
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier: zpGqo8mbVqGwR9GZdW0plT6l3FRyMOm27q49+HGqaEs=
Subject key identifier: 6C:57:1D:F5:F6:A5:2F:48:65:44:54:87:C3:BB:3C:C8:36:58:75:36
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial: 0E36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number: 0E1E
Signing time: Sat 28 Feb 2026 17:56:55 +0000
Manifest this update: Sat 28 Feb 2026 17:56:54 +0000
Manifest next update: Sat 07 Mar 2026 17:56:54 +0000
Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: FESsYrLQ5fBHP5mMXl+L/H0P4NEtxsyLh8PCesu3iB8=)
2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: qyDf++LPWxa+MkjWOgRr95EIpuQ2+myemcO9SD4YHEk=)
3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: 9F91+IUTL7h3rCEta0BAPCIgikPUjvwFDwgS+OoqM04=)
4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: UeNWqDuc6Ln+l4WWol/JGxPQ9/25U+hHn/L6mfBQ43Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3638 (0xe36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Validity
Not Before: Feb 28 17:56:54 2026 GMT
Not After : Mar 7 17:56:54 2026 GMT
Subject: CN=69a32c67-18ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:87:34:5d:bb:3f:8c:cd:1e:ef:69:21:09:
8d:02:78:cd:88:4a:42:4d:3d:ee:d6:7f:ef:1a:de:
fa:ca:75:1f:a2:33:a8:cd:36:42:05:89:c3:af:4e:
d0:d5:0f:2c:b8:28:57:93:ff:b6:fb:a0:56:c6:84:
d8:27:21:41:e7:43:db:44:d3:47:7c:6b:4b:46:9c:
5c:56:7f:0b:13:34:e1:2b:94:a6:16:57:c6:ac:3a:
7e:31:2c:0c:cd:cf:cf:d3:15:59:a4:87:74:33:44:
b2:16:6a:0f:05:c7:dd:69:03:60:c4:1b:d7:4b:94:
e5:e1:61:23:6a:d1:ca:12:92:b5:0e:f3:27:b2:85:
4f:20:a5:2f:24:74:1b:c4:7d:6d:20:bb:17:84:35:
71:2c:ae:24:17:e1:e4:75:53:fa:ab:0f:07:e8:a9:
d9:50:4b:61:b8:3f:ac:3f:70:a8:d5:9d:f5:30:cd:
84:be:6b:a1:32:51:f8:4d:9b:10:f7:58:dc:da:c2:
9a:73:fe:17:ec:4e:31:bc:2a:c3:e1:b2:ff:0f:24:
8b:ca:74:97:21:82:30:67:dd:cf:81:d9:dc:ae:83:
62:a6:68:c0:41:90:d6:07:7e:5e:42:3f:80:9d:2a:
4b:6f:9d:39:44:04:9d:58:fc:f8:47:45:1c:76:e6:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:57:1D:F5:F6:A5:2F:48:65:44:54:87:C3:BB:3C:C8:36:58:75:36
X509v3 Authority Key Identifier:
keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:f1:b9:ed:00:db:4b:7d:0f:3b:9b:31:2d:3f:13:21:40:26:
57:2a:09:90:ab:60:a9:d2:e5:91:e1:26:d7:0c:0d:f1:cc:21:
99:33:87:f1:0f:69:a4:9f:f5:0e:4c:2d:9e:f0:25:d2:22:5f:
5e:81:8e:5b:f5:bc:55:78:8d:a1:76:95:6c:bb:40:5c:86:f1:
e5:53:70:45:51:1f:cd:7d:04:1d:50:6d:54:41:71:1b:11:64:
47:4c:74:ea:4f:08:bc:6b:bd:cc:6b:1a:49:c6:6f:46:e6:9d:
fd:e9:62:da:ea:da:2d:1a:17:05:18:15:c7:8b:51:07:4f:4a:
78:c5:d1:ae:c5:1e:a8:5f:c9:e6:af:5b:27:b4:84:05:46:dd:
8f:3b:6d:06:5c:6e:fa:ab:ea:47:8b:4d:0f:c1:92:d6:37:db:
df:6f:63:ab:7b:b6:a6:37:19:c8:3e:b5:18:9e:c5:56:71:93:
2b:78:bb:bd:db:36:63:d6:dd:77:9e:59:97:67:75:98:61:8c:
98:11:c2:b6:60:11:73:e1:1d:4d:c8:d8:36:81:83:15:48:72:
5e:b7:79:81:29:89:5a:c8:aa:c7:d7:9a:c0:4f:34:37:93:be:
c9:bb:89:fd:e3:44:95:5f:c1:c5:f1:60:07:91:cb:71:77:1a:
c3:f8:7f:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz
NEVEQTlDNjMwHhcNMjYwMjI4MTc1NjU0WhcNMjYwMzA3MTc1NjU0WjAYMRYwFAYD
VQQDDA02OWEzMmM2Ny0xOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhceHNF27P4zNHu9pIQmNAnjNiEpCTT3u1n/vGt76ynUfojOozTZCBYnDr07Q
1Q8suChXk/+2+6BWxoTYJyFB50PbRNNHfGtLRpxcVn8LEzThK5SmFlfGrDp+MSwM
zc/P0xVZpId0M0SyFmoPBcfdaQNgxBvXS5Tl4WEjatHKEpK1DvMnsoVPIKUvJHQb
xH1tILsXhDVxLK4kF+HkdVP6qw8H6KnZUEthuD+sP3Co1Z31MM2EvmuhMlH4TZsQ
91jc2sKac/4X7E4xvCrD4bL/DySLynSXIYIwZ93PgdncroNipmjAQZDWB35eQj+A
nSpLb505RASdWPz4R0UcdubPTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxXHfX2
pS9IZURUh8O7PMg2WHU2MB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz
NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDUyOS8yMENGMkUxNEMzNjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZi
R2llajNUclZsV3MwN2FuR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARPG57QDbS30PO5sxLT8TIUAmVyoJkKtgqdLlkeEm1wwN8cwhmTOH8Q9ppJ/1
DkwtnvAl0iJfXoGOW/W8VXiNoXaVbLtAXIbx5VNwRVEfzX0EHVBtVEFxGxFkR0x0
6k8IvGu9zGsaScZvRuad/eli2uraLRoXBRgVx4tRB09KeMXRrsUeqF/J5q9bJ7SE
BUbdjzttBlxu+qvqR4tND8GS1jfb329jq3u2pjcZyD61GJ7FVnGTK3i7vds2Y9bd
d55Zl2d1mGGMmBHCtmARc+EdTcjYNoGDFUhyXrd5gSmJWsiqx9eawE80N5O+ybuJ
/eNElV/BxfFgB5HLcXcaw/h/7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:12 2026 by rpki-client