
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
File: YQihMheWwWwmFLdc14tfV5DNrQE.mft (raw, json)
Hash identifier: LflZOsafms/bh/vPDl487LzgSgG0gH+9AYZ6oP72D8w=
Subject key identifier: B4:3C:BD:A4:7D:1A:4F:19:94:E4:34:B8:38:A0:17:F7:AA:DC:27:EB
Authority key identifier: 61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
Certificate issuer: /CN=A914ACC8/serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
Manifest number: 48
Signing time: Mon 05 Oct 2026 08:51:33 +0000
Manifest this update: Mon 05 Oct 2026 08:51:32 +0000
Manifest next update: Mon 12 Oct 2026 08:51:32 +0000
Files and hashes: 1: YQihMheWwWwmFLdc14tfV5DNrQE.crl (hash: hg88hD80wwl1byEAq6YORMK9vjtR7lD+5zF79gDY5qo=)
2: D5B3126E534B11F1B99ADA8D94833773.roa (hash: sXd+41/gn4hIOq0ToYPsxHfLlqQrww+estsIf7WIWOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ACC8, serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Validity
Not Before: Oct 5 08:51:32 2026 GMT
Not After : Oct 12 08:51:32 2026 GMT
Subject: CN=6ac36515-3b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:fc:c7:25:e0:65:0e:fe:a6:9d:fc:52:4c:
f4:8e:b0:86:52:35:a6:1d:dc:63:cf:c4:6f:d9:26:
a4:a1:41:6e:60:f0:85:fc:aa:59:cd:e0:2b:f2:79:
c5:7b:09:94:d3:4a:f9:a7:6d:2a:a3:83:44:c5:9f:
be:66:56:9c:ff:6c:fd:5e:1e:15:f7:ab:99:07:c2:
f5:a6:30:5c:fa:93:38:3e:4b:7f:58:86:bf:5d:6e:
72:04:c8:6b:82:73:85:c2:1c:da:4a:e2:ac:64:b7:
26:a3:0f:9f:72:88:e5:a9:ef:87:70:2b:01:90:16:
a7:49:a8:66:f9:90:92:65:91:7d:28:de:eb:84:86:
47:f0:01:66:f7:4a:4b:02:0d:8f:12:e7:45:11:6d:
f1:71:8e:9e:4f:e7:5e:8a:a5:02:8d:fd:6d:55:cf:
28:07:11:57:1c:ae:ae:58:6f:67:33:b4:e7:9a:11:
9c:75:d5:e5:98:05:ab:f3:10:d0:fd:16:ad:be:91:
80:d9:e2:cc:ba:d4:9d:0a:c9:fb:19:73:1b:d8:25:
9a:3d:a5:2d:5c:0e:ca:0f:9e:2b:13:a1:11:54:a7:
28:0a:a1:7e:7f:a7:89:8f:c5:e0:1c:33:6b:35:f5:
54:5a:c7:cc:4e:de:22:44:37:05:b5:b0:7d:0f:24:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3C:BD:A4:7D:1A:4F:19:94:E4:34:B8:38:A0:17:F7:AA:DC:27:EB
X509v3 Authority Key Identifier:
keyid:61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:10:bc:3f:b9:81:c0:d5:e3:52:23:5d:cf:51:8d:2e:e1:a2:
35:73:be:4a:39:b2:58:f3:b8:1f:64:00:1b:ec:73:12:6b:57:
b9:cc:a8:95:34:3b:8d:39:62:2a:e9:16:fe:b5:a8:a1:04:f3:
11:98:40:e1:de:6e:59:54:59:c9:12:0f:95:5a:94:c6:94:22:
f3:d4:53:25:66:bc:68:9d:f2:94:ef:8b:bd:08:be:62:26:0d:
05:04:88:59:2c:a4:1a:55:72:a8:e3:ad:7b:96:f8:00:75:6e:
aa:61:29:3a:fc:a2:52:35:58:14:37:67:17:cb:db:0f:4e:83:
8c:27:0c:61:96:12:8f:34:8d:22:6a:db:d5:f5:71:9d:34:00:
81:3e:8e:19:1b:d7:3f:c0:03:0d:af:df:99:a8:a1:ec:23:c4:
fc:05:58:39:1b:cc:17:87:f0:7a:f0:4a:d6:f1:bb:37:8f:d3:
80:4a:d3:9e:27:10:c1:3e:96:52:0b:d2:c7:15:98:b1:e3:06:
6c:36:69:06:9e:cd:9b:a8:46:33:e9:8d:d5:c2:c6:11:05:21:
a5:63:82:4f:3e:9a:a9:03:d4:7d:5c:69:6a:99:ad:9d:36:c5:
87:8d:72:5f:ae:49:64:6e:d7:c7:30:0a:17:07:34:6e:ef:dc:
26:c4:21:a3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QUNDODExMC8GA1UEBRMoNjEwOEExMzIxNzk2QzE2QzI2MTRCNzVDRDc4QjVGNTc5
MENEQUQwMTAeFw0yNjEwMDUwODUxMzJaFw0yNjEwMTIwODUxMzJaMBgxFjAUBgNV
BAMTDTZhYzM2NTE1LTNiMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC75/zHJeBlDv6mnfxSTPSOsIZSNaYd3GPPxG/ZJqShQW5g8IX8qlnN4CvyecV7
CZTTSvmnbSqjg0TFn75mVpz/bP1eHhX3q5kHwvWmMFz6kzg+S39Yhr9dbnIEyGuC
c4XCHNpK4qxktyajD59yiOWp74dwKwGQFqdJqGb5kJJlkX0o3uuEhkfwAWb3SksC
DY8S50URbfFxjp5P516KpQKN/W1VzygHEVccrq5Yb2cztOeaEZx11eWYBavzEND9
Fq2+kYDZ4sy61J0KyfsZcxvYJZo9pS1cDsoPnisToRFUpygKoX5/p4mPxeAcM2s1
9VRax8xO3iJENwW1sH0PJD8PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtDy9pH0a
TxmU5DS4OKAX96rcJ+swHwYDVR0jBBgwFoAUYQihMheWwWwmFLdc14tfV5DNrQEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBQ0M4L0EyNDhGRkM2NTM0
OTExRjE5MUMxRDE4NTkyODMzNzczL1lRaWhNaGVXd1d3bUZMZGMxNHRmVjVETnJR
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWVFpaE1oZVd3V3dtRkxkYzE0dGZWNUROclFFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB
Q0M4L0EyNDhGRkM2NTM0OTExRjE5MUMxRDE4NTkyODMzNzczL1lRaWhNaGVXd1d3
bUZMZGMxNHRmVjVETnJRRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCbELw/uYHA1eNSI13PUY0u4aI1c75KObJY87gfZAAb7HMSa1e5zKiVNDuNOWIq
6Rb+taihBPMRmEDh3m5ZVFnJEg+VWpTGlCLz1FMlZrxonfKU74u9CL5iJg0FBIhZ
LKQaVXKo4617lvgAdW6qYSk6/KJSNVgUN2cXy9sPToOMJwxhlhKPNI0iatvV9XGd
NACBPo4ZG9c/wAMNr9+ZqKHsI8T8BVg5G8wXh/B68ErW8bs3j9OAStOeJxDBPpZS
C9LHFZix4wZsNmkGns2bqEYz6Y3VwsYRBSGlY4JPPpqpA9R9XGlqma2dNsWHjXJf
rklkbtfHMAoXBzRu79wmxCGj
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:41:33 2026 by rpki-client