
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
File: yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft (raw, json)
Hash identifier: WoRv8Khh4+/dHZEbQwGT0OjnWnlGO1RNmQPF2H9b5Y4=
Subject key identifier: F8:60:E0:16:E0:04:3A:44:25:B1:F8:38:D4:A1:CC:28:B5:63:9B:C7
Authority key identifier: C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD
Certificate issuer: /CN=A9115A7C/serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
Manifest number: 21
Signing time: Fri 09 Oct 2026 09:39:30 +0000
Manifest this update: Fri 09 Oct 2026 09:39:29 +0000
Manifest next update: Fri 16 Oct 2026 09:39:29 +0000
Files and hashes: 1: yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl (hash: AusDMs0tROkMdQrPAQdFmV4lhqp0Hbq9AfQX5+v+yhw=)
2: 36E2673093A511F1A63A7D946011F970.roa (hash: YQjNMHo8sTM3LQcrU6VgB0vtk3GGCVQb//8/KSSTf30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl
rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115A7C, serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
Validity
Not Before: Oct 9 09:39:29 2026 GMT
Not After : Oct 16 09:39:29 2026 GMT
Subject: CN=6ac8b651-9abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:86:8a:17:94:5f:ce:06:b5:5f:1a:ea:fa:
e7:76:c6:8c:16:28:7b:d5:6f:f5:85:6a:38:24:1f:
87:08:21:7b:83:a0:20:42:60:90:19:87:e6:1c:fc:
d3:8e:9c:55:4b:50:eb:4e:c1:ae:dc:67:b4:7a:2c:
b5:20:d0:1f:c0:00:9e:bd:78:aa:49:38:29:71:48:
ae:53:3f:d2:77:2e:60:3c:01:91:84:c4:27:a9:21:
e1:36:8b:16:92:ff:da:f8:4e:5a:b5:97:db:c7:53:
88:bf:61:4d:b8:16:2e:6c:1b:9d:f6:71:75:bc:6a:
60:c8:3f:e0:b8:3c:9a:c9:ad:e1:53:3d:87:78:be:
a9:c0:be:23:21:6e:c9:2b:af:fe:ce:8f:d1:89:7c:
dd:8e:0d:82:8e:7f:89:57:0e:61:29:15:30:64:a4:
c8:c2:c6:50:3d:de:77:7d:47:b4:17:15:55:8e:9c:
10:19:c9:3a:2a:f5:74:4a:d9:58:f8:b3:da:96:6d:
e2:90:61:f7:55:12:6a:d7:8d:55:96:3e:7d:4a:60:
99:c1:01:30:c4:12:02:5c:6a:27:fe:5f:0e:2c:82:
82:55:83:ec:66:3c:6c:11:ee:a8:a5:d1:ee:f8:8d:
3a:b4:0f:c7:2d:7a:98:51:be:a4:62:4e:03:81:fa:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:60:E0:16:E0:04:3A:44:25:B1:F8:38:D4:A1:CC:28:B5:63:9B:C7
X509v3 Authority Key Identifier:
keyid:C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:f6:e4:f6:23:57:f5:0f:cb:e2:3b:e7:ab:eb:3a:1c:5a:c1:
08:50:57:56:83:ce:32:63:d4:49:aa:42:ad:e4:5a:db:be:83:
98:5b:9a:52:89:ea:fe:74:a6:32:37:30:e5:0d:93:ca:43:4e:
ab:70:66:45:52:ee:ac:68:82:93:85:2d:60:53:1f:10:79:b5:
4e:d3:c6:4a:67:bf:ba:6f:9c:e2:75:c6:bd:ab:64:e4:76:df:
71:98:96:ea:97:95:f0:2f:47:3a:89:e6:0b:2a:f7:6e:b2:12:
2b:32:c9:2c:3c:58:93:d0:cb:3d:12:66:99:3f:4d:a5:db:67:
80:2f:d3:46:f4:ad:9b:f4:0b:40:60:29:ce:46:46:2a:e8:1c:
a0:d4:51:e1:17:da:5d:a1:6e:f2:78:5a:9d:8e:97:e6:39:0a:
b6:4b:2e:f6:a6:ae:ae:a4:57:fd:05:ec:1f:a4:77:6b:bc:4e:
ea:ac:51:4a:80:79:07:3e:51:e9:e6:8b:c9:26:b5:b9:f3:cb:
96:3d:f9:99:5f:e9:54:33:60:50:1f:13:54:35:83:f8:0a:88:
7f:e6:78:8b:d8:7c:72:ac:38:72:c7:23:47:f3:08:63:27:46:
da:4e:c6:d4:0a:4e:30:78:52:c9:d6:6c:b3:46:bb:ec:5e:38:
95:27:f3:71
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NUE3QzExMC8GA1UEBRMoQzg1RTE2REQ3QjQ5NzVFMzVGNkNCODNBQUY4RjgzRjhB
OTFCN0FERDAeFw0yNjEwMDkwOTM5MjlaFw0yNjEwMTYwOTM5MjlaMBgxFjAUBgNV
BAMTDTZhYzhiNjUxLTlhYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpGIaKF5Rfzga1Xxrq+ud2xowWKHvVb/WFajgkH4cIIXuDoCBCYJAZh+Yc/NOO
nFVLUOtOwa7cZ7R6LLUg0B/AAJ69eKpJOClxSK5TP9J3LmA8AZGExCepIeE2ixaS
/9r4Tlq1l9vHU4i/YU24Fi5sG532cXW8amDIP+C4PJrJreFTPYd4vqnAviMhbskr
r/7Oj9GJfN2ODYKOf4lXDmEpFTBkpMjCxlA93nd9R7QXFVWOnBAZyToq9XRK2Vj4
s9qWbeKQYfdVEmrXjVWWPn1KYJnBATDEEgJcaif+Xw4sgoJVg+xmPGwR7qil0e74
jTq0D8ctephRvqRiTgOB+onfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+GDgFuAE
OkQlsfg41KHMKLVjm8cwHwYDVR0jBBgwFoAUyF4W3XtJdeNfbLg6r4+D+Kkbet0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1QTdDLzNFMEZFNDNFOTNB
NDExRjFBODcwODI0NjYwMTFGOTcwL3lGNFczWHRKZGVOZmJMZzZyNC1ELUtrYmV0
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveUY0VzNYdEpkZU5mYkxnNnI0LUQtS2tiZXQwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1
QTdDLzNFMEZFNDNFOTNBNDExRjFBODcwODI0NjYwMTFGOTcwL3lGNFczWHRKZGVO
ZmJMZzZyNC1ELUtrYmV0MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAE9uT2I1f1D8viO+er6zocWsEIUFdWg84yY9RJqkKt5FrbvoOYW5pSier+dKYy
NzDlDZPKQ06rcGZFUu6saIKThS1gUx8QebVO08ZKZ7+6b5zidca9q2Tkdt9xmJbq
l5XwL0c6ieYLKvdushIrMsksPFiT0Ms9EmaZP02l22eAL9NG9K2b9AtAYCnORkYq
6Byg1FHhF9pdoW7yeFqdjpfmOQq2Sy72pq6upFf9BewfpHdrvE7qrFFKgHkHPlHp
5ovJJrW588uWPfmZX+lUM2BQHxNUNYP4Coh/5niL2HxyrDhyxyNH8whjJ0baTsbU
Ck4weFLJ1myzRrvsXjiVJ/Nx
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:16:24 2026 by rpki-client