
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
File: yq12WnMFvBUlSxWyW1vTm2Oow68.mft (raw, json)
Hash identifier: /A6/UtbQEP8i4s6bzs0UU+0oCU6rtMpy7jB+4vDWrZc=
Subject key identifier: A9:41:D8:3F:3A:6E:97:53:E8:5D:2F:E4:6C:86:CD:E8:B2:2D:28:D7
Authority key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
Certificate issuer: /CN=A911082E/serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
Manifest number: EC
Signing time: Wed 21 Oct 2026 06:59:40 +0000
Manifest this update: Wed 21 Oct 2026 06:59:39 +0000
Manifest next update: Wed 28 Oct 2026 06:59:39 +0000
Files and hashes: 1: yq12WnMFvBUlSxWyW1vTm2Oow68.crl (hash: Uey9dmxrolDri5K1RlckzSAXQRz04ObfAjs2EGaBL4g=)
2: 2CD74E4E66E311F08F05EC49C4F9AE02.roa (hash: /XD7eUERO5lWybTU1XRtBW6LwOkjsdG2lxm5wvSE3SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl
rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 06:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Validity
Not Before: Oct 21 06:59:39 2026 GMT
Not After : Oct 28 06:59:39 2026 GMT
Subject: CN=6ad862dc-17fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:db:93:e9:35:66:96:8f:8f:72:39:78:27:
38:5c:50:6b:35:d5:b6:82:ad:68:6c:a1:12:7d:3b:
35:15:f7:36:41:05:65:da:83:49:e8:05:8a:7d:91:
9f:84:c9:02:52:2e:8f:f5:3d:49:dc:db:6f:dd:6e:
fc:a6:0f:0d:3a:75:b1:cb:14:b8:50:86:e5:db:89:
55:69:6e:40:76:5b:e2:b0:81:ed:0a:ee:5f:34:8f:
c9:81:41:b1:47:c0:07:bb:9e:d8:7f:0a:92:6d:b9:
38:43:c7:1d:e0:3d:5f:db:c2:ba:dd:fb:16:26:27:
5e:67:75:4c:c1:37:70:fc:ae:b0:28:2d:d0:54:7b:
2d:8b:4d:30:07:b4:d2:a8:8c:e5:ed:15:66:2f:fd:
b2:bc:f9:a4:69:f8:dd:c0:13:5d:fc:ce:b7:7a:6d:
0a:cf:3b:38:33:bc:e9:a5:c6:61:91:cf:6f:ff:c6:
e9:27:03:08:37:31:f8:99:cb:cd:bf:05:b8:9c:c9:
ec:8f:3d:90:ce:86:35:2c:75:e3:48:38:af:c1:51:
f4:69:f4:bd:a7:be:80:ae:0d:73:fc:19:cb:9e:59:
0c:4c:9b:c1:77:ac:6f:ae:eb:0c:9b:6e:1b:87:e8:
b0:0c:61:5f:b4:96:8a:9d:5d:0f:17:99:c2:1a:5a:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:D8:3F:3A:6E:97:53:E8:5D:2F:E4:6C:86:CD:E8:B2:2D:28:D7
X509v3 Authority Key Identifier:
keyid:CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:7a:90:2c:95:ce:cd:32:bd:fc:60:20:4b:97:4c:9f:bb:e7:
13:23:17:6b:61:2d:bf:27:f2:ec:0c:b2:88:03:80:48:8c:b8:
4f:95:b6:d2:94:73:ec:cd:f3:84:e3:53:af:0e:d0:fc:72:a4:
d0:5f:16:1a:e1:f7:ab:8e:90:b2:57:38:54:a1:46:f4:b8:cc:
34:9a:d5:1b:ae:de:f4:8f:8f:3e:60:0f:6c:f6:7b:2a:d1:0b:
a7:a5:8e:ac:e9:7c:14:44:f8:b6:4a:31:a6:71:92:6d:37:14:
ee:fc:52:b5:6c:76:ae:0b:fa:f1:2e:3a:7c:af:c1:8e:80:f6:
fc:0f:d2:93:c1:d9:db:fc:6c:7c:18:15:94:a9:2c:17:3f:43:
d9:28:b4:d6:90:4c:1a:67:6f:98:bd:8f:07:c5:5c:a7:c0:70:
df:ce:5f:94:7d:db:13:14:fc:2b:0e:0b:2a:c6:52:bf:8d:10:
df:04:a9:50:b9:c2:b5:92:92:78:7c:2b:0e:e6:cf:81:14:92:
f9:1d:9d:2f:3d:ae:79:8e:a2:90:ec:99:36:d6:41:00:5a:75:
41:e0:6c:b0:21:9d:cd:e3:ee:f9:7a:5c:41:df:0d:09:61:50:
75:94:54:67:9a:cc:52:38:96:b8:3d:b4:30:9a:4b:46:04:68:
be:d2:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:34:00 2026 by rpki-client