
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
File: -rY3Nmo7_ydyaOS_NFMMq86RvOY.mft (raw, json)
Hash identifier: KV8AKhQSxobq4OVN3Al+jn2NB769Jcz6vkDkbQmM778=
Subject key identifier: B1:1F:23:45:BB:13:7B:08:03:50:F2:85:E1:52:EE:41:CA:4B:B9:E2
Authority key identifier: FA:B6:37:36:6A:3B:FF:27:72:68:E4:BF:34:53:0C:AB:CE:91:BC:E6
Certificate issuer: /CN=A9154F63/serialNumber=FAB637366A3BFF277268E4BF34530CABCE91BCE6
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
Manifest number: 09
Signing time: Sun 15 Nov 2026 09:22:17 +0000
Manifest this update: Sun 15 Nov 2026 09:22:16 +0000
Manifest next update: Sun 22 Nov 2026 09:22:16 +0000
Files and hashes: 1: -rY3Nmo7_ydyaOS_NFMMq86RvOY.crl (hash: FqZxN1S7Wlb7vSnR0kBufBwEv4a88rkWbnURF1KeUYg=)
2: 84D63AB4D83511F180D8C7953066CEF9.roa (hash: qF8syILGQo53wDItJ55CVXM6mm83pdfeDcLX9VEF0q4=)
3: H1vZhiX2A9a23QM8f2wKKYyylV4.asa (hash: K1YtsB/dar6HwTE5JZZof7VfOomRrzzqUshSAsSrN68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.crl
rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 08:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154F63, serialNumber=FAB637366A3BFF277268E4BF34530CABCE91BCE6
Validity
Not Before: Nov 15 09:22:16 2026 GMT
Not After : Nov 22 09:22:16 2026 GMT
Subject: CN=6af979c9-abc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:14:95:d6:91:72:53:64:cc:07:15:07:da:
77:4c:4d:c9:d8:83:3f:9a:08:e8:f4:42:7e:5f:7a:
70:39:22:09:2d:90:0b:12:85:29:e8:5d:4f:b6:64:
f0:8e:60:65:7e:d3:08:2a:b0:a5:92:4f:d6:a3:d6:
9d:f1:0e:6b:be:f2:34:17:54:18:52:ea:e3:d6:78:
40:11:03:e2:26:be:26:d5:52:c6:ef:af:e2:b4:0e:
dd:2f:c6:4a:7a:62:de:7e:60:59:3a:31:33:3b:71:
b7:a9:57:6a:87:b9:a1:70:30:02:03:cd:be:53:91:
03:37:28:22:9e:c6:58:bd:92:7c:30:1e:55:77:80:
d8:08:77:af:8a:1b:7c:0d:aa:0d:7f:ab:08:b6:e6:
96:3b:8e:2f:0e:22:01:43:3e:5f:29:06:a3:ab:53:
e8:aa:3b:a6:2d:95:35:ef:e7:7a:f5:19:e7:05:64:
10:7f:af:76:51:8d:b4:6f:36:db:af:1e:fe:fa:63:
c5:f3:d8:c8:a3:44:cb:14:db:e8:a1:13:9d:6d:9c:
45:31:51:22:c4:4a:6c:16:cd:89:27:7c:4b:4c:05:
c2:34:e9:b6:c9:b4:fd:63:1f:a3:8d:d8:c9:a0:12:
bf:58:39:34:9b:05:a8:9e:f6:34:dd:d2:c6:3e:f2:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1F:23:45:BB:13:7B:08:03:50:F2:85:E1:52:EE:41:CA:4B:B9:E2
X509v3 Authority Key Identifier:
keyid:FA:B6:37:36:6A:3B:FF:27:72:68:E4:BF:34:53:0C:AB:CE:91:BC:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:00:51:c9:fb:71:3e:56:c4:72:af:de:4f:c5:f9:e9:85:ba:
f1:0a:25:74:cd:ee:af:cd:a4:a4:c1:e5:6b:cc:4d:ee:f5:9e:
6f:87:75:d4:3e:04:fa:bd:d1:96:65:6a:c6:f8:f6:38:5c:b9:
c7:a4:a9:64:0d:7a:56:c8:ec:0c:73:d0:4f:05:b7:7e:1c:9d:
55:4c:4a:e8:cf:57:6d:44:8c:1b:f2:74:23:93:31:b8:8c:a5:
5e:3a:65:9d:62:af:3d:fa:6e:be:18:0d:59:55:76:09:44:22:
2c:d6:c2:ec:91:0f:85:f1:39:42:45:17:e4:73:d8:ae:ec:bd:
e8:94:92:cb:7e:76:9f:d4:8f:10:32:4f:2b:b1:fb:ec:ee:15:
45:2c:a6:59:15:f2:90:4d:cb:b3:9c:ef:ec:e8:0f:0d:b6:ab:
35:cd:27:ad:6d:45:4e:13:7e:2b:8b:5c:23:2c:27:da:9d:b5:
9e:14:87:04:9b:fe:25:6e:cc:c7:43:9c:61:2e:b4:07:fb:05:
a2:3b:21:6f:ca:8f:78:82:99:25:ec:bc:14:bb:20:5d:38:5e:
23:15:ae:01:cc:5f:30:ea:96:9a:23:da:8b:61:31:70:7e:cc:
67:d6:19:5b:6e:fa:2a:b9:19:b5:9a:25:24:9d:63:57:ed:5b:
d6:61:2e:d0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NEY2MzExMC8GA1UEBRMoRkFCNjM3MzY2QTNCRkYyNzcyNjhFNEJGMzQ1MzBDQUJD
RTkxQkNFNjAeFw0yNjExMTUwOTIyMTZaFw0yNjExMjIwOTIyMTZaMBgxFjAUBgNV
BAMTDTZhZjk3OWM5LWFiYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgqxSV1pFyU2TMBxUH2ndMTcnYgz+aCOj0Qn5fenA5IgktkAsShSnoXU+2ZPCO
YGV+0wgqsKWST9aj1p3xDmu+8jQXVBhS6uPWeEARA+ImvibVUsbvr+K0Dt0vxkp6
Yt5+YFk6MTM7cbepV2qHuaFwMAIDzb5TkQM3KCKexli9knwwHlV3gNgId6+KG3wN
qg1/qwi25pY7ji8OIgFDPl8pBqOrU+iqO6YtlTXv53r1GecFZBB/r3ZRjbRvNtuv
Hv76Y8Xz2MijRMsU2+ihE51tnEUxUSLESmwWzYknfEtMBcI06bbJtP1jH6ON2Mmg
Er9YOTSbBaie9jTd0sY+8unBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsR8jRbsT
ewgDUPKF4VLuQcpLueIwHwYDVR0jBBgwFoAU+rY3Nmo7/ydyaOS/NFMMq86RvOYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RjYzL0E3OEIyOUU2RDgz
MjExRjFCQ0QwMDAxQzJGNjZDRUY5Ly1yWTNObW83X3lkeWFPU19ORk1NcTg2UnZP
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXJZM05tbzdfeWR5YU9TX05GTU1xODZSdk9ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0
RjYzL0E3OEIyOUU2RDgzMjExRjFCQ0QwMDAxQzJGNjZDRUY5Ly1yWTNObW83X3lk
eWFPU19ORk1NcTg2UnZPWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB+AFHJ+3E+VsRyr95PxfnphbrxCiV0ze6vzaSkweVrzE3u9Z5vh3XUPgT6vdGW
ZWrG+PY4XLnHpKlkDXpWyOwMc9BPBbd+HJ1VTEroz1dtRIwb8nQjkzG4jKVeOmWd
Yq89+m6+GA1ZVXYJRCIs1sLskQ+F8TlCRRfkc9iu7L3olJLLfnaf1I8QMk8rsfvs
7hVFLKZZFfKQTcuznO/s6A8Ntqs1zSetbUVOE34ri1wjLCfanbWeFIcEm/4lbszH
Q5xhLrQH+wWiOyFvyo94gpkl7LwUuyBdOF4jFa4BzF8w6paaI9qLYTFwfsxn1hlb
bvoquRm1miUknWNX7VvWYS7Q
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:27:42 2026 by rpki-client