
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier: 9gLcjDAbsI/19/Aif9XRjZEd9eoAV29mOF89dhTcimk=
Subject key identifier: C8:E5:72:2A:2E:86:DE:B5:61:74:AE:51:4B:5A:3D:A7:42:36:98:26
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number: 01A4
Signing time: Mon 05 Oct 2026 04:33:37 +0000
Manifest this update: Mon 05 Oct 2026 04:33:37 +0000
Manifest next update: Mon 12 Oct 2026 04:33:37 +0000
Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: aQ2Z/HirMxv+pKN5gfEZuy0ZyxzyNBPJzfq1OihxfdU=)
2: A8051CC4508011EF81053074C4F9AE02.roa (hash: gEOQ4Shko9Ffhb3sUw/V54wk1wOVzUKZiGrhJDBT6Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Validity
Not Before: Oct 5 04:33:37 2026 GMT
Not After : Oct 12 04:33:37 2026 GMT
Subject: CN=6ac328a1-8a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:8c:b6:91:9c:ad:c3:db:fa:32:c8:fa:12:
0f:b9:7d:64:db:9d:a0:6b:5b:69:ac:c1:6e:fc:14:
6b:38:95:11:c3:0a:fc:5a:82:1c:94:28:11:3f:84:
56:39:ff:7d:b2:e8:0d:30:47:cc:08:44:fd:70:4a:
c5:48:7e:39:3b:65:bf:cc:dd:a4:15:76:61:f1:3a:
e5:ba:c6:aa:2a:6a:be:eb:dd:d7:c1:41:74:69:16:
d2:03:6e:a5:9f:fd:68:dc:9f:35:7e:9c:55:2d:b4:
46:d5:63:be:33:3e:97:55:b2:59:cf:95:fa:6d:94:
d3:c4:84:9d:1a:62:ec:d8:62:9d:14:16:72:cb:11:
bf:11:88:7f:7b:e1:d3:c8:aa:fa:79:d5:49:79:61:
b8:14:bd:68:af:40:6e:91:67:6e:35:da:b3:f1:ed:
cc:a1:06:78:1c:dc:10:65:00:9b:23:ca:3c:4a:1d:
57:dc:64:0a:10:92:a5:58:db:bd:03:bc:7d:a4:09:
5d:5a:e6:29:c2:84:29:5f:c9:c7:ea:66:81:b9:54:
12:e6:d8:94:6f:2b:ac:d0:5b:23:52:40:5f:07:3e:
98:8c:c2:52:5b:83:88:17:16:4d:67:f7:8d:ce:4c:
85:1e:16:07:71:df:a7:f6:93:bb:15:28:b5:58:34:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:72:2A:2E:86:DE:B5:61:74:AE:51:4B:5A:3D:A7:42:36:98:26
X509v3 Authority Key Identifier:
keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:46:9e:77:31:f9:93:47:a1:ce:5b:71:b5:3a:a3:04:3f:48:
e2:66:bf:7c:89:81:fb:d1:ad:20:35:28:27:46:b8:b0:c0:9b:
6a:82:79:48:d7:4d:28:0b:30:f1:60:bd:c5:cd:87:52:7a:d7:
f2:75:89:d4:a0:a5:60:8b:93:5a:9e:37:2c:36:cc:5a:de:d1:
d8:9b:44:d1:83:f6:7c:b2:84:8c:1c:31:79:eb:1c:95:54:4c:
35:fc:4d:72:79:ba:15:ff:ae:99:fd:43:9e:c9:63:83:93:da:
10:ea:a0:c8:5c:a8:83:16:12:99:38:9a:d0:33:22:ed:97:49:
33:fd:39:a7:0e:35:a1:41:58:40:14:20:4e:89:88:a8:cf:a3:
60:83:2d:3c:0d:ff:63:e8:24:00:05:6f:9f:39:7a:d0:7a:52:
4e:15:ff:23:6c:5f:97:45:a9:62:df:b3:4c:b5:f2:7d:42:c5:
a2:ff:5f:f2:30:a2:d1:e3:95:22:9a:6b:0a:5c:b8:87:05:43:
dd:5b:d4:f7:3c:cd:36:a5:b2:8b:b9:3e:e2:75:df:74:91:03:
d1:28:6a:3d:13:e2:96:66:0e:91:57:bf:13:26:7a:48:cf:41:
c0:05:0a:c3:66:fc:51:af:be:f7:b0:31:60:13:35:dd:71:2d:
ae:bb:68:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz
MjMwMzJGMTgwHhcNMjYxMDA1MDQzMzM3WhcNMjYxMDEyMDQzMzM3WjAYMRYwFAYD
VQQDEw02YWMzMjhhMS04YTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1aCMtpGcrcPb+jLI+hIPuX1k252ga1tprMFu/BRrOJURwwr8WoIclCgRP4RW
Of99sugNMEfMCET9cErFSH45O2W/zN2kFXZh8TrlusaqKmq+693XwUF0aRbSA26l
n/1o3J81fpxVLbRG1WO+Mz6XVbJZz5X6bZTTxISdGmLs2GKdFBZyyxG/EYh/e+HT
yKr6edVJeWG4FL1or0BukWduNdqz8e3MoQZ4HNwQZQCbI8o8Sh1X3GQKEJKlWNu9
A7x9pAldWuYpwoQpX8nH6maBuVQS5tiUbyus0FsjUkBfBz6YjMJSW4OIFxZNZ/eN
zkyFHhYHcd+n9pO7FSi1WDTFCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjlciou
ht61YXSuUUtaPadCNpgmMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0
MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4
T3pHRUc1Yi1QN1l5TURMeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACEaedzH5k0ehzltxtTqjBD9I4ma/fImB+9GtIDUoJ0a4sMCbaoJ5SNdNKAsw
8WC9xc2HUnrX8nWJ1KClYIuTWp43LDbMWt7R2JtE0YP2fLKEjBwxeesclVRMNfxN
cnm6Ff+umf1Dnsljg5PaEOqgyFyogxYSmTia0DMi7ZdJM/05pw41oUFYQBQgTomI
qM+jYIMtPA3/Y+gkAAVvnzl60HpSThX/I2xfl0WpYt+zTLXyfULFov9f8jCi0eOV
IpprCly4hwVD3VvU9zzNNqWyi7k+4nXfdJED0ShqPRPilmYOkVe/EyZ6SM9BwAUK
w2b8Ua++97AxYBM13XEtrrto2g==
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:27:42 2026 by rpki-client