
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier: 8UStbsFrYTKfxtvlkvBs2LglWNaDbj8wz28V5/nMhkA=
Subject key identifier: D2:66:4A:4D:75:56:F6:08:77:98:AA:EE:13:A4:B8:27:42:9D:12:D3
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 05B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number: 059C
Signing time: Sun 06 Sep 2026 22:58:15 +0000
Manifest this update: Sun 06 Sep 2026 22:58:14 +0000
Manifest next update: Sun 13 Sep 2026 22:58:14 +0000
Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: DwpYxrN5b/FrmRSyz8lBMeMrG5YIMSmrtLSXt3xiGlw=)
2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=)
3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 22:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Validity
Not Before: Sep 6 22:58:14 2026 GMT
Not After : Sep 13 22:58:14 2026 GMT
Subject: CN=6a9df006-0a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:df:73:59:7e:93:56:80:d9:75:ad:48:8f:
1b:a8:dd:8b:5d:2d:ca:e1:35:2a:6a:bf:bf:99:dc:
6d:e8:6b:8b:d9:2f:cd:c7:4a:f9:9c:50:f2:67:ff:
58:30:7f:72:f3:cb:cf:87:36:1e:e8:f4:07:71:37:
d7:a1:19:e4:c6:9b:8b:ed:5e:06:3c:a5:ee:e2:ee:
8c:31:1b:cd:87:1e:4f:b1:c9:d7:9a:a8:78:ab:e8:
ff:b2:84:2e:4b:9c:85:fa:99:b3:7f:ce:57:3d:3d:
85:2b:3c:61:18:98:e4:31:e5:49:1e:5b:3c:56:00:
f7:bf:65:c0:a7:b8:73:43:61:45:1c:f8:81:ce:1a:
60:36:c4:3d:48:ce:34:1a:8c:65:e2:0a:66:46:26:
73:cf:5a:84:62:82:06:3c:f4:8b:b1:c1:c3:0d:d6:
78:c2:80:69:81:23:7c:88:95:0d:e3:5d:ad:59:12:
aa:2e:70:0e:6f:78:e6:ed:74:6f:a2:53:0d:9d:b2:
ba:20:3f:27:ee:b2:6e:6c:8d:81:47:2a:4b:b7:0b:
2b:b5:b9:63:bc:3b:3e:7a:48:b4:b5:a5:5e:af:af:
71:7b:18:0b:c0:1e:7b:3c:b3:a2:83:86:17:89:5c:
a5:81:d1:50:2d:ff:b5:68:28:36:aa:eb:4a:60:d4:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:66:4A:4D:75:56:F6:08:77:98:AA:EE:13:A4:B8:27:42:9D:12:D3
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:52:9f:c4:5b:31:90:fb:d8:16:79:c7:02:ab:8e:9b:06:60:
05:f8:e5:4f:6d:96:76:6f:ba:b5:df:5d:4a:7b:18:95:06:96:
02:02:d4:2b:1f:04:9f:c0:98:37:b4:c3:3e:7a:06:94:79:8c:
d9:81:4a:7d:c5:14:f3:1d:03:db:ac:46:f2:e4:8f:af:cd:92:
40:00:7c:bb:61:b2:0a:99:4d:52:84:c9:ab:f6:37:7f:69:64:
3b:45:7a:ec:4a:84:27:5b:a7:62:c4:85:0f:d7:8b:69:7b:aa:
41:02:1f:11:cb:9a:9c:70:02:b4:75:ca:33:1d:be:c8:c1:71:
54:4c:99:65:94:13:b0:46:1a:74:8a:ab:1d:79:ea:b8:3c:fe:
0a:a9:98:19:8e:e8:40:a4:e1:4c:95:98:ad:6c:3a:fb:28:af:
f8:5a:b2:fe:46:a8:35:c4:f9:06:7e:71:1b:f9:16:f6:24:eb:
7c:b6:2e:95:65:a7:6c:b1:9b:49:63:a2:f6:35:80:34:25:5d:
35:22:c8:aa:92:14:ce:b0:6a:44:77:2f:05:38:94:d8:ec:d6:
2e:f3:e9:aa:ea:bf:35:fb:46:7a:6a:28:db:5a:56:42:a8:d9:
3b:19:2b:9f:8a:5d:62:51:bd:10:7d:54:d5:c9:c7:51:0d:c5:
6a:0a:fc:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz
MzQwQzU3MzYwHhcNMjYwOTA2MjI1ODE0WhcNMjYwOTEzMjI1ODE0WjAYMRYwFAYD
VQQDEw02YTlkZjAwNi0wYTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Affc1l+k1aA2XWtSI8bqN2LXS3K4TUqar+/mdxt6GuL2S/Nx0r5nFDyZ/9Y
MH9y88vPhzYe6PQHcTfXoRnkxpuL7V4GPKXu4u6MMRvNhx5PscnXmqh4q+j/soQu
S5yF+pmzf85XPT2FKzxhGJjkMeVJHls8VgD3v2XAp7hzQ2FFHPiBzhpgNsQ9SM40
Goxl4gpmRiZzz1qEYoIGPPSLscHDDdZ4woBpgSN8iJUN412tWRKqLnAOb3jm7XRv
olMNnbK6ID8n7rJubI2BRypLtwsrtbljvDs+eki0taVer69xexgLwB57PLOig4YX
iVylgdFQLf+1aCg2qutKYNTBfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJmSk11
VvYId5iq7hOkuCdCnRLTMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3
MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W
elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl
UmZfVXNrcFg3b3d6UU1WelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhlKfxFsxkPvYFnnHAquOmwZgBfjlT22Wdm+6td9dSnsYlQaWAgLUKx8En8CY
N7TDPnoGlHmM2YFKfcUU8x0D26xG8uSPr82SQAB8u2GyCplNUoTJq/Y3f2lkO0V6
7EqEJ1unYsSFD9eLaXuqQQIfEcuanHACtHXKMx2+yMFxVEyZZZQTsEYadIqrHXnq
uDz+CqmYGY7oQKThTJWYrWw6+yiv+Fqy/kaoNcT5Bn5xG/kW9iTrfLYulWWnbLGb
SWOi9jWANCVdNSLIqpIUzrBqRHcvBTiU2OzWLvPpquq/NftGemoo21pWQqjZOxkr
n4pdYlG9EH1U1cnHUQ3Fagr8zQ==
-----END CERTIFICATE-----
Generated at Wed Sep 9 01:12:06 2026 by rpki-client