
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json)
Hash identifier: PfYgmEjJ8azVWS5+LdlA93ng6Z7w90fI5G6NGfNGIjQ=
Subject key identifier: D9:D5:9D:FC:9F:AB:10:41:41:71:05:F2:82:27:07:17:CE:57:69:66
Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
Manifest number: 0E56
Signing time: Sat 24 Oct 2026 19:00:32 +0000
Manifest this update: Sat 24 Oct 2026 19:00:31 +0000
Manifest next update: Sat 31 Oct 2026 19:00:31 +0000
Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: VOUWCn26tVOpUf/38uwsMqV0VlXoQzQJupzkUDU0PJ4=)
2: 21980772889311F09BCDF026C4F9AE02.roa (hash: bV3VCAOcVbgdSch/nYusz9I52dpCIoj+s37MruAcxdM=)
3: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: tr2lD7o9Jj2eezYb6KX+vn/JZs+QxwzBoXg4U7YfC4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Validity
Not Before: Oct 24 19:00:31 2026 GMT
Not After : Oct 31 19:00:31 2026 GMT
Subject: CN=6add0050-c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:aa:fb:44:6e:5f:f3:70:07:13:fe:c8:fc:
80:88:9d:a0:22:e6:7b:ed:f9:f7:15:1c:1d:6d:26:
ba:f8:02:89:f4:d1:94:92:e0:5b:d0:55:8f:67:29:
7d:6c:77:1b:00:b3:21:be:3e:5d:43:a4:fc:28:38:
1d:7c:e5:21:55:c1:b5:ef:26:94:d0:9c:22:ad:4a:
f8:f5:45:62:e0:3f:d3:8e:08:18:be:81:21:4c:88:
e3:ac:fe:94:72:40:c2:13:18:36:bf:55:d5:96:fc:
de:85:c4:41:84:34:93:14:0a:1f:e7:3c:4a:d4:03:
0d:5d:e0:63:14:49:2c:0f:a1:3b:9a:48:df:28:37:
d5:95:6c:7b:11:6e:ff:74:87:67:3b:0d:88:de:ea:
77:fa:fb:8e:49:be:5c:01:ca:56:22:1c:c6:37:f5:
f9:8a:6f:10:47:27:93:fe:cf:49:82:4f:2f:f4:d5:
c1:09:40:45:36:80:83:35:6d:d7:6b:df:f1:c9:21:
f5:c3:d3:79:e6:4a:f6:e3:88:c7:28:d3:2b:a1:94:
c0:0a:7a:a3:35:60:29:9c:33:4a:9c:fb:12:ec:a1:
43:e5:ea:0c:73:0e:5e:df:d0:fc:a7:27:ac:de:ce:
23:52:6e:b5:15:7f:59:da:4e:b0:c3:ce:65:39:c5:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:9D:FC:9F:AB:10:41:41:71:05:F2:82:27:07:17:CE:57:69:66
X509v3 Authority Key Identifier:
keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:b4:77:95:b6:d6:7d:96:e7:0c:b7:f7:28:25:1c:71:8f:88:
c1:dc:a2:0c:da:17:e0:54:06:ac:64:65:88:e8:ab:b3:f3:82:
42:63:fa:f3:e8:54:23:f0:fb:65:ae:95:4e:05:e3:15:ea:8f:
f7:30:8b:b1:fe:6d:34:58:3f:d6:8d:58:f2:0c:02:09:cd:dd:
cb:78:2f:a8:d6:0d:d4:1f:b1:95:61:58:72:46:ad:66:9b:a6:
d7:61:33:85:40:1d:25:e8:33:00:1c:18:2e:1f:7e:e3:dc:7a:
af:c6:a8:b8:29:c5:88:b7:9d:89:9c:33:a8:59:84:84:a3:00:
41:a6:0d:17:d7:9c:a7:d0:42:a5:ed:23:3a:a8:9a:dc:c3:bd:
b0:e1:49:59:cf:e9:42:00:b3:80:1d:32:4f:0a:fb:86:f3:85:
b5:7a:fd:21:c5:62:05:ee:99:42:a4:8e:1b:99:ff:32:c7:a0:
9b:70:56:7c:f6:ce:cf:51:26:c1:1e:6c:8b:e9:48:11:1b:a9:
00:43:e9:cc:df:7a:38:c6:63:0f:d1:c7:8d:a0:d0:32:8d:f2:
7f:62:93:e5:f6:3c:7e:5a:51:0d:25:a3:10:8d:00:1e:e3:5f:
df:7d:26:f4:4e:59:f0:69:36:07:75:73:1b:46:6c:28:c0:84:
ac:d8:7f:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD
NDMxQzU4MDIwHhcNMjYxMDI0MTkwMDMxWhcNMjYxMDMxMTkwMDMxWjAYMRYwFAYD
VQQDEw02YWRkMDA1MC1jMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJqq+0RuX/NwBxP+yPyAiJ2gIuZ77fn3FRwdbSa6+AKJ9NGUkuBb0FWPZyl9
bHcbALMhvj5dQ6T8KDgdfOUhVcG17yaU0JwirUr49UVi4D/TjggYvoEhTIjjrP6U
ckDCExg2v1XVlvzehcRBhDSTFAof5zxK1AMNXeBjFEksD6E7mkjfKDfVlWx7EW7/
dIdnOw2I3up3+vuOSb5cAcpWIhzGN/X5im8QRyeT/s9Jgk8v9NXBCUBFNoCDNW3X
a9/xySH1w9N55kr244jHKNMroZTACnqjNWApnDNKnPsS7KFD5eoMcw5e39D8pyes
3s4jUm61FX9Z2k6ww85lOcXJTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnVnfyf
qxBBQXEF8oInBxfOV2lmMB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx
OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3
ZDRteVE0cEk4aEhFTWNXQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk7R3lbbWfZbnDLf3KCUccY+IwdyiDNoX4FQGrGRliOirs/OCQmP68+hUI/D7
Za6VTgXjFeqP9zCLsf5tNFg/1o1Y8gwCCc3dy3gvqNYN1B+xlWFYckatZpum12Ez
hUAdJegzABwYLh9+49x6r8aouCnFiLediZwzqFmEhKMAQaYNF9ecp9BCpe0jOqia
3MO9sOFJWc/pQgCzgB0yTwr7hvOFtXr9IcViBe6ZQqSOG5n/Msegm3BWfPbOz1Em
wR5si+lIERupAEPpzN96OMZjD9HHjaDQMo3yf2KT5fY8flpRDSWjEI0AHuNf330m
9E5Z8Gk2B3VzG0ZsKMCErNh/iQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:10:12 2026 by rpki-client