
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier: ONAK9V/XzRKLzseiZQEqcqGRPzRvyRvmUZOq72aArrs=
Subject key identifier: DF:24:C3:46:52:F4:40:45:3E:F3:24:34:E1:72:37:89:5A:61:5F:D3
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial: 027B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number: 0264
Signing time: Tue 13 Oct 2026 03:01:39 +0000
Manifest this update: Tue 13 Oct 2026 03:01:38 +0000
Manifest next update: Tue 20 Oct 2026 03:01:38 +0000
Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: Z4Gz/KGWi/SydToWDwcb2ibA8I+IaYmwBDoZmkWYZaE=)
2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: qTVWaderqtgmeERdTaRyOlJrOlJ96wy4uZtKdMBbwhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Validity
Not Before: Oct 13 03:01:38 2026 GMT
Not After : Oct 20 03:01:38 2026 GMT
Subject: CN=6acd9f12-981a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e2:0f:d8:c6:0b:44:0a:23:d1:56:f0:eb:db:
c5:10:63:c8:fa:fc:45:a6:3a:6e:21:21:ee:75:8a:
e7:d6:84:ea:4c:3b:c1:f3:01:12:4f:ef:15:6f:f2:
88:6f:76:14:9f:e4:fc:9d:da:f9:cb:9a:b7:c9:86:
5d:02:96:33:4e:12:25:8d:b8:ea:e1:3e:05:5f:4f:
ac:df:2d:bb:a1:5c:70:db:22:ed:f4:a5:29:f7:4d:
20:ec:68:ba:86:87:9e:50:7b:f2:8c:a5:46:0c:2e:
33:38:5d:52:50:de:b0:ad:bc:ae:a6:72:82:54:8f:
22:38:74:33:d3:b3:30:51:96:69:3f:dc:1e:72:cc:
98:8d:ac:2e:75:0a:0f:81:9e:c2:84:1b:f8:50:13:
e5:76:62:7a:8f:e1:f6:5f:f2:dd:92:e6:dd:74:b8:
7e:e2:39:29:be:36:4f:bc:84:c7:b4:f5:5c:09:55:
51:a0:4d:70:dd:6a:cd:60:aa:bd:ae:4e:94:bd:9d:
24:6a:86:6e:c0:6f:91:97:9a:f0:1b:de:de:d7:10:
16:97:dc:b3:42:78:e0:a7:e5:ec:03:41:5c:a3:15:
9f:5e:05:19:2d:62:26:87:2a:49:cd:a8:90:9f:1a:
11:56:4b:6f:b5:56:14:1b:ab:e6:ef:e3:cd:db:19:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:C3:46:52:F4:40:45:3E:F3:24:34:E1:72:37:89:5A:61:5F:D3
X509v3 Authority Key Identifier:
keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:81:20:02:0c:4f:56:8b:53:3b:77:40:68:89:31:64:c1:9b:
c5:39:e3:7e:56:e4:04:5c:08:8b:8e:43:09:0b:e7:fd:a5:b4:
7b:48:1f:08:ae:11:19:ee:43:e4:70:65:f5:82:76:09:b7:54:
41:c0:17:20:6b:5d:2a:d7:78:da:f8:38:89:f6:32:f7:37:dc:
13:46:70:92:85:82:0e:b2:20:ea:ae:e6:dc:db:89:94:dc:c8:
5f:77:3a:47:bf:27:1a:0e:f7:d1:44:39:a7:a7:cc:ca:82:cd:
0c:5d:d8:63:0a:37:64:af:e6:cc:01:9c:6a:bb:fa:d3:20:e5:
1d:6f:6a:ee:b9:ab:0b:3e:eb:a2:b1:f6:7c:44:e4:82:b0:f9:
e0:0f:3a:c5:f8:10:02:3f:a4:5d:10:8a:c8:eb:6f:ab:9e:6f:
28:11:44:02:8b:67:31:f0:a6:bb:0b:ef:b6:e2:cb:a5:74:ab:
f3:d0:e6:e8:fe:00:c1:c3:f6:a0:7d:ec:2e:d1:d7:65:b5:3f:
c1:06:e2:2d:4b:c9:a7:0c:7c:e0:37:fb:68:5c:c2:24:48:37:
51:ea:8c:3a:73:a5:0e:26:02:26:04:26:c8:1d:b4:81:63:1e:
3e:5c:8a:52:d9:8b:0b:07:99:3c:79:23:8b:8a:f0:99:21:76:
f7:b0:ba:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2
RDY3NzU4MDkwHhcNMjYxMDEzMDMwMTM4WhcNMjYxMDIwMDMwMTM4WjAYMRYwFAYD
VQQDEw02YWNkOWYxMi05ODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7uIP2MYLRAoj0Vbw69vFEGPI+vxFpjpuISHudYrn1oTqTDvB8wEST+8Vb/KI
b3YUn+T8ndr5y5q3yYZdApYzThIljbjq4T4FX0+s3y27oVxw2yLt9KUp900g7Gi6
hoeeUHvyjKVGDC4zOF1SUN6wrbyupnKCVI8iOHQz07MwUZZpP9wecsyYjawudQoP
gZ7ChBv4UBPldmJ6j+H2X/LdkubddLh+4jkpvjZPvITHtPVcCVVRoE1w3WrNYKq9
rk6UvZ0kaoZuwG+Rl5rwG97e1xAWl9yzQnjgp+XsA0FcoxWfXgUZLWImhypJzaiQ
nxoRVktvtVYUG6vm7+PN2xlO/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8kw0ZS
9EBFPvMkNOFyN4laYV/TMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3
NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX
Nk9zVS1WUHExanR0WjNXQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXIEgAgxPVotTO3dAaIkxZMGbxTnjflbkBFwIi45DCQvn/aW0e0gfCK4RGe5D
5HBl9YJ2CbdUQcAXIGtdKtd42vg4ifYy9zfcE0ZwkoWCDrIg6q7m3NuJlNzIX3c6
R78nGg730UQ5p6fMyoLNDF3YYwo3ZK/mzAGcarv60yDlHW9q7rmrCz7rorH2fETk
grD54A86xfgQAj+kXRCKyOtvq55vKBFEAotnMfCmuwvvtuLLpXSr89Dm6P4AwcP2
oH3sLtHXZbU/wQbiLUvJpwx84Df7aFzCJEg3UeqMOnOlDiYCJgQmyB20gWMePlyK
UtmLCweZPHkji4rwmSF297C6Cg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:38:40 2026 by rpki-client