
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier: Bh7YWfvLAL4+wgkgbCtMroZL0snaqN0Ud38utXjq4/Q=
Subject key identifier: 0F:FA:42:DE:A7:AC:BA:C6:9B:3F:5E:BF:B8:43:74:BB:DF:4C:8D:A9
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial: 0A9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number: 0A94
Signing time: Thu 24 Sep 2026 19:29:10 +0000
Manifest this update: Thu 24 Sep 2026 19:29:10 +0000
Manifest next update: Thu 01 Oct 2026 19:29:10 +0000
Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: g3Jw9kN8BbLUZ3p7qfiR7Q+eSNe74NIIfePTjR0ILP8=)
2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: VjRNecW0vXmHI7IX4ZkzrAT4JcWtKoRZ3oauY1DQFzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2717 (0xa9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Validity
Not Before: Sep 24 19:29:10 2026 GMT
Not After : Oct 1 19:29:10 2026 GMT
Subject: CN=6ab57a06-173d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:e3:52:73:ee:1a:aa:93:c8:b6:62:95:45:
de:37:16:e8:1a:a7:cb:51:a1:2e:45:ea:fd:1d:14:
ae:16:cb:86:50:1e:c9:49:7e:f9:04:37:cc:6b:7b:
1e:91:cf:39:e7:ed:72:1e:34:ed:00:76:b2:7f:1a:
09:8b:1a:b0:47:26:c2:d4:6c:43:7a:27:49:2a:64:
c8:1a:b9:b1:07:0d:0f:d6:65:f1:ab:7f:13:dc:61:
cd:9e:49:dc:b6:fc:34:ad:57:5e:4c:96:30:38:7d:
db:fc:ee:e9:2f:29:55:75:a0:26:41:ad:1b:26:f4:
33:99:99:83:ce:5f:b0:5a:6b:6d:3c:86:68:aa:4b:
24:46:2a:70:bd:6c:a2:d8:32:a9:77:db:a5:a0:a9:
94:00:6e:1b:92:41:68:91:2e:ef:c5:1c:1b:a4:9e:
d9:cf:df:36:f8:9a:35:81:77:a3:19:4c:98:c8:10:
eb:cd:c9:8c:94:10:98:26:cc:67:b5:c4:ca:38:37:
48:fa:e7:5d:5c:74:f4:40:96:80:67:ae:94:de:97:
e0:57:dd:f4:61:ad:47:d0:69:d9:e5:29:28:8e:e9:
20:ec:ff:8b:e7:e3:94:db:bb:99:4d:3d:d5:0a:a5:
7e:32:a4:5d:53:9e:88:b0:fc:18:07:9e:c8:74:7c:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:42:DE:A7:AC:BA:C6:9B:3F:5E:BF:B8:43:74:BB:DF:4C:8D:A9
X509v3 Authority Key Identifier:
keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d1:59:ad:e8:37:d8:c9:b2:6e:25:01:0a:19:3f:85:90:5a:
1e:29:66:77:29:a6:ca:78:7f:71:3d:8c:74:32:56:54:3c:c0:
c7:00:d9:4a:85:ef:d6:f1:b7:0c:2b:9c:f6:06:0b:eb:72:11:
d1:cb:86:a0:b7:75:37:f1:36:7a:5d:e4:b7:51:b2:eb:fb:b2:
cb:7c:78:58:5b:87:72:e1:bf:fd:10:21:67:24:e7:a9:05:7b:
c4:e7:f9:86:69:f2:d8:f0:10:85:75:23:90:fb:2f:a2:e8:6e:
72:52:8e:24:03:bd:79:33:4a:cb:be:56:9e:5a:2f:fc:7a:f2:
d6:6a:56:2a:00:37:e4:f4:ea:37:e0:7e:bd:39:e9:31:a7:0d:
7c:1e:22:07:a8:54:6a:9c:b7:aa:56:21:15:c0:42:23:c4:d4:
70:91:d9:47:11:9b:05:68:80:f3:c8:7c:5e:72:ea:43:c1:f8:
36:15:51:79:87:13:df:bb:8a:fd:2a:79:0c:c3:b9:0b:57:4c:
9a:c2:e7:78:1e:69:b6:c2:ee:41:fe:5e:18:af:15:9c:ef:6a:
44:91:bd:19:80:25:19:88:a9:78:a3:6e:46:73:2a:b5:67:47:
72:b4:30:da:f2:27:ad:60:50:ef:70:11:65:bf:37:79:f7:61:
be:18:f3:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENDQjMxMTAvBgNVBAUTKENBQURDQkFDQzUxQjJBNDY1MkRENzMwNzRGMjgyQzMz
NEQwMTAyNzcwHhcNMjYwOTI0MTkyOTEwWhcNMjYxMDAxMTkyOTEwWjAYMRYwFAYD
VQQDEw02YWI1N2EwNi0xNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvr/jUnPuGqqTyLZilUXeNxboGqfLUaEuRer9HRSuFsuGUB7JSX75BDfMa3se
kc855+1yHjTtAHayfxoJixqwRybC1GxDeidJKmTIGrmxBw0P1mXxq38T3GHNnknc
tvw0rVdeTJYwOH3b/O7pLylVdaAmQa0bJvQzmZmDzl+wWmttPIZoqkskRipwvWyi
2DKpd9uloKmUAG4bkkFokS7vxRwbpJ7Zz982+Jo1gXejGUyYyBDrzcmMlBCYJsxn
tcTKODdI+uddXHT0QJaAZ66U3pfgV930Ya1H0GnZ5Skojukg7P+L5+OU27uZTT3V
CqV+MqRdU56IsPwYB57IdHzGMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/6Qt6n
rLrGmz9ev7hDdLvfTI2pMB8GA1UdIwQYMBaAFMqty6zFGypGUt1zB08oLDNNAQJ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0NCMy80MUZENjAxNjg5
NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktrWlMzWE1IVHlnc00wMEJB
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lxM0xyTVViS2taUzNYTUhUeWdzTTAwQkFuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0NCMy80MUZENjAxNjg5NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktr
WlMzWE1IVHlnc00wMEJBbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO9FZreg32MmybiUBChk/hZBaHilmdymmynh/cT2MdDJWVDzAxwDZSoXv1vG3
DCuc9gYL63IR0cuGoLd1N/E2el3kt1Gy6/uyy3x4WFuHcuG//RAhZyTnqQV7xOf5
hmny2PAQhXUjkPsvouhuclKOJAO9eTNKy75Wnlov/Hry1mpWKgA35PTqN+B+vTnp
MacNfB4iB6hUapy3qlYhFcBCI8TUcJHZRxGbBWiA88h8XnLqQ8H4NhVReYcT37uK
/Sp5DMO5C1dMmsLneB5ptsLuQf5eGK8VnO9qRJG9GYAlGYipeKNuRnMqtWdHcrQw
2vInrWBQ73ARZb83efdhvhjzdg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:43:19 2026 by rpki-client