
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
File: s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json)
Hash identifier: Dz+pOoHp1zhcbUKKVKgWuX5iR13iwOb053tWnAD8sXo=
Subject key identifier: 6E:30:25:E2:04:81:5F:DC:58:81:29:49:BA:2B:C0:D7:CF:95:E3:2C
Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
Certificate issuer: /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Certificate serial: 15CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
Manifest number: 15BF
Signing time: Mon 28 Sep 2026 16:48:08 +0000
Manifest this update: Mon 28 Sep 2026 16:48:08 +0000
Manifest next update: Mon 05 Oct 2026 16:48:08 +0000
Files and hashes: 1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: kgJ0yvrBuYqd+lrAE22uMSsu7xZdxS2KThUmTDNvcHk=)
2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: 5Bn9xVT0OoInPvH1a9V4nq7AiAWvnU82ucBXwyFRxNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 16:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5579 (0x15cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150B91, serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Validity
Not Before: Sep 28 16:48:08 2026 GMT
Not After : Oct 5 16:48:08 2026 GMT
Subject: CN=6aba9a48-d6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:3a:bf:be:e9:e2:ff:76:ca:88:59:93:5e:
e1:12:e9:28:34:9d:8c:e9:5e:8e:1d:68:28:bf:a6:
d1:90:d9:15:de:8f:60:1d:84:73:32:86:07:9b:53:
39:01:cd:05:5f:e0:e8:f7:79:29:72:39:93:22:80:
a7:b9:6c:b9:2c:0f:ce:21:9f:3d:d9:27:ec:e2:84:
41:df:c6:d1:bc:a5:00:71:e9:54:f0:23:51:da:2a:
00:27:7d:3f:84:7c:50:37:2b:0b:69:3f:a0:bb:9e:
6c:81:11:9a:73:34:43:c7:2d:dc:b2:f6:39:d9:ad:
1f:1f:f4:ff:f0:e3:b4:80:eb:ea:13:66:13:17:6c:
2a:ab:e7:1b:b7:a5:32:03:1c:be:01:c9:ca:94:0c:
99:5f:76:7c:32:60:73:91:44:12:84:d3:90:bd:c2:
e4:0c:ff:8d:51:0c:2c:4f:71:1c:9d:25:9b:16:2c:
57:9f:73:5d:eb:66:70:ab:98:7f:3c:3e:4a:3c:22:
49:04:b1:68:d4:7f:7f:96:de:cc:43:02:75:6b:57:
58:8c:40:31:8f:58:16:dd:23:24:08:a7:61:4b:d9:
64:a1:23:45:d4:3d:bc:db:54:32:5b:83:63:22:40:
90:da:85:66:5c:73:ae:3e:7e:2a:7f:a0:e1:0e:fd:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:30:25:E2:04:81:5F:DC:58:81:29:49:BA:2B:C0:D7:CF:95:E3:2C
X509v3 Authority Key Identifier:
keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:44:3b:9c:f8:fd:04:26:d8:26:59:c8:32:bc:7a:65:88:d5:
59:31:f3:35:ef:71:ed:e4:2a:50:65:3b:fe:c5:45:f9:3c:6c:
d5:69:f9:59:b8:f4:37:d0:ad:8f:42:8e:4b:81:95:30:aa:2a:
fe:87:ca:fc:ab:48:bc:b2:69:ef:af:47:0d:24:c6:c7:00:81:
13:6d:08:df:e0:f4:e3:c6:99:07:f8:97:f7:75:26:53:fa:9d:
8e:57:e8:f4:da:cc:5e:93:24:d2:99:8c:87:4c:56:00:0f:a1:
f8:64:de:b3:cb:70:2c:26:86:80:11:64:2b:8b:b0:6b:72:5e:
4d:ca:e8:97:6c:f8:ec:6f:d6:ae:86:54:11:4a:7d:c2:3d:58:
de:cd:4a:a7:97:8a:fe:77:ad:52:1d:8a:f4:f1:ee:b4:24:82:
45:dd:7d:0e:1e:39:d8:0d:9a:39:7d:72:6d:82:aa:75:e4:0d:
2f:93:38:de:d0:bb:1b:fe:ae:8f:90:b9:fb:6c:d2:2e:0a:cb:
ca:ef:4a:78:fb:da:11:bd:5e:78:61:bd:04:b9:0f:55:a9:dc:
3c:b2:3e:d6:c7:35:66:81:10:9b:24:0e:f3:1e:c5:1a:c1:9b:
d8:8e:42:20:a8:74:d1:18:76:42:da:8a:33:18:16:77:fb:bc:
92:ad:85:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBCOTExMTAvBgNVBAUTKEIzNUE3MkU1NkYwOTAyQzdFMUI4RDgxMkM1RDgzNjU0
MTFEREEzMUQwHhcNMjYwOTI4MTY0ODA4WhcNMjYxMDA1MTY0ODA4WjAYMRYwFAYD
VQQDEw02YWJhOWE0OC1kNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfs6v77p4v92yohZk17hEukoNJ2M6V6OHWgov6bRkNkV3o9gHYRzMoYHm1M5
Ac0FX+Do93kpcjmTIoCnuWy5LA/OIZ892Sfs4oRB38bRvKUAcelU8CNR2ioAJ30/
hHxQNysLaT+gu55sgRGaczRDxy3csvY52a0fH/T/8OO0gOvqE2YTF2wqq+cbt6Uy
Axy+AcnKlAyZX3Z8MmBzkUQShNOQvcLkDP+NUQwsT3EcnSWbFixXn3Nd62Zwq5h/
PD5KPCJJBLFo1H9/lt7MQwJ1a1dYjEAxj1gW3SMkCKdhS9lkoSNF1D2821QyW4Nj
IkCQ2oVmXHOuPn4qf6DhDv0qiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4wJeIE
gV/cWIEpSborwNfPleMsMB8GA1UdIwQYMBaAFLNacuVvCQLH4bjYEsXYNlQR3aMd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEI5MS83NjMwNEE3ODVB
OTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFzZmh1TmdTeGRnMlZCSGRv
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MxcHk1VzhKQXNmaHVOZ1N4ZGcyVkJIZG94MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEI5MS83NjMwNEE3ODVBOTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFz
Zmh1TmdTeGRnMlZCSGRveDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANkQ7nPj9BCbYJlnIMrx6ZYjVWTHzNe9x7eQqUGU7/sVF+Txs1Wn5Wbj0N9Ct
j0KOS4GVMKoq/ofK/KtIvLJp769HDSTGxwCBE20I3+D048aZB/iX93UmU/qdjlfo
9NrMXpMk0pmMh0xWAA+h+GTes8twLCaGgBFkK4uwa3JeTcrol2z47G/WroZUEUp9
wj1Y3s1Kp5eK/netUh2K9PHutCSCRd19Dh452A2aOX1ybYKqdeQNL5M43tC7G/6u
j5C5+2zSLgrLyu9KePvaEb1eeGG9BLkPVancPLI+1sc1ZoEQmyQO8x7FGsGb2I5C
IKh00Rh2QtqKMxgWd/u8kq2Fdw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 04:07:34 2026 by rpki-client