
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json)
Hash identifier: hUZ/sa0lZYN+bxOW9Q5llgbmr5VnVMcKEFRXzZ8Npno=
Subject key identifier: 7C:EC:C9:06:C9:80:F9:3A:65:F4:F0:25:77:6A:74:70:0C:27:07:5D
Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Certificate serial: 0372
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
Manifest number: 0369
Signing time: Mon 05 Oct 2026 00:52:28 +0000
Manifest this update: Mon 05 Oct 2026 00:52:27 +0000
Manifest next update: Mon 12 Oct 2026 00:52:27 +0000
Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: IDQ8gDZ1p9iPLubbHG3XKxT6FQLJGNd438idK0RM/wY=)
2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: GmoVWMVaQCe3fAG+ffrSeaTBcuJkexIzDglD0FGJBNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:52:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Validity
Not Before: Oct 5 00:52:27 2026 GMT
Not After : Oct 12 00:52:27 2026 GMT
Subject: CN=6ac2f4cb-194e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:54:ba:a6:19:57:9f:f3:64:11:ee:d3:e0:
fd:94:ad:e6:55:74:7f:51:20:4a:a6:5b:3f:38:8e:
d2:e7:32:7e:52:48:2c:aa:75:b9:7b:66:e2:dc:ae:
b4:bb:d4:7f:be:e4:44:8b:8d:71:d3:96:9e:35:63:
d6:e8:d8:76:0b:0f:6b:24:85:37:57:50:35:ba:cc:
af:02:30:e9:e3:14:1b:51:ae:6a:b0:b6:35:5f:5c:
04:23:59:37:f0:d0:50:3a:9d:bc:e2:1f:d7:6a:ce:
1d:0f:88:94:d6:c2:d2:25:0a:db:22:75:fa:0b:f2:
0e:a5:af:a3:04:fb:a2:23:42:6e:26:e9:a9:41:3c:
09:5a:a6:4f:ff:17:94:9d:22:aa:a0:6c:a1:bf:0d:
fd:ce:17:89:fc:e3:9a:19:c5:61:93:47:79:f7:00:
d4:06:d9:5d:dc:97:06:a8:59:af:19:4e:63:98:3a:
a1:54:c4:34:17:70:d9:1e:f8:47:e2:6b:bd:2a:c0:
fa:67:11:0e:ef:99:d0:db:c6:1a:12:27:6e:e3:e3:
b3:ec:cd:99:8e:ea:1a:c1:57:09:7e:10:89:70:40:
c5:68:c5:ad:50:39:4b:36:a2:87:37:23:9d:62:2e:
a3:55:6e:bc:37:95:26:49:82:9b:43:19:e0:52:c4:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EC:C9:06:C9:80:F9:3A:65:F4:F0:25:77:6A:74:70:0C:27:07:5D
X509v3 Authority Key Identifier:
keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:77:62:86:0f:86:bf:e2:c6:6c:25:55:71:25:4e:f4:34:13:
af:b4:88:41:a8:d3:32:a5:3e:1f:93:4c:27:f9:df:95:36:0d:
72:9b:50:b1:6b:fb:a6:43:c7:02:8d:96:1f:65:a2:20:f4:53:
35:2b:d7:21:4c:7e:62:f6:00:52:31:8a:56:04:b1:e2:31:3a:
22:59:a3:b5:85:39:7e:3c:4c:f9:22:eb:86:73:26:a6:3e:bc:
ae:80:2f:d3:0f:08:98:36:9f:fa:a3:a6:33:43:7f:6f:fb:44:
f1:96:98:f4:5f:18:1f:5d:0d:36:63:12:28:03:ff:df:64:2a:
61:32:81:1f:66:0a:f7:a8:1e:ad:aa:88:0a:f5:a3:16:ea:0e:
cd:ae:b8:0c:01:ea:91:ca:8c:2d:73:ae:e6:78:c2:e2:63:38:
6d:1a:6c:42:5b:c9:f4:02:dd:1b:f1:7b:37:63:7f:01:d8:19:
31:93:dc:4d:af:7a:2b:27:ca:03:f3:6a:0d:af:40:21:f2:b3:
22:8b:eb:e3:24:eb:92:a8:42:66:28:47:9f:05:34:37:66:33:
45:96:74:8f:97:00:fe:7d:cd:47:d6:b8:47:40:ee:90:6b:1d:
f2:b9:a0:70:94:d8:92:c6:75:f2:b6:7d:1d:bc:de:bb:24:86:
f8:87:f5:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3
N0NGNkFGMDAwHhcNMjYxMDA1MDA1MjI3WhcNMjYxMDEyMDA1MjI3WjAYMRYwFAYD
VQQDEw02YWMyZjRjYi0xOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmphUuqYZV5/zZBHu0+D9lK3mVXR/USBKpls/OI7S5zJ+UkgsqnW5e2bi3K60
u9R/vuREi41x05aeNWPW6Nh2Cw9rJIU3V1A1usyvAjDp4xQbUa5qsLY1X1wEI1k3
8NBQOp284h/Xas4dD4iU1sLSJQrbInX6C/IOpa+jBPuiI0JuJumpQTwJWqZP/xeU
nSKqoGyhvw39zheJ/OOaGcVhk0d59wDUBtld3JcGqFmvGU5jmDqhVMQ0F3DZHvhH
4mu9KsD6ZxEO75nQ28YaEidu4+Oz7M2ZjuoawVcJfhCJcEDFaMWtUDlLNqKHNyOd
Yi6jVW68N5UmSYKbQxngUsSAyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzsyQbJ
gPk6ZfTwJXdqdHAMJwddMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy
RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ
LWxWTktFTDFoQmgzejJyd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYndihg+Gv+LGbCVVcSVO9DQTr7SIQajTMqU+H5NMJ/nflTYNcptQsWv7pkPH
Ao2WH2WiIPRTNSvXIUx+YvYAUjGKVgSx4jE6IlmjtYU5fjxM+SLrhnMmpj68roAv
0w8ImDaf+qOmM0N/b/tE8ZaY9F8YH10NNmMSKAP/32QqYTKBH2YK96geraqICvWj
FuoOza64DAHqkcqMLXOu5njC4mM4bRpsQlvJ9ALdG/F7N2N/AdgZMZPcTa96KyfK
A/NqDa9AIfKzIovr4yTrkqhCZihHnwU0N2YzRZZ0j5cA/n3NR9a4R0DukGsd8rmg
cJTYksZ18rZ9HbzeuySG+If11A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:36:40 2026 by rpki-client