
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier: gPk02bmk+S5zQuj68z+vkhASGyk2blD8hZQc339F/OQ=
Subject key identifier: 89:F8:1A:E3:41:57:21:14:79:BE:95:8D:66:EE:E5:B2:27:13:97:18
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number: 01AB
Signing time: Thu 03 Sep 2026 04:20:26 +0000
Manifest this update: Thu 03 Sep 2026 04:20:25 +0000
Manifest next update: Thu 10 Sep 2026 04:20:25 +0000
Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: 5rZr4dSnqYlvovmry68gJuEkXkHTMxvThkno+s3wXkE=)
2: A12190D8109411F1899116B2353D8C67.roa (hash: pqm6Q9scuEnJQYaIqws2g0vXZQkPXI0Bc+QYlga5BYs=)
3: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: ncnAIRUHmtrx0rQXVWpWlkuooXEBM4MTnKQyr2lOMtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Validity
Not Before: Sep 3 04:20:25 2026 GMT
Not After : Sep 10 04:20:25 2026 GMT
Subject: CN=6a98f589-20f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:1b:4b:a9:39:0e:3b:c9:4f:63:a4:a4:cb:
f1:9d:dc:35:de:e0:36:09:5e:d7:53:22:c0:98:53:
65:86:50:37:b6:54:a4:6e:fb:3d:8f:8a:f6:34:c5:
11:ab:85:8e:7b:e9:89:87:79:be:cc:31:91:b1:f4:
7d:fa:8a:13:02:4c:e6:b7:5d:e8:5a:de:93:39:e6:
51:e9:52:01:57:68:6e:09:b4:c6:98:ca:b5:a4:14:
5f:d5:90:b7:f4:87:fd:c5:82:cd:37:5d:24:f6:6a:
11:4a:5e:dc:64:5b:8f:58:69:aa:97:2c:37:82:5d:
a9:23:f4:7a:6c:37:e4:3d:b2:58:c5:06:aa:49:75:
09:47:99:d1:c1:72:18:a0:10:07:4d:92:1d:a9:31:
9a:05:aa:a1:0a:74:d7:f0:86:b1:53:9c:19:65:c3:
c2:06:c9:85:5b:b7:06:43:dd:b8:de:12:1f:59:78:
07:d4:f5:75:15:1c:34:91:9c:51:60:cc:5d:28:3d:
60:3b:13:45:30:be:13:7e:bc:dc:81:6e:d6:d6:ff:
a6:4b:62:39:10:a1:ce:39:9f:54:80:fb:9d:b3:7d:
11:cb:b4:99:27:4d:5f:63:68:6f:6c:dd:21:65:15:
0a:11:fc:59:01:be:9f:6b:e7:92:e6:22:89:ad:f2:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F8:1A:E3:41:57:21:14:79:BE:95:8D:66:EE:E5:B2:27:13:97:18
X509v3 Authority Key Identifier:
keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:1a:65:87:85:2b:58:95:a7:17:11:cf:59:df:01:29:5c:00:
e5:93:6c:52:ca:fd:93:8d:88:d4:03:0d:b3:35:a7:ca:cb:88:
a5:40:f5:41:54:34:fa:d4:71:dc:b8:c1:5e:91:78:a1:6f:ff:
dc:53:08:0a:8c:92:b5:5d:18:d5:d0:f1:9a:8f:42:58:ad:cb:
86:6d:1c:53:cf:59:67:f1:77:06:a7:5a:bb:d0:53:d6:7e:99:
06:b8:90:65:22:b7:56:1f:0f:e4:79:71:25:27:e2:b1:a5:43:
6b:83:41:a4:35:f8:52:44:7c:ad:96:0e:29:1f:44:ef:6e:a0:
23:3d:77:dd:de:a2:4c:ac:27:4e:2c:ea:e5:c9:96:f7:cd:9c:
7c:32:a9:35:34:6f:05:28:7c:da:69:9d:07:9e:61:a8:00:28:
43:ce:a6:a5:2b:bd:d5:39:00:25:43:69:42:81:e9:15:34:f2:
71:26:2a:ca:ce:07:04:11:8d:21:f2:6a:da:27:ae:f9:4e:c3:
0c:ca:f8:02:40:d5:52:c4:25:a3:e7:2b:d7:19:5b:3e:25:15:
a5:f4:46:14:75:6a:57:4a:89:6d:10:15:52:53:18:a6:62:27:
65:ce:19:ea:52:ae:95:5e:24:c3:46:79:f7:f4:a6:31:7e:d6:
9b:ac:13:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0
ODNBQTI3OUEwHhcNMjYwOTAzMDQyMDI1WhcNMjYwOTEwMDQyMDI1WjAYMRYwFAYD
VQQDEw02YTk4ZjU4OS0yMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwYAbS6k5DjvJT2OkpMvxndw13uA2CV7XUyLAmFNlhlA3tlSkbvs9j4r2NMUR
q4WOe+mJh3m+zDGRsfR9+ooTAkzmt13oWt6TOeZR6VIBV2huCbTGmMq1pBRf1ZC3
9If9xYLNN10k9moRSl7cZFuPWGmqlyw3gl2pI/R6bDfkPbJYxQaqSXUJR5nRwXIY
oBAHTZIdqTGaBaqhCnTX8IaxU5wZZcPCBsmFW7cGQ9243hIfWXgH1PV1FRw0kZxR
YMxdKD1gOxNFML4TfrzcgW7W1v+mS2I5EKHOOZ9UgPuds30Ry7SZJ01fY2hvbN0h
ZRUKEfxZAb6fa+eS5iKJrfI2IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIn4GuNB
VyEUeb6VjWbu5bInE5cYMB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB
MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTkwOS8xNjZFNzQ3QzJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1Nw
NkNwTlJRQW5OdlpJT3FKNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaRplh4UrWJWnFxHPWd8BKVwA5ZNsUsr9k42I1AMNszWnysuIpUD1QVQ0+tRx
3LjBXpF4oW//3FMICoyStV0Y1dDxmo9CWK3Lhm0cU89ZZ/F3Bqdau9BT1n6ZBriQ
ZSK3Vh8P5HlxJSfisaVDa4NBpDX4UkR8rZYOKR9E726gIz133d6iTKwnTizq5cmW
982cfDKpNTRvBSh82mmdB55hqAAoQ86mpSu91TkAJUNpQoHpFTTycSYqys4HBBGN
IfJq2ieu+U7DDMr4AkDVUsQlo+cr1xlbPiUVpfRGFHVqV0qJbRAVUlMYpmInZc4Z
6lKulV4kw0Z59/SmMX7Wm6wTPQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:47:50 2026 by rpki-client