88:84:68:0c:de:30:2a:d6:3e:9f:9e:89:
ba:53:ab:ee:30:8f:20:56:a1:06:9c:aa:eb:ee:9a:bc:da:28:
99:a2:ff:5d:fe:d7:98:7f:6f:bd:31:03:03:1d:44:22:c7:2a:
15:1a:a9:29:5f:62:4b:fa:6b:f9:67:5d:11:4f:76:34:0b:53:
14:19:46:9e:23:5d:6b:49:bb:08:5a:f0:e3:98:12:70:4a:78:
9d:55:99:c7:95:12:8c:5a:e4:ec:bb:f6:9c:6a:64:91:53:cf:
ee:3d:15:f0:5b:49:50:6c:b3:98:85:1c:de:38:da:21:f9:28:
2e:f9:df:67:fb:fa:67:22:4d:38:5b:65:48:75:86:77:09:7f:
09:1f:4c:dd:ca:f0:f5:41:5c:bc:aa:8b:18:9d:f3:b1:ac:ed:
fc:7e:67:97:ae:e2:e3:c3:58:52:1d:af:1a:92:c5:31:7f:18:
f0:f8:60:aa:d9:8f:60:d9:c6:4f:05:32:5d:b1:56:70:51:38:
e0:3c:30:49:07:f6:3b:06:5a:d2:0e:28:eb:6b:23:0a:a2:d7:
72:16:a9:88:53:c5:76:f4:02:d1:0a:05:43:bc:88:50:f5:2b:
36:9f:38:41
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTgwMTExMC8GA1UEBRMoNjI4MTI1MzUxMzc3QzU5MDZCODQ5QkEwNTI2Nzk4N0Ux
N0FFMkRFNDAeFw0yNjEwMjMwODQwNDZaFw0yNjEwMzAwODQwNDZaMBgxFjAUBgNV
BAMTDTZhZGIxZDhlLWNjZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5QkaHhd05nReAKlWNSTprHld0mAJO6agvJH24oWKv0Hz3l/x+Bpbg9NMrV4le
TkuqqEkY4puvHXOXfhN2DMCJ2ffZdVYyCfK4BouON6alEYvc1QFaJNeDV7f/9aKa
jwdUzptBAvF3Ji1jXTAD8Q29M+C0dxQrKcHQ1cxjUPZe9SmecEg1WztTFVdXN6mM
mmrxhjCl9L3JVOcLlyxvFODL9fMK0KLVtku5FYSzEAgDsFZCJuMR0nCPGEgE7eaC
2Qs5mpyWA2CEiK8KbG8g1fCTEC30b6AxVuE9R9E/c1s0Aiy7wnbcpvF1Be2qWVk0
MgW/9RkcF47juHy9OcU5LyRlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC8l1aTKl
OIpughbdQeHUA40YXcswHwYDVR0jBBgwFoAUYoElNRN3xZBrhJugUmeYfheuLeQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFODAxLzEwOEVCMDYyM0Uy
NzExRjE5RTlCNzM5N0I1ODMzNzczL1lvRWxOUk4zeFpCcmhKdWdVbWVZZmhldUxl
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWW9FbE5STjN4WkJyaEp1Z1VtZVlmaGV1TGVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
ODAxLzEwOEVCMDYyM0UyNzExRjE5RTlCNzM5N0I1ODMzNzczL1lvRWxOUk4zeFpC
cmhKdWdVbWVZZmhldUxlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQANWbhllL444SmNmIUq4Yz1kyNipeFxuX6IhGgM3jAq1j6fnom6U6vuMI8gVqEG
nKrr7pq82iiZov9d/teYf2+9MQMDHUQixyoVGqkpX2JL+mv5Z10RT3Y0C1MUGUae
I11rSbsIWvDjmBJwSnidVZnHlRKMWuTsu/acamSRU8/uPRXwW0lQbLOYhRzeONoh
+Sgu+d9n+/pnIk04W2VIdYZ3CX8JH0zdyvD1QVy8qosYnfOxrO38fmeXruLjw1hS
Ha8aksUxfxjw+GCq2Y9g2cZPBTJdsVZwUTjgPDBJB/Y7BlrSDijrayMKotdyFqmI
U8V29ALRCgVDvIhQ9Ss2nzhB
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:11:37 2026 by rpki-client