
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
File: yl3F7VK2QLF0vjjiadTEniVnTxc.mft (raw, json)
Hash identifier: VLqpT6RUv/gJtaKYPyG1itpwIcl1pii3lv0a1CKtLzY=
Subject key identifier: 27:B5:8C:60:0A:E3:39:E8:4D:C6:11:F0:21:EB:6F:5D:A0:02:09:58
Authority key identifier: CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
Certificate issuer: /CN=A9127687/serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
Manifest number: 4B
Signing time: Mon 05 Oct 2026 08:50:04 +0000
Manifest this update: Mon 05 Oct 2026 08:50:03 +0000
Manifest next update: Mon 12 Oct 2026 08:50:03 +0000
Files and hashes: 1: yl3F7VK2QLF0vjjiadTEniVnTxc.crl (hash: EVweE4FHZIc+neAAdy+CmvFEUILPTz6dq3A1S2ZjzWU=)
2: 76FA27AE4E0E11F190083CE1CC833773.roa (hash: va/1lyhr1y7ZVbyMMDIeDeUDTkfRGTrO+6LCCS/pWVI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127687, serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Validity
Not Before: Oct 5 08:50:03 2026 GMT
Not After : Oct 12 08:50:03 2026 GMT
Subject: CN=6ac364bc-7e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:06:08:b4:5b:84:0c:c4:7e:30:cf:02:41:
ae:30:9a:eb:90:18:4c:e8:b7:e7:32:fd:f9:cc:95:
a8:4b:d6:c4:ad:4d:01:c8:e5:6f:0f:1b:58:55:25:
67:b4:6d:52:49:bc:03:75:14:39:00:1f:15:2f:7a:
32:5a:69:f7:16:8e:ba:aa:89:85:99:d9:15:88:60:
87:ab:e1:f7:a9:eb:20:e5:13:09:0b:f7:81:86:42:
90:3a:32:bc:9d:23:3a:29:5e:3d:db:9f:2d:8d:25:
a5:e4:86:92:bd:50:74:62:27:32:74:40:6b:df:eb:
aa:a1:95:af:ac:41:86:ae:8f:ae:bf:5d:6d:58:8b:
8c:ab:5b:39:f9:9f:33:f0:4b:45:0b:72:b2:5d:36:
0f:fc:e8:b7:22:c5:e1:4f:01:0a:b7:96:9e:da:1d:
af:f5:4c:22:8b:94:89:de:05:a2:b6:1f:40:3e:c9:
a5:b7:2e:bf:43:89:9a:4d:e3:3e:af:31:e7:8f:e3:
c8:06:11:7d:86:4b:f6:c9:ab:b8:0f:8f:4d:4b:7e:
e1:f6:3f:3f:01:28:04:67:b9:31:ce:5d:91:f4:6a:
ec:6a:76:0c:3e:71:e8:eb:8b:71:56:30:23:98:1a:
9a:58:41:4f:d1:6c:91:66:76:34:cf:a7:0e:77:b0:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B5:8C:60:0A:E3:39:E8:4D:C6:11:F0:21:EB:6F:5D:A0:02:09:58
X509v3 Authority Key Identifier:
keyid:CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:41:5a:a6:be:42:cc:2b:c2:3c:ed:89:8e:ff:45:cf:8e:b8:
57:73:eb:64:9b:75:44:56:b1:9c:20:f5:ce:2c:a7:fe:49:93:
70:1e:4e:90:e9:ec:cb:1f:c4:83:3c:6d:2a:2e:02:a1:03:98:
03:19:c8:84:1d:f3:7d:34:68:76:a2:6b:89:69:05:15:b3:9f:
ba:86:75:82:74:08:ee:6f:1d:2c:5f:f9:1c:57:e6:46:a7:7f:
9e:a3:2b:98:3c:94:bf:c5:0a:a3:9e:a0:b5:88:0f:7c:5f:13:
76:36:c3:b4:43:c8:6d:06:d5:db:17:a2:26:b0:25:21:62:47:
28:a7:cc:c2:bb:8f:af:4d:89:ac:8a:83:9c:b4:5a:f2:7a:b2:
a3:1f:f3:f4:d4:8b:ca:3b:8d:ac:0d:53:56:62:0b:1d:e5:59:
6d:8f:a2:a4:7a:98:fb:4f:c6:1c:88:ef:2d:a4:54:a5:90:6c:
6c:e0:8c:f7:10:91:94:07:10:d1:01:e2:5c:44:9b:55:fa:6d:
ab:3e:fd:0d:93:0f:a3:32:f5:35:f9:31:a3:53:a6:4c:2e:c0:
7e:0c:0c:7e:ed:98:92:a7:66:e5:d2:b0:f8:88:a4:63:b5:f1:
ca:a4:0a:35:b1:15:ca:73:bc:31:96:13:26:5c:be:5a:c8:09:
fd:3d:9c:a6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NzY4NzExMC8GA1UEBRMoQ0E1REM1RUQ1MkI2NDBCMTc0QkUzOEUyNjlENEM0OUUy
NTY3NEYxNzAeFw0yNjEwMDUwODUwMDNaFw0yNjEwMTIwODUwMDNaMBgxFjAUBgNV
BAMTDTZhYzM2NGJjLTdlNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUTQYItFuEDMR+MM8CQa4wmuuQGEzot+cy/fnMlahL1sStTQHI5W8PG1hVJWe0
bVJJvAN1FDkAHxUvejJaafcWjrqqiYWZ2RWIYIer4fep6yDlEwkL94GGQpA6Mryd
IzopXj3bny2NJaXkhpK9UHRiJzJ0QGvf66qhla+sQYauj66/XW1Yi4yrWzn5nzPw
S0ULcrJdNg/86LcixeFPAQq3lp7aHa/1TCKLlIneBaK2H0A+yaW3Lr9DiZpN4z6v
MeeP48gGEX2GS/bJq7gPj01LfuH2Pz8BKARnuTHOXZH0auxqdgw+cejri3FWMCOY
GppYQU/RbJFmdjTPpw53sAgFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJ7WMYArj
OehNxhHwIetvXaACCVgwHwYDVR0jBBgwFoAUyl3F7VK2QLF0vjjiadTEniVnTxcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3Njg3LzE5NzU4ODNBNEUw
RTExRjE5OTU5RjhCQkNCODMzNzczL3lsM0Y3VksyUUxGMHZqamlhZFRFbmlWblR4
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveWwzRjdWSzJRTEYwdmpqaWFkVEVuaVZuVHhjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
Njg3LzE5NzU4ODNBNEUwRTExRjE5OTU5RjhCQkNCODMzNzczL3lsM0Y3VksyUUxG
MHZqamlhZFRFbmlWblR4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQASQVqmvkLMK8I87YmO/0XPjrhXc+tkm3VEVrGcIPXOLKf+SZNwHk6Q6ezLH8SD
PG0qLgKhA5gDGciEHfN9NGh2omuJaQUVs5+6hnWCdAjubx0sX/kcV+ZGp3+eoyuY
PJS/xQqjnqC1iA98XxN2NsO0Q8htBtXbF6ImsCUhYkcop8zCu4+vTYmsioOctFry
erKjH/P01IvKO42sDVNWYgsd5Vltj6Kkepj7T8YciO8tpFSlkGxs4Iz3EJGUBxDR
AeJcRJtV+m2rPv0Nkw+jMvU1+TGjU6ZMLsB+DAx+7ZiSp2bl0rD4iKRjtfHKpAo1
sRXKc7wxlhMmXL5ayAn9PZym
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:24:43 2026 by rpki-client