
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File: yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier: kOthAv4pw4+t05qKvf0Cy0tYTGb8b1pcJOt9Cxxxsvw=
Subject key identifier: 48:65:F7:F5:7C:76:A3:86:EC:6B:FD:AF:D6:D4:E4:2E:F0:A7:55:23
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer: /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial: 0CE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number: 0CDB
Signing time: Tue 18 Aug 2026 18:42:53 +0000
Manifest this update: Tue 18 Aug 2026 18:42:53 +0000
Manifest next update: Tue 25 Aug 2026 18:42:53 +0000
Files and hashes: 1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: GPtjTx7nMp7Z8sW3yhZyxHE77sdOvUTmMQvhL8wnntY=)
2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: k4o/xpl05MWpxfINsWsD9ge7BlRuKXGB+2xC5Rxqzp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Validity
Not Before: Aug 18 18:42:53 2026 GMT
Not After : Aug 25 18:42:53 2026 GMT
Subject: CN=6a84a7ad-ce0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:f9:0a:47:97:b0:84:5f:38:b1:74:08:89:
cd:b6:06:74:6e:e0:35:f5:7c:74:0b:aa:62:7e:61:
da:86:84:3d:64:00:7d:f5:79:1c:e9:7b:70:83:a4:
c0:d3:99:e3:d1:cd:8b:41:d3:aa:38:92:76:a0:40:
79:ee:89:df:f1:89:ce:b0:e8:85:7a:c9:f6:4b:50:
12:d7:cf:06:b7:ba:f8:dd:c2:9d:da:f2:5d:96:30:
7e:9d:aa:6b:34:60:cd:2f:e4:c7:b7:76:a8:20:a9:
43:fc:23:5d:1e:39:ba:70:a2:60:cf:ac:59:b6:bc:
ce:46:78:d8:0d:49:49:39:71:f2:c1:76:81:c0:21:
72:f8:ee:97:e2:fa:cb:39:60:59:24:e0:72:7e:3d:
93:b5:a9:69:22:36:7a:09:49:9e:4c:3a:3a:04:e5:
a1:9e:0f:9c:28:18:0c:53:77:96:97:93:47:01:de:
ac:6c:ba:07:05:09:c5:45:8b:5f:a2:a8:c4:89:d6:
3b:07:e0:26:ab:41:2e:a4:13:b0:ea:5b:64:c6:db:
9a:02:b5:22:aa:49:15:4a:13:6d:02:b4:90:8c:f9:
d5:55:80:70:0c:25:96:0a:49:fb:26:bc:de:b9:d0:
5e:1f:92:4e:fe:44:ad:fd:58:4d:ad:4f:12:f1:8d:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:65:F7:F5:7C:76:A3:86:EC:6B:FD:AF:D6:D4:E4:2E:F0:A7:55:23
X509v3 Authority Key Identifier:
keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:8d:e3:36:54:41:f3:b5:df:aa:dc:7f:81:27:2d:45:18:cb:
41:3d:f9:3f:80:1d:34:17:f8:2d:ec:b3:e2:30:ef:29:7d:c1:
58:29:a8:9f:1a:43:ef:81:ee:63:76:0c:7f:13:88:e0:71:18:
6b:c5:ca:f1:66:15:94:4b:44:71:b1:7a:55:f1:29:dd:0a:e4:
9a:b5:1c:c7:8c:f5:2a:98:7b:34:b6:ed:d2:92:82:3f:0d:6e:
e7:51:af:77:f6:2c:0f:7c:4c:93:15:5f:95:42:2b:90:8b:8d:
21:43:99:2d:25:3c:6d:7a:29:93:61:9d:31:93:bd:2d:bb:88:
18:63:2d:1b:84:26:79:0e:54:a9:00:fe:63:c2:8d:92:99:0c:
6e:97:54:9f:10:b3:b7:07:c3:78:86:77:91:4f:52:98:64:06:
62:6a:17:0f:10:79:46:b3:a0:3f:62:fd:6f:de:dc:be:2c:3c:
83:76:ef:88:18:9d:08:11:30:8a:35:aa:7c:85:19:4a:b3:a9:
b7:da:15:f8:8e:f8:3e:1e:61:97:e6:40:aa:32:a0:9e:63:dc:
bd:a1:9b:bc:6e:8f:58:f3:a8:9a:5f:ef:02:e7:5c:ee:ec:3f:
cd:16:7f:ae:cc:de:f7:42:72:98:1d:d4:a2:db:2d:de:af:a9:
5f:fc:d5:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJEMjUxMTAvBgNVBAUTKEM5MDlCREIyODRFNERGMDg0Nzc2NjBENjgyQjdDQjNG
NTk0ODMxRTMwHhcNMjYwODE4MTg0MjUzWhcNMjYwODI1MTg0MjUzWjAYMRYwFAYD
VQQDEw02YTg0YTdhZC1jZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2eH5CkeXsIRfOLF0CInNtgZ0buA19Xx0C6pifmHahoQ9ZAB99Xkc6Xtwg6TA
05nj0c2LQdOqOJJ2oEB57onf8YnOsOiFesn2S1AS188Gt7r43cKd2vJdljB+napr
NGDNL+THt3aoIKlD/CNdHjm6cKJgz6xZtrzORnjYDUlJOXHywXaBwCFy+O6X4vrL
OWBZJOByfj2TtalpIjZ6CUmeTDo6BOWhng+cKBgMU3eWl5NHAd6sbLoHBQnFRYtf
oqjEidY7B+Amq0EupBOw6ltkxtuaArUiqkkVShNtArSQjPnVVYBwDCWWCkn7Jrze
udBeH5JO/kSt/VhNrU8S8Y0b4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhl9/V8
dqOG7Gv9r9bU5C7wp1UjMB8GA1UdIwQYMBaAFMkJvbKE5N8IR3Zg1oK3yz9ZSDHj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQyNS8wN0Y4MjE0QTE0
RTQxMUVBODc2RTg2NDBDNEY5QUUwMi95UW05c29UazN3aEhkbURXZ3JmTFAxbElN
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lRbTlzb1RrM3doSGRtRFdncmZMUDFsSU1lTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkQyNS8wN0Y4MjE0QTE0RTQxMUVBODc2RTg2NDBDNEY5QUUwMi95UW05c29UazN3
aEhkbURXZ3JmTFAxbElNZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgo3jNlRB87Xfqtx/gSctRRjLQT35P4AdNBf4Leyz4jDvKX3BWCmonxpD74Hu
Y3YMfxOI4HEYa8XK8WYVlEtEcbF6VfEp3QrkmrUcx4z1Kph7NLbt0pKCPw1u51Gv
d/YsD3xMkxVflUIrkIuNIUOZLSU8bXopk2GdMZO9LbuIGGMtG4QmeQ5UqQD+Y8KN
kpkMbpdUnxCztwfDeIZ3kU9SmGQGYmoXDxB5RrOgP2L9b97cviw8g3bviBidCBEw
ijWqfIUZSrOpt9oV+I74Ph5hl+ZAqjKgnmPcvaGbvG6PWPOoml/vAudc7uw/zRZ/
rsze90JymB3Uotst3q+pX/zVpg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:16 2026 by rpki-client