
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
File: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json)
Hash identifier: UzuA4Mi1YD2ZEO2Lu34nNnsBWfJmiNJHyJcH9kwp6u8=
Subject key identifier: 6C:90:15:F6:11:70:24:67:FD:98:0F:15:17:9A:38:28:5F:FE:E6:28
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
Manifest number: 6E
Signing time: Thu 08 Oct 2026 16:09:42 +0000
Manifest this update: Thu 08 Oct 2026 16:09:41 +0000
Manifest next update: Thu 15 Oct 2026 16:09:41 +0000
Files and hashes: 1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: 0NxXM4qRBEgYWshNfbUp6mS9nz1Sl+WwLcpKipZY+tM=)
2: 62A4D5365DE711F18D15F5F9BA833773.roa (hash: uMoIZpT3mVn5fR59fAlPiMybbcDA63m6Onzt5jjfoy8=)
3: E685F69A372D11F1A4767B088F833773.roa (hash: qIG7a6gdz6oI8FkLXCBwV639Fz6ChKdcrnk7T65shfM=)
4: D8375D30A69B11F1A29A77493411F970.roa (hash: Oq6EWPqn9hAjR/n1Fw9l1YNrmCrCY3C/1Z//Amm/UOA=)
5: AAEECC6A6E2D11F1A887915478A30FBC.roa (hash: f7l9RkvjSXNlM0g5m0AYZYcpWynEZCt2Ngft6Q4y2Ww=)
6: 7DD523E4B5BF11F1A1B9E4684011F970.roa (hash: L1m2ffpqPMktKVGkY3T5QGh4DiZWf4Ev3yNkbzcxIK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Oct 8 16:09:41 2026 GMT
Not After : Oct 15 16:09:41 2026 GMT
Subject: CN=6ac7c046-82a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:6c:9c:85:1f:31:8f:e4:82:7b:6c:83:da:
1e:fd:4d:8c:a2:68:4f:20:a1:9f:74:e5:8a:14:ff:
ad:b6:5b:42:cd:6c:b2:d8:79:a6:1c:0a:2d:aa:47:
93:93:d6:25:37:b9:14:a5:b1:66:54:20:f0:af:3b:
6c:ff:a4:7b:85:0b:06:a9:50:b8:79:cf:7b:b7:94:
02:ba:72:12:0e:98:bf:ce:50:91:00:6b:fc:2f:49:
21:cc:10:97:06:e0:ba:45:6c:77:b6:9d:3f:c5:7b:
c7:9b:e2:ce:7f:d8:95:09:66:c9:cf:25:ca:a1:fc:
07:53:fe:8b:d5:b5:b1:9a:cb:bc:13:e1:29:b9:7b:
f3:3c:ec:b3:2f:44:27:5a:cc:ed:8b:38:f6:e5:95:
05:9e:52:6d:07:b3:ea:08:51:ac:23:e5:02:62:33:
01:99:9d:51:ae:08:6d:73:2d:32:81:92:80:db:86:
86:bc:a5:f5:5e:b8:83:70:e0:69:51:7f:0c:d3:79:
fa:94:28:8d:39:a3:49:38:41:a8:69:eb:a6:11:08:
ae:ff:9c:35:0e:a4:3c:17:62:af:e0:23:bc:61:97:
82:db:e1:3b:a6:8c:8f:ae:c9:8a:2c:1d:85:e5:a8:
45:25:d2:11:1c:d7:7d:92:12:fa:d7:19:fb:a3:76:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:90:15:F6:11:70:24:67:FD:98:0F:15:17:9A:38:28:5F:FE:E6:28
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:b9:bb:5b:a4:f2:f2:8b:99:70:9d:29:e9:bf:dc:1a:74:
0b:0a:10:54:52:3f:47:7a:0f:d9:67:0a:7a:a9:e5:08:92:4c:
82:6f:cc:9a:e8:5e:64:f8:f8:cc:fc:ac:de:c8:31:49:78:dc:
dc:c2:cb:bf:65:1a:e0:45:fd:3f:81:96:43:a6:c2:64:9d:88:
d3:71:f4:c3:21:71:11:50:75:ed:56:6b:61:0d:54:94:49:ac:
15:33:bc:13:8a:b1:22:e2:6e:52:49:d4:ad:6b:38:9d:f9:f9:
23:b7:90:fd:20:e3:af:96:d3:68:02:09:68:82:e2:c2:c7:b8:
1d:92:3a:2f:95:a7:12:5c:42:e7:9c:82:24:86:da:c4:59:0d:
e0:0c:f7:60:cd:0f:08:2d:ec:20:26:9b:f4:87:d8:a2:ce:ab:
70:5c:92:2b:02:18:ca:3d:5f:f9:fd:10:5d:62:ec:c7:c9:3f:
5f:c2:37:a5:e6:f0:9d:30:69:a1:88:cc:d5:70:e3:50:d7:7d:
bb:7f:c1:f3:73:84:fb:9e:c1:2e:88:58:0a:35:d7:87:97:d7:
49:e5:ea:eb:86:a2:60:08:06:b0:76:28:55:ee:51:4e:91:42:
c7:c8:bb:91:2a:0f:de:e7:ca:4e:1e:8c:a8:a9:3b:e3:eb:5b:
ac:ce:7b:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E4NEExMTAvBgNVBAUTKDYzN0Q1NkE3NUJCOTVCQzVDOUU2QjA4OUQ5MzRDQjVF
MkZCRDk2MkQwHhcNMjYxMDA4MTYwOTQxWhcNMjYxMDE1MTYwOTQxWjAYMRYwFAYD
VQQDEw02YWM3YzA0Ni04MmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsm5snIUfMY/kgntsg9oe/U2MomhPIKGfdOWKFP+ttltCzWyy2HmmHAotqkeT
k9YlN7kUpbFmVCDwrzts/6R7hQsGqVC4ec97t5QCunISDpi/zlCRAGv8L0khzBCX
BuC6RWx3tp0/xXvHm+LOf9iVCWbJzyXKofwHU/6L1bWxmsu8E+EpuXvzPOyzL0Qn
Wsztizj25ZUFnlJtB7PqCFGsI+UCYjMBmZ1Rrghtcy0ygZKA24aGvKX1XriDcOBp
UX8M03n6lCiNOaNJOEGoaeumEQiu/5w1DqQ8F2Kv4CO8YZeC2+E7poyPrsmKLB2F
5ahFJdIRHNd9khL61xn7o3ZXaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGyQFfYR
cCRn/ZgPFReaOChf/uYoMB8GA1UdIwQYMBaAFGN9VqdbuVvFyeawidk0y14vvZYt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS83N0FDN0JEMjM0
RjcxMUYxQkI3MzZDQTc3Q0VFNTI4RS9ZMzFXcDF1NVc4WEo1ckNKMlRUTFhpLTls
aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxpMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTg0QS83N0FDN0JEMjM0RjcxMUYxQkI3MzZDQTc3Q0VFNTI4RS9ZMzFXcDF1NVc4
WEo1ckNKMlRUTFhpLTlsaTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY8y5u1uk8vKLmXCdKem/3Bp0CwoQVFI/R3oP2WcKeqnlCJJMgm/MmuheZPj4
zPys3sgxSXjc3MLLv2Ua4EX9P4GWQ6bCZJ2I03H0wyFxEVB17VZrYQ1UlEmsFTO8
E4qxIuJuUknUrWs4nfn5I7eQ/SDjr5bTaAIJaILiwse4HZI6L5WnElxC55yCJIba
xFkN4Az3YM0PCC3sICab9IfYos6rcFySKwIYyj1f+f0QXWLsx8k/X8I3pebwnTBp
oYjM1XDjUNd9u3/B83OE+57BLohYCjXXh5fXSeXq64aiYAgGsHYoVe5RTpFCx8i7
kSoP3ufKTh6MqKk74+tbrM57iQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:36:01 2026 by rpki-client