
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json)
Hash identifier: 3FAhHJ1H+CaLwIlJKV8cQoM+Gaz6Y/k7jYeKT7SCbIg=
Subject key identifier: 30:88:B5:23:4E:2C:5D:E5:B9:31:F8:C4:B7:67:00:F2:4B:7A:16:66
Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Certificate serial: 02E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
Manifest number: 02DB
Signing time: Fri 09 Oct 2026 01:40:18 +0000
Manifest this update: Fri 09 Oct 2026 01:40:18 +0000
Manifest next update: Fri 16 Oct 2026 01:40:18 +0000
Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: mbAFwKeG67q6thGTHjXuotbFwcr/b9g548PO+tmt91k=)
2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: B71votStEYYp/K2emTulLeZ6cRSZ/0mH+ncAa56QIjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Validity
Not Before: Oct 9 01:40:18 2026 GMT
Not After : Oct 16 01:40:18 2026 GMT
Subject: CN=6ac84602-fda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:c7:fe:6a:fc:2a:56:12:13:71:5f:e8:ea:
83:bf:c8:50:17:1b:1d:94:98:f1:44:aa:1a:e1:2e:
14:48:99:81:1b:31:c4:48:a9:1f:47:3c:2e:4c:8b:
5d:10:02:b4:85:b1:a7:16:96:c0:5f:f8:2b:11:c4:
74:24:ee:08:53:3c:fb:bd:69:0b:9e:b0:c9:0f:25:
24:84:17:dc:60:d0:f1:b4:64:5c:ce:f4:49:80:3c:
f5:74:72:dc:b8:f0:26:6e:8b:c2:b3:93:68:73:c6:
79:57:b8:2e:71:97:a5:95:05:a2:ab:d6:bc:54:9d:
78:0b:03:00:02:c7:20:60:74:6f:2e:c0:86:0a:3d:
df:f8:36:2b:3e:43:cb:14:8c:4e:b5:3f:c3:87:e2:
24:3f:0a:6c:51:bf:c9:20:30:d9:e7:54:a6:ea:77:
b5:fc:ff:7a:f8:be:e2:b0:83:ae:83:50:0e:f5:3d:
c4:a2:b6:92:8f:17:61:3c:f3:66:36:44:90:12:4c:
bb:6b:38:78:4a:90:a2:3e:a7:2e:26:e2:b3:83:b2:
a4:7f:5a:df:af:10:da:17:05:77:b8:0d:08:eb:8e:
1f:d3:af:ae:ef:dc:53:0a:73:bf:52:e6:26:2b:b9:
10:ab:70:43:33:a6:d4:03:c0:a8:53:cf:fe:1c:3d:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:88:B5:23:4E:2C:5D:E5:B9:31:F8:C4:B7:67:00:F2:4B:7A:16:66
X509v3 Authority Key Identifier:
keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:06:c0:cd:9f:04:25:e2:41:88:be:be:17:48:b4:32:df:9b:
79:87:45:a5:b5:69:6d:ae:ad:f7:59:05:f3:58:0d:81:33:c9:
c3:45:35:71:ca:f6:e0:98:dc:21:50:80:8b:a4:4e:b1:68:47:
db:13:ba:a1:38:05:25:d9:7f:e9:f4:d9:f2:5e:35:d8:a2:c3:
3d:83:82:e4:ba:94:e1:89:fb:d0:42:1d:11:9e:52:81:85:59:
9e:c4:a1:39:a9:9a:4b:b3:14:ca:da:f4:e7:da:83:30:5b:2b:
54:5c:b8:22:f1:f4:48:5a:23:9c:80:bf:8c:27:a6:cc:e9:b0:
3e:82:49:13:dc:31:61:d8:c0:81:2a:6c:42:b4:c5:d1:36:3b:
8a:e4:bf:a9:87:b0:b0:23:71:eb:f4:e0:5c:82:5e:d6:95:fc:
78:b5:17:46:dd:c2:9c:3d:91:97:85:90:f1:2d:e5:b1:35:b2:
f2:82:44:c6:fc:07:f2:b2:0f:22:66:4b:83:6f:a3:99:9b:52:
07:9c:b4:9d:fc:69:57:48:d7:fa:5c:cf:57:d4:f9:7e:43:7b:
ca:e4:56:6d:8d:a6:ad:55:42:e7:64:9b:d4:33:69:67:c4:5b:
16:15:f2:0e:d0:05:10:a3:2a:81:d1:4e:61:28:7d:92:66:f9:
ad:69:3a:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1
Q0UzRTIzMzYwHhcNMjYxMDA5MDE0MDE4WhcNMjYxMDE2MDE0MDE4WjAYMRYwFAYD
VQQDEw02YWM4NDYwMi1mZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApXjH/mr8KlYSE3Ff6OqDv8hQFxsdlJjxRKoa4S4USJmBGzHESKkfRzwuTItd
EAK0hbGnFpbAX/grEcR0JO4IUzz7vWkLnrDJDyUkhBfcYNDxtGRczvRJgDz1dHLc
uPAmbovCs5Noc8Z5V7gucZellQWiq9a8VJ14CwMAAscgYHRvLsCGCj3f+DYrPkPL
FIxOtT/Dh+IkPwpsUb/JIDDZ51Sm6ne1/P96+L7isIOug1AO9T3EoraSjxdhPPNm
NkSQEky7azh4SpCiPqcuJuKzg7Kkf1rfrxDaFwV3uA0I644f06+u79xTCnO/UuYm
K7kQq3BDM6bUA8CoU8/+HD3X2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCItSNO
LF3luTH4xLdnAPJLehZmMB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB
M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J
elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0
YkEzSjdyaVZFbkpjNC1JelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGQbAzZ8EJeJBiL6+F0i0Mt+beYdFpbVpba6t91kF81gNgTPJw0U1ccr24Jjc
IVCAi6ROsWhH2xO6oTgFJdl/6fTZ8l412KLDPYOC5LqU4Yn70EIdEZ5SgYVZnsSh
OamaS7MUytr059qDMFsrVFy4IvH0SFojnIC/jCemzOmwPoJJE9wxYdjAgSpsQrTF
0TY7iuS/qYewsCNx6/TgXIJe1pX8eLUXRt3CnD2Rl4WQ8S3lsTWy8oJExvwH8rIP
ImZLg2+jmZtSB5y0nfxpV0jX+lzPV9T5fkN7yuRWbY2mrVVC52Sb1DNpZ8RbFhXy
DtAFEKMqgdFOYSh9kmb5rWk6iA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 04:42:13 2026 by rpki-client