
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
File: 6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json)
Hash identifier: zIY/+XvOCehAVk6CAixpPpYuU9Kojdd+ImJyTiTJDM0=
Subject key identifier: 78:F2:8B:42:55:4E:85:C2:1C:21:12:FC:6A:95:EF:5F:CB:9A:A7:0B
Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Certificate serial: 0254
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
Manifest number: 024A
Signing time: Sat 05 Sep 2026 02:17:09 +0000
Manifest this update: Sat 05 Sep 2026 02:17:09 +0000
Manifest next update: Sat 12 Sep 2026 02:17:09 +0000
Files and hashes: 1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: k2OOKJE9hmOVh8FTIVY9czYJKK8m5w6tnftS4KRnFCo=)
2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: tIvp8qW6N9XhfrDT2d7umnUb5rMusihwgNBGCHbD2+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Validity
Not Before: Sep 5 02:17:09 2026 GMT
Not After : Sep 12 02:17:09 2026 GMT
Subject: CN=6a9b7ba5-c45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:7a:5a:f6:d2:ed:af:b0:de:d3:ec:21:04:
23:72:2b:b3:71:f7:ea:db:ce:94:33:ab:56:dc:ad:
c1:5a:d7:91:fe:14:12:7a:27:75:2e:87:e9:48:1b:
d2:b7:ce:3d:97:c9:5e:36:93:c0:52:2d:ce:b9:b1:
e0:98:d9:6f:91:9b:26:e0:14:96:11:7f:60:df:ec:
af:bb:d9:25:f6:dc:17:06:cd:fa:fb:88:0d:ad:78:
18:1c:47:44:28:c4:33:7c:42:a5:26:2c:1d:a2:38:
4e:90:c0:b8:b7:85:e7:e9:ed:3b:75:83:20:2a:e4:
68:60:6f:e9:02:c2:0d:c8:c2:81:0c:f2:8e:66:2a:
1a:ea:05:a5:52:0c:e3:da:52:59:26:da:e5:f5:cc:
e4:a5:9f:17:dd:36:14:3e:ab:b6:e5:45:bd:c4:b9:
88:5d:40:1e:86:90:2e:b2:2b:fd:98:c1:f0:87:86:
5d:70:dd:9b:d1:61:9c:24:17:77:79:3e:e9:ea:5a:
5d:d8:7d:cc:9f:17:18:3a:56:a9:8f:56:12:2c:ca:
d3:a3:3f:d7:98:52:8b:fb:88:15:90:27:cd:a1:d4:
f9:25:77:ce:31:29:33:7c:5d:bd:93:64:61:bc:da:
7d:ea:e2:50:fd:0b:3d:00:f1:e6:35:c5:42:f7:3c:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:8B:42:55:4E:85:C2:1C:21:12:FC:6A:95:EF:5F:CB:9A:A7:0B
X509v3 Authority Key Identifier:
keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:92:c0:fa:d7:4a:49:e5:ee:09:36:02:69:b2:82:fa:2a:2b:
e1:0a:e1:63:fb:f5:4c:23:6a:90:88:9a:e5:3e:9c:af:f7:fd:
cb:84:d0:77:28:b5:84:51:c8:24:b0:6f:69:e4:f7:f8:c4:00:
b2:af:73:f2:7a:5a:f7:40:49:0a:78:cb:2b:a9:b5:c3:0d:86:
1c:7f:ad:1b:6c:58:8d:01:1a:44:b3:7b:c3:47:8f:78:0d:48:
32:ac:86:fb:3a:3a:3a:1f:24:f2:b9:fa:a6:0e:7a:fd:29:22:
ef:fb:5d:ee:76:b8:e4:00:d1:e9:11:4a:65:9b:ae:66:e2:e4:
e4:7f:f4:88:9c:5f:27:d0:f3:e6:0c:02:a6:d3:55:86:52:39:
51:9a:3e:5d:85:ca:39:4e:14:c1:93:d4:11:21:b6:19:0a:a7:
fb:68:1f:91:23:c4:8e:1e:ef:a4:8c:7a:8a:85:df:7d:04:93:
e5:57:3a:5f:bc:1a:5b:ff:87:4d:01:76:a7:73:e5:58:0a:4e:
8b:55:a1:84:2c:2f:e9:48:8a:1d:8e:16:db:77:c1:42:d6:dd:
fb:44:ad:1a:28:bf:d5:39:9e:e9:ac:39:07:40:a6:d9:95:d7:
cc:ea:fc:94:48:59:f1:c9:8f:7d:1c:11:73:1c:0c:c2:e8:ec:
b7:be:8f:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3
NDJEQ0U4MTAwHhcNMjYwOTA1MDIxNzA5WhcNMjYwOTEyMDIxNzA5WjAYMRYwFAYD
VQQDEw02YTliN2JhNS1jNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0m56WvbS7a+w3tPsIQQjciuzcffq286UM6tW3K3BWteR/hQSeid1LofpSBvS
t849l8leNpPAUi3OubHgmNlvkZsm4BSWEX9g3+yvu9kl9twXBs36+4gNrXgYHEdE
KMQzfEKlJiwdojhOkMC4t4Xn6e07dYMgKuRoYG/pAsINyMKBDPKOZioa6gWlUgzj
2lJZJtrl9czkpZ8X3TYUPqu25UW9xLmIXUAehpAusiv9mMHwh4ZdcN2b0WGcJBd3
eT7p6lpd2H3MnxcYOlapj1YSLMrToz/XmFKL+4gVkCfNodT5JXfOMSkzfF29k2Rh
vNp96uJQ/Qs9APHmNcVC9zylkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjyi0JV
ToXCHCES/GqV71/LmqcLMB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx
QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REI5OS9CQzY1OUJDNjMxQjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3
MGZ0YlpTUzVhZFIwTGM2QkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATpLA+tdKSeXuCTYCabKC+ior4QrhY/v1TCNqkIia5T6cr/f9y4TQdyi1hFHI
JLBvaeT3+MQAsq9z8npa90BJCnjLK6m1ww2GHH+tG2xYjQEaRLN7w0ePeA1IMqyG
+zo6Oh8k8rn6pg56/Ski7/td7na45ADR6RFKZZuuZuLk5H/0iJxfJ9Dz5gwCptNV
hlI5UZo+XYXKOU4UwZPUESG2GQqn+2gfkSPEjh7vpIx6ioXffQST5Vc6X7waW/+H
TQF2p3PlWApOi1WhhCwv6UiKHY4W23fBQtbd+0StGii/1Tme6aw5B0Cm2ZXXzOr8
lEhZ8cmPfRwRcxwMwujst76PFQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:24:55 2026 by rpki-client