
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
File: Y8QELC5YMug5UaBUZeiB1qfd0CI.mft (raw, json)
Hash identifier: nRSOZI5/ep3kr+LVPZf1qUBdxpZhXvTm1o02YyhoIJs=
Subject key identifier: 60:97:F5:8F:D5:AB:F9:C5:86:52:3D:85:53:91:86:51:D4:1C:32:2E
Authority key identifier: 63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
Certificate issuer: /CN=A9146039/serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
Manifest number: 53
Signing time: Wed 19 Aug 2026 08:58:54 +0000
Manifest this update: Wed 19 Aug 2026 08:58:53 +0000
Manifest next update: Wed 26 Aug 2026 08:58:53 +0000
Files and hashes: 1: Y8QELC5YMug5UaBUZeiB1qfd0CI.crl (hash: ZMZ9eiHEeYw+MbciMyw+VDzWwFdhRVFWfuydKQ9IJyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146039, serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Validity
Not Before: Aug 19 08:58:53 2026 GMT
Not After : Aug 26 08:58:53 2026 GMT
Subject: CN=6a85704e-5073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:e2:b1:91:6a:77:62:86:1d:a0:23:52:7f:
61:09:60:f6:34:d0:47:e5:3b:3b:b6:bd:3c:a4:27:
cb:28:15:b4:44:03:1a:cc:6d:ca:9b:1b:7a:ec:ac:
46:f7:e6:71:7d:8b:83:cb:0d:c2:94:35:96:ec:f6:
29:d6:b6:9e:d3:14:d2:0e:be:76:8f:97:04:8c:33:
ed:30:28:77:f8:a6:04:ee:1d:71:54:e9:c6:b0:2f:
d2:a2:41:1a:89:c6:61:8c:db:97:c1:74:4d:23:8d:
c3:86:17:cf:8d:cb:2d:58:c0:b4:62:94:13:80:88:
fb:ca:12:da:67:6b:8c:b1:82:d5:c0:73:94:dc:11:
70:7f:cb:ae:87:3b:3d:94:df:8c:b4:48:32:c1:c5:
68:f6:61:43:17:5a:32:25:a3:b3:be:a7:7e:f9:6b:
48:f9:c6:66:a5:ed:9e:4d:7e:9e:08:81:63:43:92:
bb:c6:6d:72:18:c4:78:43:a8:98:78:f3:0b:33:76:
7b:50:5b:c7:50:07:c4:03:81:14:14:b4:93:ee:8d:
b2:e7:53:14:7e:dd:cf:c7:4d:71:d0:4c:34:17:8b:
95:c2:30:7a:fe:77:41:66:a4:e4:aa:5f:18:fe:88:
34:94:76:c8:25:08:b2:f1:5a:f8:8b:ee:b7:91:a4:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:97:F5:8F:D5:AB:F9:C5:86:52:3D:85:53:91:86:51:D4:1C:32:2E
X509v3 Authority Key Identifier:
keyid:63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:97:e8:e3:21:22:9b:ae:da:90:8b:77:b4:3b:a5:39:28:7d:
e3:c0:0f:b4:4a:21:73:3f:96:b5:66:d7:41:20:0d:c3:09:18:
35:2d:55:78:34:b7:78:94:40:83:b4:61:2a:11:d5:a9:54:3f:
5b:47:2c:5d:c9:81:67:79:c0:06:6e:c0:d8:3d:af:f3:6a:2c:
0a:c8:a7:71:19:ad:f8:40:e7:a5:81:aa:91:52:7e:a6:4b:c7:
17:72:05:d8:73:22:05:55:a0:ca:01:05:6c:5e:02:6d:d1:d2:
bb:aa:79:c3:28:0e:d8:70:a2:41:0d:b9:c2:d4:bb:87:45:7c:
97:f2:5d:7a:77:69:15:af:b9:6d:22:c3:83:f4:86:1d:41:2f:
47:9f:93:ca:b4:36:b4:69:d3:23:e8:f6:37:d8:12:1e:fe:9a:
be:62:7a:a1:b2:e4:f2:d8:89:f5:18:f1:91:b0:cc:8d:84:15:
e3:9f:f3:dd:6c:c5:72:76:29:49:43:e5:fa:32:c0:41:d5:7b:
0c:c5:8d:fc:68:13:0d:9e:33:aa:e4:ba:f6:0b:f7:f7:fe:b0:
e0:3a:04:60:0d:c6:dc:46:38:5d:07:12:e3:1b:a0:de:52:a6:
bd:fd:b4:8f:ef:e9:63:cd:b1:e0:75:3b:93:29:07:d3:92:61:
12:4c:75:b6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NjAzOTExMC8GA1UEBRMoNjNDNDA0MkMyRTU4MzJFODM5NTFBMDU0NjVFODgxRDZB
N0RERDAyMjAeFw0yNjA4MTkwODU4NTNaFw0yNjA4MjYwODU4NTNaMBgxFjAUBgNV
BAMTDTZhODU3MDRlLTUwNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUN+KxkWp3YoYdoCNSf2EJYPY00EflOzu2vTykJ8soFbREAxrMbcqbG3rsrEb3
5nF9i4PLDcKUNZbs9inWtp7TFNIOvnaPlwSMM+0wKHf4pgTuHXFU6cawL9KiQRqJ
xmGM25fBdE0jjcOGF8+Nyy1YwLRilBOAiPvKEtpna4yxgtXAc5TcEXB/y66HOz2U
34y0SDLBxWj2YUMXWjIlo7O+p375a0j5xmal7Z5Nfp4IgWNDkrvGbXIYxHhDqJh4
8wszdntQW8dQB8QDgRQUtJPujbLnUxR+3c/HTXHQTDQXi5XCMHr+d0FmpOSqXxj+
iDSUdsglCLLxWviL7reRpDPTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYJf1j9Wr
+cWGUj2FU5GGUdQcMi4wHwYDVR0jBBgwFoAUY8QELC5YMug5UaBUZeiB1qfd0CIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MDM5Lzg0MDc1MkYyMUQ1
NjExRjE5NjUzRjY1ODIzM0Q4QzY3L1k4UUVMQzVZTXVnNVVhQlVaZWlCMXFmZDBD
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWThRRUxDNVlNdWc1VWFCVVplaUIxcWZkMENJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
MDM5Lzg0MDc1MkYyMUQ1NjExRjE5NjUzRjY1ODIzM0Q4QzY3L1k4UUVMQzVZTXVn
NVVhQlVaZWlCMXFmZDBDSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB8l+jjISKbrtqQi3e0O6U5KH3jwA+0SiFzP5a1ZtdBIA3DCRg1LVV4NLd4lECD
tGEqEdWpVD9bRyxdyYFnecAGbsDYPa/zaiwKyKdxGa34QOelgaqRUn6mS8cXcgXY
cyIFVaDKAQVsXgJt0dK7qnnDKA7YcKJBDbnC1LuHRXyX8l16d2kVr7ltIsOD9IYd
QS9Hn5PKtDa0adMj6PY32BIe/pq+YnqhsuTy2In1GPGRsMyNhBXjn/PdbMVydilJ
Q+X6MsBB1XsMxY38aBMNnjOq5Lr2C/f3/rDgOgRgDcbcRjhdBxLjG6DeUqa9/bSP
7+ljzbHgdTuTKQfTkmESTHW2
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:22 2026 by rpki-client