
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier: YcpXvXKCPlAWsN4LJXP82i5VbWnJkZhLGspVO2Hcfdc=
Subject key identifier: 46:D9:2A:DD:1F:B5:85:EB:D0:98:61:B5:36:B8:B1:1D:52:04:3F:F6
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial: 0EAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number: 0E8C
Signing time: Thu 24 Sep 2026 17:41:03 +0000
Manifest this update: Thu 24 Sep 2026 17:41:02 +0000
Manifest next update: Thu 01 Oct 2026 17:41:02 +0000
Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: /TIsDTa+xlOOq1uwr9GCfszI6OPu3pQLbi+tVkAUpuY=)
2: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: J82yfuC+4aLDmhGWjyr0F1wn0ktPZ4aMMMR1qjOd0j4=)
3: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: nRexK0UA55I5+x5R0A2TMhaYmEDiazdKkjOfJ9kGLwQ=)
4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: 79PmiP9NpDAtWC6dqYWk56B1VkuYlkflhPnSmUa7hdQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3754 (0xeaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Validity
Not Before: Sep 24 17:41:02 2026 GMT
Not After : Oct 1 17:41:02 2026 GMT
Subject: CN=6ab560af-513b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:b5:c8:6a:0a:a6:cc:a0:20:28:af:5a:13:
69:f7:5e:0f:4a:cc:2f:35:19:51:c6:e9:6c:85:c0:
06:34:44:64:0b:b4:7e:d1:28:fa:c0:a1:be:10:c9:
b2:84:f1:75:0f:43:06:c9:6c:0b:14:82:bc:2f:8c:
3c:1a:e5:ea:f1:f6:ee:1f:26:38:1b:b3:0a:0d:b8:
9d:d7:93:b8:22:e0:1b:c2:a6:6d:89:1e:aa:0c:c3:
08:7b:40:6c:8f:49:28:f2:77:57:41:63:7a:f2:2d:
4b:27:81:1b:56:ca:26:63:aa:34:71:27:a4:10:e5:
30:cd:56:aa:5b:40:08:1d:14:98:51:a0:5f:c1:c4:
17:84:5f:69:c1:7d:27:f2:7d:d0:06:d9:57:54:56:
cd:d4:05:9f:56:be:60:f4:f6:cb:7c:ce:04:68:cb:
7f:08:dc:71:23:0e:b8:66:c8:56:25:fd:06:47:27:
0f:b8:9f:bb:33:85:70:60:ee:c2:9d:d9:3f:c1:86:
39:cb:31:58:6b:a6:4d:15:c1:ef:19:c5:d7:1d:ae:
e9:05:48:0b:24:65:47:8c:93:76:45:c5:f2:73:e9:
1a:42:9b:7c:dc:52:1d:b6:14:00:a2:59:c5:fb:30:
ea:28:a9:10:99:08:22:d3:0d:08:b5:5b:54:55:e4:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D9:2A:DD:1F:B5:85:EB:D0:98:61:B5:36:B8:B1:1D:52:04:3F:F6
X509v3 Authority Key Identifier:
keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:e1:d3:68:45:30:60:b0:00:77:f3:b5:5e:29:73:27:51:93:
fa:63:b4:08:94:d6:58:bc:ad:6a:09:71:d1:9a:0b:b4:7d:a6:
a9:3c:0e:06:57:32:f7:c3:07:f7:71:2f:ea:49:af:7b:d4:40:
60:61:c8:b1:a9:f4:4a:ae:c5:d4:9b:74:89:29:7d:07:fe:fc:
dc:b1:d1:b4:44:36:c0:b8:90:1b:04:57:6e:87:ca:1e:c8:c5:
f5:b3:9c:9f:8a:87:76:ad:0a:35:41:b4:ab:93:aa:fa:bb:f2:
7a:7e:21:cd:0d:c1:46:03:d9:bf:47:ea:88:d0:06:06:7a:fc:
db:fa:ed:0b:2e:d2:8d:f0:4d:8d:86:3f:b8:ce:8a:dd:de:2c:
19:8a:6e:f7:cd:86:34:b0:ff:7b:27:e2:34:c6:1c:0a:d4:10:
ed:c2:77:65:03:a2:7e:dd:7f:1c:14:47:36:e5:bb:3c:3f:ba:
24:0e:c6:81:c5:b4:d8:9c:da:c7:58:b7:30:15:9e:55:ae:a8:
8c:48:34:4a:50:6d:80:e6:6e:d9:7a:3e:32:a4:49:a1:00:26:
c1:e5:f2:75:b0:fd:ff:e5:08:56:47:d8:08:6d:96:cd:67:f1:
04:17:a4:93:30:c2:b3:f0:7a:dc:3f:5f:15:e3:c3:0d:49:28:
f3:c5:a9:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz
NEVEQTlDNjMwHhcNMjYwOTI0MTc0MTAyWhcNMjYxMDAxMTc0MTAyWjAYMRYwFAYD
VQQDEw02YWI1NjBhZi01MTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo3C1yGoKpsygICivWhNp914PSswvNRlRxulshcAGNERkC7R+0Sj6wKG+EMmy
hPF1D0MGyWwLFIK8L4w8GuXq8fbuHyY4G7MKDbid15O4IuAbwqZtiR6qDMMIe0Bs
j0ko8ndXQWN68i1LJ4EbVsomY6o0cSekEOUwzVaqW0AIHRSYUaBfwcQXhF9pwX0n
8n3QBtlXVFbN1AWfVr5g9PbLfM4EaMt/CNxxIw64ZshWJf0GRycPuJ+7M4VwYO7C
ndk/wYY5yzFYa6ZNFcHvGcXXHa7pBUgLJGVHjJN2RcXyc+kaQpt83FIdthQAolnF
+zDqKKkQmQgi0w0ItVtUVeQ+FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbZKt0f
tYXr0JhhtTa4sR1SBD/2MB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz
NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDUyOS8yMENGMkUxNEMzNjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZi
R2llajNUclZsV3MwN2FuR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGeHTaEUwYLAAd/O1XilzJ1GT+mO0CJTWWLytaglx0ZoLtH2mqTwOBlcy98MH
93Ev6kmve9RAYGHIsan0Sq7F1Jt0iSl9B/783LHRtEQ2wLiQGwRXbofKHsjF9bOc
n4qHdq0KNUG0q5Oq+rvyen4hzQ3BRgPZv0fqiNAGBnr82/rtCy7SjfBNjYY/uM6K
3d4sGYpu982GNLD/eyfiNMYcCtQQ7cJ3ZQOift1/HBRHNuW7PD+6JA7GgcW02Jza
x1i3MBWeVa6ojEg0SlBtgOZu2Xo+MqRJoQAmweXydbD9/+UIVkfYCG2WzWfxBBek
kzDCs/B63D9fFePDDUko88Wpww==
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:06:19 2026 by rpki-client