
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json)
Hash identifier: P6w/X1aVTzggCBf/eNO+zKRh5K6VCVy4oc+kdNZwlf8=
Subject key identifier: 4B:F0:47:A0:7E:04:B0:EC:DD:ED:14:0C:3C:3B:A7:EB:00:DA:CF:45
Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
Manifest number: 0818
Signing time: Mon 12 Oct 2026 23:13:54 +0000
Manifest this update: Mon 12 Oct 2026 23:13:53 +0000
Manifest next update: Mon 19 Oct 2026 23:13:53 +0000
Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: aQbEFzJz5eLkc5MpXHR/jEyHy556OpUpi1FqPBtkE3Y=)
2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: jQVly8FPPuFgOZcXUN0l/eQQVf0qa488CPB3wrBLOsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 23:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Validity
Not Before: Oct 12 23:13:53 2026 GMT
Not After : Oct 19 23:13:53 2026 GMT
Subject: CN=6acd69b2-58c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:d0:01:17:3f:76:5e:78:c9:a8:53:a0:42:
98:4b:7e:b2:14:d8:01:d1:33:0c:5c:5f:1b:92:7b:
92:7b:04:05:97:6f:54:90:44:33:db:95:8f:f4:1c:
3e:22:85:f0:8f:f4:ba:dd:9c:c0:51:69:d9:c7:a0:
9c:ed:23:d9:9a:e2:96:b8:0e:71:cb:78:c2:f2:a1:
25:9b:63:ad:ad:5a:c2:95:b9:c5:53:43:85:6e:c2:
ef:0f:71:69:08:53:7f:84:d3:ed:a1:37:54:1e:8d:
23:91:b3:7d:84:59:90:bb:40:eb:f4:ec:b1:8d:1f:
c7:26:9f:dd:d7:84:0c:e6:c5:0d:67:d0:7d:e0:d6:
fb:36:01:05:62:0b:aa:0a:17:42:06:b6:01:42:78:
55:89:9e:fd:f4:aa:ac:4a:8a:a0:80:18:ae:e9:49:
3e:ad:1a:05:4e:0e:a1:a7:f7:69:57:1a:af:39:01:
37:6f:03:f6:fe:df:c5:da:53:fe:cd:f8:4a:72:e9:
21:d6:b1:55:ea:1b:63:08:26:3b:87:da:ab:bc:d4:
b2:cc:44:ac:ec:4b:10:0d:6b:e3:d0:1b:ed:20:b1:
fd:a1:b5:de:fd:4f:90:dd:81:0e:de:98:42:a8:ea:
3a:0f:2c:ec:03:40:33:89:75:66:a6:2f:d3:62:16:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F0:47:A0:7E:04:B0:EC:DD:ED:14:0C:3C:3B:A7:EB:00:DA:CF:45
X509v3 Authority Key Identifier:
keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:d0:04:e8:b4:8b:3e:ba:ad:68:d4:ff:4c:71:ce:5e:9a:4d:
69:10:48:03:90:d7:01:ff:78:99:fd:10:b4:83:f1:88:d5:f0:
62:d6:f3:3f:b4:78:20:3b:a9:23:90:57:0f:d2:e6:72:a7:9f:
2b:ff:67:b7:1e:28:ab:72:5d:4a:93:8d:a4:9b:b6:24:0f:5e:
61:98:7b:1e:19:d8:b5:89:86:6a:ee:18:b5:a9:16:40:44:65:
04:bc:81:81:f8:38:9c:4c:ab:0f:68:82:23:7c:eb:ac:c6:5a:
a8:56:05:1b:19:16:4e:e3:d8:a4:5a:32:69:cf:d3:77:4f:ef:
51:f0:7a:cf:3f:2e:85:24:2b:fa:c6:41:01:b4:97:0a:09:27:
50:2e:73:5d:84:bf:26:3c:16:bd:2c:41:45:3f:8c:e9:74:4e:
32:79:f3:8d:98:9d:58:91:f5:81:32:c1:87:70:ef:83:7c:f5:
fe:bc:1b:33:80:2d:cd:77:81:f0:d6:fd:dc:da:d4:6b:32:cd:
b3:5f:91:09:8d:bc:df:ff:1e:a7:85:fa:f5:fa:29:cf:18:dc:
4b:bc:05:e6:d6:49:c1:84:05:21:25:07:64:ed:25:7d:e5:fd:
d2:d9:18:9a:41:9b:3f:86:04:2c:e2:53:71:ca:ac:ee:35:66:
a9:79:61:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz
NTkwRkIyN0EwHhcNMjYxMDEyMjMxMzUzWhcNMjYxMDE5MjMxMzUzWjAYMRYwFAYD
VQQDEw02YWNkNjliMi01OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdLQARc/dl54yahToEKYS36yFNgB0TMMXF8bknuSewQFl29UkEQz25WP9Bw+
IoXwj/S63ZzAUWnZx6Cc7SPZmuKWuA5xy3jC8qElm2OtrVrClbnFU0OFbsLvD3Fp
CFN/hNPtoTdUHo0jkbN9hFmQu0Dr9OyxjR/HJp/d14QM5sUNZ9B94Nb7NgEFYguq
ChdCBrYBQnhViZ799KqsSoqggBiu6Uk+rRoFTg6hp/dpVxqvOQE3bwP2/t/F2lP+
zfhKcukh1rFV6htjCCY7h9qrvNSyzESs7EsQDWvj0BvtILH9obXe/U+Q3YEO3phC
qOo6DyzsA0AziXVmpi/TYhYd1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvwR6B+
BLDs3e0UDDw7p+sA2s9FMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC
MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR
NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJtAE6LSLPrqtaNT/THHOXppNaRBIA5DXAf94mf0QtIPxiNXwYtbzP7R4IDup
I5BXD9LmcqefK/9ntx4oq3JdSpONpJu2JA9eYZh7HhnYtYmGau4YtakWQERlBLyB
gfg4nEyrD2iCI3zrrMZaqFYFGxkWTuPYpFoyac/Td0/vUfB6zz8uhSQr+sZBAbSX
CgknUC5zXYS/JjwWvSxBRT+M6XROMnnzjZidWJH1gTLBh3Dvg3z1/rwbM4AtzXeB
8Nb93NrUazLNs1+RCY283/8ep4X69fopzxjcS7wF5tZJwYQFISUHZO0lfeX90tkY
mkGbP4YELOJTccqs7jVmqXlhGQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:51:13 2026 by rpki-client