
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json)
Hash identifier: pBeVZgAknN6+5O/Lr94jqxF276WmHOax/B6hnGVOvxw=
Subject key identifier: 4E:66:77:B6:F9:0E:A6:29:BC:6D:A8:83:41:9D:CD:D1:68:6A:82:AA
Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Certificate serial: 25D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
Manifest number: 25BE
Signing time: Mon 12 Oct 2026 15:45:41 +0000
Manifest this update: Mon 12 Oct 2026 15:45:40 +0000
Manifest next update: Mon 19 Oct 2026 15:45:40 +0000
Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: u465CnWEr36DSlLRRJR7a8OyV99/7ZtUBhlQSKOK1lA=)
2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: rbb9vzT6ZdvpjVZ3GXOm6few5Y28G7tYzO6mN3D77lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9682 (0x25d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Validity
Not Before: Oct 12 15:45:40 2026 GMT
Not After : Oct 19 15:45:40 2026 GMT
Subject: CN=6acd00a5-9f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:d1:57:de:cf:a4:98:9e:fe:d5:b9:07:0c:
27:65:d1:be:6a:46:42:53:ba:90:da:00:3b:72:55:
92:f5:9e:48:d2:38:49:d3:30:42:03:5a:ab:be:e8:
7b:91:52:17:dc:6b:a7:03:a3:6a:5d:8b:a4:23:90:
e6:3c:06:03:4f:59:69:c5:19:92:87:36:75:ca:51:
43:4b:e0:73:e6:e5:15:ba:a7:2e:cf:c1:67:46:c3:
e8:bc:4c:73:eb:04:92:67:dd:f7:d6:83:66:55:5b:
2b:d4:fd:ec:b8:29:5c:a4:ee:19:c4:fd:60:f1:1b:
e8:d9:77:4c:31:59:87:3f:b2:e3:83:a6:6a:33:c0:
8f:b8:60:2d:d4:f2:cd:3b:7c:07:2f:25:e1:06:eb:
dc:ac:83:63:eb:19:6b:09:44:53:fb:70:95:55:5f:
e8:58:c7:2f:69:cf:b3:bd:4d:65:6e:17:05:6f:23:
75:e6:4a:e2:52:da:ee:5e:fe:31:40:0d:46:fb:4b:
bf:c1:e0:ac:d0:81:07:20:9f:1c:c6:37:00:64:ae:
21:73:99:bd:2d:8c:28:63:3f:0d:e4:06:52:ca:94:
0f:16:26:56:78:08:65:36:70:97:86:ee:22:0b:8e:
b2:5d:48:ff:7b:6e:8f:61:1a:98:f7:0e:65:7c:60:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:66:77:B6:F9:0E:A6:29:BC:6D:A8:83:41:9D:CD:D1:68:6A:82:AA
X509v3 Authority Key Identifier:
keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:74:8f:d2:e4:96:65:85:8e:35:e5:fc:20:64:7a:42:2b:94:
c3:07:af:b0:94:74:93:2d:36:66:e3:1e:d2:33:ff:54:ae:db:
82:bc:e0:ee:f5:05:7f:68:13:34:21:76:06:7f:4c:8f:bf:3c:
58:2d:21:a4:2c:e4:69:99:9a:27:87:d3:b8:ce:ed:16:c6:b3:
46:f9:31:ec:d6:5a:59:16:42:fd:ec:5a:79:ae:11:44:b5:45:
db:64:6a:5d:62:10:b6:06:62:de:a9:67:f8:e7:eb:9d:75:03:
c3:0a:75:59:5b:d7:c4:e3:51:23:0b:86:46:25:ad:af:ab:2b:
12:17:2d:29:10:a6:1f:77:2e:92:37:80:6f:e0:b7:c0:f8:33:
67:8c:40:5b:43:d7:f5:b6:cd:4d:5a:a7:2b:05:39:73:40:51:
44:9f:fc:6b:04:ce:e2:7d:3e:7e:a4:72:a8:09:db:6c:3a:e5:
a1:c8:10:6f:6f:80:d7:cc:0f:6e:46:76:43:de:a4:a2:67:dc:
43:c0:19:5f:67:34:4d:f4:db:85:d7:86:6b:47:b7:d9:e0:42:
5c:51:19:2c:1c:be:2f:39:82:1e:eb:7b:8b:23:ed:63:80:b6:
e0:25:7a:98:7f:5d:b4:f5:dd:ca:c4:96:43:0a:22:ba:7b:7b:
8b:8d:7d:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5
RUEwNEQ0RTEwHhcNMjYxMDEyMTU0NTQwWhcNMjYxMDE5MTU0NTQwWjAYMRYwFAYD
VQQDEw02YWNkMDBhNS05ZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZfRV97PpJie/tW5BwwnZdG+akZCU7qQ2gA7clWS9Z5I0jhJ0zBCA1qrvuh7
kVIX3GunA6NqXYukI5DmPAYDT1lpxRmShzZ1ylFDS+Bz5uUVuqcuz8FnRsPovExz
6wSSZ9331oNmVVsr1P3suClcpO4ZxP1g8Rvo2XdMMVmHP7Ljg6ZqM8CPuGAt1PLN
O3wHLyXhBuvcrINj6xlrCURT+3CVVV/oWMcvac+zvU1lbhcFbyN15kriUtruXv4x
QA1G+0u/weCs0IEHIJ8cxjcAZK4hc5m9LYwoYz8N5AZSypQPFiZWeAhlNnCXhu4i
C46yXUj/e26PYRqY9w5lfGAgtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5md7b5
DqYpvG2og0GdzdFoaoKqMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB
ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP
NHp3QkttVEZRck9lb0UxT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ3SP0uSWZYWONeX8IGR6QiuUwwevsJR0ky02ZuMe0jP/VK7bgrzg7vUFf2gT
NCF2Bn9Mj788WC0hpCzkaZmaJ4fTuM7tFsazRvkx7NZaWRZC/exaea4RRLVF22Rq
XWIQtgZi3qln+OfrnXUDwwp1WVvXxONRIwuGRiWtr6srEhctKRCmH3cukjeAb+C3
wPgzZ4xAW0PX9bbNTVqnKwU5c0BRRJ/8awTO4n0+fqRyqAnbbDrlocgQb2+A18wP
bkZ2Q96komfcQ8AZX2c0TfTbhdeGa0e32eBCXFEZLBy+LzmCHut7iyPtY4C24CV6
mH9dtPXdysSWQwoiunt7i419Aw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 03:44:46 2026 by rpki-client