
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json)
Hash identifier: uHDa/hLY+XseXFIPOEMu5fRFXvQyk+cUQP815iHnEgw=
Subject key identifier: C9:2C:B6:82:3D:96:DF:18:EA:D8:C9:17:9D:64:AB:BA:6B:E8:EF:B3
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 03A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
Manifest number: 0375
Signing time: Fri 25 Sep 2026 00:45:26 +0000
Manifest this update: Fri 25 Sep 2026 00:45:26 +0000
Manifest next update: Fri 02 Oct 2026 00:45:26 +0000
Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: ghxF/YW84YA68qdPo5jA5kutYNTQXw/AiheclBIDggE=)
2: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ayI2v9zEaoadhkrRa+ZcLsyQwGLPommiSdSXuXbqNDA=)
3: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: PPilQKcKXmCzfDra94ptz+UOBe/ruKL5vBBrgys75yQ=)
4: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: UazZSGRsaobkFh+uwdDtJ065Ep6bEbys8yH2m9dsJpw=)
5: 69046BD0ECFE11F0B05C9076386F56BC.roa (hash: YCe2AE1AYEPbcU1s9LwUlVk97WjIwXee65C9XOQSVi0=)
6: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: U6gY9KKT7NSCpx8jpV/iJKW5bvGforRTQeZvJLFkBWs=)
7: 35AB985C68B511F18E116D7B7F47A888.roa (hash: zJzm+IxndwR1rSvg7Wy91Pwrmnj3T3uEe3l4l9/HMCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Sep 25 00:45:26 2026 GMT
Not After : Oct 2 00:45:26 2026 GMT
Subject: CN=6ab5c426-7ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:c5:6f:8e:94:ac:28:ee:4e:c7:18:d3:7c:
0b:b6:75:d3:44:dd:4a:43:e1:7b:60:18:09:48:6b:
8c:56:6d:ad:a6:98:de:60:63:ee:8b:74:ec:e9:aa:
62:b1:c7:3f:91:ed:c4:aa:fe:1c:88:cb:04:fe:aa:
cd:7d:14:d9:09:25:74:76:d3:f2:a4:71:98:2e:60:
7b:0f:0e:1b:92:80:e9:28:0e:ac:18:85:af:96:05:
7e:77:f7:6c:8f:e1:36:a3:4b:f2:d7:14:b1:84:31:
81:7a:96:a9:4c:97:b0:c4:e4:fd:73:66:56:2a:5a:
7a:a3:f6:a5:08:bb:15:a4:a7:e0:cd:00:a3:01:a5:
3d:3b:ba:cc:1f:98:6e:63:91:c2:e2:53:6b:1f:76:
07:20:fb:56:f2:d5:ac:b2:06:8b:32:96:63:c5:e5:
e6:ec:b5:c4:02:15:e2:6e:c2:e0:4d:42:92:08:fa:
bb:24:69:c3:ea:c5:3f:49:95:01:6f:5d:e1:58:fe:
d7:e1:c0:d6:58:dc:95:db:c1:e5:ac:1b:5a:da:73:
ad:84:c2:89:17:91:98:9e:9d:2b:e9:ac:90:88:25:
85:ff:04:5e:fe:f7:17:e6:0a:1d:2c:a8:eb:60:c6:
5c:45:ea:74:a5:d7:00:f2:68:a8:7e:cd:56:4d:76:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2C:B6:82:3D:96:DF:18:EA:D8:C9:17:9D:64:AB:BA:6B:E8:EF:B3
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cb:69:3d:20:a7:0c:cd:f5:b8:3a:c5:ef:00:c4:0e:8f:aa:
ef:cd:ab:19:54:ee:7f:61:05:ab:b5:8b:43:9f:dd:09:49:de:
7b:a6:2b:bd:4b:04:88:6c:64:1f:be:14:dc:14:8e:0f:1e:2f:
b2:70:62:29:b3:f2:40:0c:a8:c8:1e:b6:02:8f:23:4d:9b:0d:
66:73:83:a7:cd:b9:d7:7e:0b:52:68:4c:ff:77:41:92:d2:15:
6d:f8:6b:67:e6:e2:88:38:fe:89:54:fc:fd:2c:79:cd:84:80:
a3:6c:cb:3a:b8:27:c7:df:82:b8:46:fd:0e:94:c6:7b:fd:43:
90:3a:bc:77:3e:42:08:4d:8b:fd:82:96:c2:78:c3:05:5c:ad:
12:bd:e7:4a:cc:18:7d:af:73:70:56:85:d5:c0:58:7a:04:a7:
bc:53:e6:32:be:d0:0e:d1:fc:e0:77:1b:9a:2d:62:3d:3b:7a:
8a:b9:d0:38:ac:e5:cf:7e:c9:bf:59:03:cd:f9:50:ee:8c:07:
dd:4b:b5:1f:de:58:c1:bf:d1:df:7a:00:86:6f:96:96:8d:1f:
b0:f9:ba:1f:a7:5b:de:14:76:0b:5b:d0:36:ab:95:37:97:a8:
bb:a4:5c:17:6f:01:a3:f2:3b:74:80:13:b2:39:e5:25:9b:75:
33:e1:41:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG
MkU0MDkyQjQwHhcNMjYwOTI1MDA0NTI2WhcNMjYxMDAyMDA0NTI2WjAYMRYwFAYD
VQQDEw02YWI1YzQyNi03ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtMPFb46UrCjuTscY03wLtnXTRN1KQ+F7YBgJSGuMVm2tppjeYGPui3Ts6api
scc/ke3Eqv4ciMsE/qrNfRTZCSV0dtPypHGYLmB7Dw4bkoDpKA6sGIWvlgV+d/ds
j+E2o0vy1xSxhDGBepapTJewxOT9c2ZWKlp6o/alCLsVpKfgzQCjAaU9O7rMH5hu
Y5HC4lNrH3YHIPtW8tWssgaLMpZjxeXm7LXEAhXibsLgTUKSCPq7JGnD6sU/SZUB
b13hWP7X4cDWWNyV28HlrBta2nOthMKJF5GYnp0r6ayQiCWF/wRe/vcX5godLKjr
YMZcRep0pdcA8miofs1WTXY7lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkstoI9
lt8Y6tjJF51kq7pr6O+zMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4
NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr
clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6
YTFPWTdnbVhjcGJ5NUFrclEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAistpPSCnDM31uDrF7wDEDo+q782rGVTuf2EFq7WLQ5/dCUnee6YrvUsEiGxk
H74U3BSODx4vsnBiKbPyQAyoyB62Ao8jTZsNZnODp825134LUmhM/3dBktIVbfhr
Z+biiDj+iVT8/Sx5zYSAo2zLOrgnx9+CuEb9DpTGe/1DkDq8dz5CCE2L/YKWwnjD
BVytEr3nSswYfa9zcFaF1cBYegSnvFPmMr7QDtH84Hcbmi1iPTt6irnQOKzlz37J
v1kDzflQ7owH3Uu1H95Ywb/R33oAhm+Wlo0fsPm6H6db3hR2C1vQNquVN5eou6Rc
F28Bo/I7dIATsjnlJZt1M+FBWQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:20:39 2026 by rpki-client