
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json)
Hash identifier: /Zyk2ERYYvtHfarbQN9iUEdaxQJJtW/3p1+8DMdocH0=
Subject key identifier: 36:73:F4:44:C5:35:A8:30:20:1B:66:7D:A6:29:A9:D8:E8:5C:EC:BE
Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
Manifest number: 0812
Signing time: Tue 06 Oct 2026 23:12:55 +0000
Manifest this update: Tue 06 Oct 2026 23:12:54 +0000
Manifest next update: Tue 13 Oct 2026 23:12:54 +0000
Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: 0WIkq89y2VukcOQlcoyCf17CDIH7kp31Rsc8VEQ1pgE=)
2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: jQVly8FPPuFgOZcXUN0l/eQQVf0qa488CPB3wrBLOsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:12:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Validity
Not Before: Oct 6 23:12:54 2026 GMT
Not After : Oct 13 23:12:54 2026 GMT
Subject: CN=6ac58076-49c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:cb:15:d6:0c:50:68:c4:eb:82:65:46:41:
46:42:d4:93:ba:dd:00:e2:12:e6:3a:2d:73:2d:a7:
b2:b2:1c:04:ee:d9:4d:ad:d9:4e:ec:16:27:09:62:
c3:e7:01:11:1b:5e:cc:ca:86:3a:97:aa:bc:22:5a:
00:57:2f:ac:81:5d:68:51:d3:59:52:1d:2d:34:51:
12:ce:c3:6c:55:69:d6:3f:a0:da:ea:85:00:9a:c2:
23:d2:41:50:aa:ee:0b:1b:73:3d:e8:a5:94:f8:47:
44:bd:65:27:0f:b3:e5:8b:cf:30:5f:4e:00:b1:7e:
49:c1:6d:7c:39:f7:2b:fd:01:d7:f5:fa:51:2a:f9:
c5:37:ac:fc:26:85:8a:a3:1f:41:6f:13:49:73:63:
96:f3:31:22:e6:9a:1f:92:87:9f:5b:63:e5:45:15:
62:9d:5c:56:8f:3d:5b:db:ed:d0:9e:13:33:d8:55:
69:24:9b:34:4b:2e:7e:68:93:55:48:63:04:ad:15:
33:ee:d4:9d:55:69:97:55:18:03:3f:25:62:d5:9c:
d2:ad:94:5e:bf:99:39:5e:99:84:ed:21:64:47:ad:
b5:5c:1c:3a:a4:07:11:a0:27:80:99:b4:d1:8c:12:
e7:f6:cb:46:00:d1:80:d9:22:f3:f0:d1:49:71:fe:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:73:F4:44:C5:35:A8:30:20:1B:66:7D:A6:29:A9:D8:E8:5C:EC:BE
X509v3 Authority Key Identifier:
keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:a1:62:3a:34:d2:a1:b8:9e:bf:57:7c:97:95:a8:c9:e7:4a:
3d:4d:7d:b1:a7:49:53:20:1f:d4:5b:f0:42:c1:28:3f:4c:80:
f7:5c:3d:d3:8a:e7:7b:46:59:05:f6:bb:bc:ec:1e:16:f5:f2:
45:6a:59:0f:55:d8:51:c8:f1:2d:cb:d6:bb:38:a8:a4:a5:c7:
75:9b:1e:1f:48:83:21:ca:e4:b8:5a:77:dd:45:63:94:14:97:
81:14:cb:75:0b:7d:41:45:48:e2:eb:94:4b:e0:59:51:9a:5b:
42:9c:5e:16:9c:cd:a9:58:09:69:69:b2:ff:14:74:d0:f4:66:
ee:47:d3:c6:94:d0:32:53:02:c3:83:48:e3:b2:6d:7f:1a:fb:
e2:a7:70:18:3d:f2:03:67:d3:9c:99:a6:d1:54:bd:21:97:0d:
0c:8e:8b:38:7a:49:31:47:2d:a3:33:38:1b:3f:ec:3d:8d:c2:
50:f6:a5:ed:05:65:6b:bb:c4:b3:37:ad:2b:2d:59:d7:1a:c0:
a5:37:60:7d:60:fd:95:1a:a3:4f:8c:90:ad:f5:c4:c8:4f:bf:
d9:3e:6f:f2:98:c0:6c:2b:99:94:6b:c9:e9:58:d2:5f:4c:c1:
8e:cc:b4:85:f0:84:8a:f8:d8:4b:6e:e6:80:8d:dd:2e:54:eb:
69:37:37:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz
NTkwRkIyN0EwHhcNMjYxMDA2MjMxMjU0WhcNMjYxMDEzMjMxMjU0WjAYMRYwFAYD
VQQDEw02YWM1ODA3Ni00OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwS7LFdYMUGjE64JlRkFGQtSTut0A4hLmOi1zLaeyshwE7tlNrdlO7BYnCWLD
5wERG17MyoY6l6q8IloAVy+sgV1oUdNZUh0tNFESzsNsVWnWP6Da6oUAmsIj0kFQ
qu4LG3M96KWU+EdEvWUnD7Pli88wX04AsX5JwW18Ofcr/QHX9fpRKvnFN6z8JoWK
ox9BbxNJc2OW8zEi5pofkoefW2PlRRVinVxWjz1b2+3QnhMz2FVpJJs0Sy5+aJNV
SGMErRUz7tSdVWmXVRgDPyVi1ZzSrZRev5k5XpmE7SFkR621XBw6pAcRoCeAmbTR
jBLn9stGANGA2SLz8NFJcf6ovQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZz9ETF
NagwIBtmfaYpqdjoXOy+MB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC
MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR
NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIqFiOjTSobiev1d8l5WoyedKPU19sadJUyAf1FvwQsEoP0yA91w904rne0ZZ
Bfa7vOweFvXyRWpZD1XYUcjxLcvWuziopKXHdZseH0iDIcrkuFp33UVjlBSXgRTL
dQt9QUVI4uuUS+BZUZpbQpxeFpzNqVgJaWmy/xR00PRm7kfTxpTQMlMCw4NI47Jt
fxr74qdwGD3yA2fTnJmm0VS9IZcNDI6LOHpJMUctozM4Gz/sPY3CUPal7QVla7vE
szetKy1Z1xrApTdgfWD9lRqjT4yQrfXEyE+/2T5v8pjAbCuZlGvJ6VjSX0zBjsy0
hfCEivjYS27mgI3dLlTraTc3Hg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 22:42:50 2026 by rpki-client