
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
File: ySTN5BVFl0tvV4MubGA7zIlm2eA.mft (raw, json)
Hash identifier: PWevW5ny/6fLTeuEghR55ckp7sGHN4DhYyr5UOa+qqA=
Subject key identifier: 9A:D9:D2:FF:83:CB:25:38:1F:A9:8C:65:17:85:1D:86:C6:08:39:FC
Authority key identifier: C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0
Certificate issuer: /CN=A91F2DDD/serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
Certificate serial: 0414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
Manifest number: 1357
Signing time: Fri 02 Oct 2026 17:44:39 +0000
Manifest this update: Fri 02 Oct 2026 17:44:39 +0000
Manifest next update: Fri 09 Oct 2026 17:44:39 +0000
Files and hashes: 1: ySTN5BVFl0tvV4MubGA7zIlm2eA.crl (hash: uigoTqCHVoNg3wluFhgwlDJdvN1a8m8Erel3tQG/Krs=)
2: 2FBEB0B0D5B011EC90A8A031C4F9AE02.roa (hash: +CMTAtAhA5A3bcW+qweztRhJOEGADprPEZzn/dd78sw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.crl
rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 17:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DDD, serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
Validity
Not Before: Oct 2 17:44:39 2026 GMT
Not After : Oct 9 17:44:39 2026 GMT
Subject: CN=6abfed87-2f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:b7:09:85:07:d5:3c:45:14:78:21:e3:97:
48:29:6c:48:10:c0:4c:0c:0a:cf:c5:62:35:b3:5d:
41:4f:76:61:f0:1b:0c:7e:2c:50:85:c4:2f:10:f7:
4b:44:74:1d:4c:aa:65:ff:9d:86:38:45:30:26:c2:
84:94:dd:5e:77:b5:a5:50:c9:ca:2d:6b:79:dd:45:
dd:c9:fc:90:3c:a5:58:7e:96:bc:18:66:ab:1e:76:
01:3d:30:50:6f:f5:b5:49:b5:58:e4:34:9b:dc:2e:
fd:38:23:42:66:c5:82:6e:14:3e:44:6c:c4:cb:71:
08:d2:2c:e9:c1:ca:66:25:9c:4e:30:af:cb:8d:5d:
a8:d4:6e:7f:1a:e1:ee:02:17:a9:92:c1:c7:7f:79:
44:29:8d:60:ca:bf:01:ac:9a:5a:a1:18:55:37:65:
58:bb:7c:66:5f:57:c6:ea:e7:bc:a2:a0:e1:30:3f:
9e:9b:b4:25:a9:f1:98:99:49:c9:60:a1:08:26:0f:
09:2d:24:45:de:34:cb:5c:b7:ab:3b:18:9c:2f:d0:
a3:8a:f6:99:0e:a4:1c:fd:f1:14:19:9c:3a:28:99:
cf:07:cd:59:be:1e:94:59:99:cf:8a:b6:cf:8f:69:
f7:6b:94:d7:74:f8:a6:0d:b3:03:fa:65:8e:06:4f:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D9:D2:FF:83:CB:25:38:1F:A9:8C:65:17:85:1D:86:C6:08:39:FC
X509v3 Authority Key Identifier:
keyid:C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4e:db:74:18:f7:45:8d:fc:12:eb:8b:a9:37:bf:d0:1b:ee:
62:c2:8f:80:e4:63:b3:e7:bb:9d:77:3c:af:33:f9:a7:19:bb:
77:87:34:b9:66:31:32:5e:df:dd:42:32:44:83:57:bd:25:65:
8d:91:8d:06:10:df:9c:2c:93:4e:71:ff:e3:ef:55:6f:40:64:
28:7e:b9:30:c6:6c:e3:ce:95:fc:78:f6:b0:23:b6:9e:4b:ec:
01:f2:43:44:32:41:ee:b1:c6:84:41:63:39:6b:2a:23:c7:56:
df:0b:a8:42:63:08:b2:6f:20:25:cf:19:69:c5:25:31:9a:cd:
44:60:a5:24:34:59:3d:a4:ba:33:94:4a:b2:0b:3a:62:b7:60:
b3:7c:2c:37:9f:08:92:cd:93:d0:63:ee:2d:94:8e:57:a5:6e:
f3:05:78:22:e0:ab:0b:bf:f3:27:d5:f0:ad:21:a1:4e:dc:be:
6b:51:e9:36:58:10:97:8f:14:e0:7e:5f:c7:22:4e:22:b9:37:
95:3d:a7:cc:93:50:40:89:13:a9:ce:77:6e:e1:fd:bb:ee:04:
06:4d:0d:2c:96:73:96:6c:33:02:bd:e7:d1:57:44:00:fc:a0:
29:97:73:46:13:2d:97:b3:2f:9c:ad:b7:50:2b:46:1e:51:dc:
e3:0b:39:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJEREQxMTAvBgNVBAUTKEM5MjRDREU0MTU0NTk3NEI2RjU3ODMyRTZDNjAzQkND
ODk2NkQ5RTAwHhcNMjYxMDAyMTc0NDM5WhcNMjYxMDA5MTc0NDM5WjAYMRYwFAYD
VQQDEw02YWJmZWQ4Ny0yZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3bK3CYUH1TxFFHgh45dIKWxIEMBMDArPxWI1s11BT3Zh8BsMfixQhcQvEPdL
RHQdTKpl/52GOEUwJsKElN1ed7WlUMnKLWt53UXdyfyQPKVYfpa8GGarHnYBPTBQ
b/W1SbVY5DSb3C79OCNCZsWCbhQ+RGzEy3EI0izpwcpmJZxOMK/LjV2o1G5/GuHu
AhepksHHf3lEKY1gyr8BrJpaoRhVN2VYu3xmX1fG6ue8oqDhMD+em7QlqfGYmUnJ
YKEIJg8JLSRF3jTLXLerOxicL9CjivaZDqQc/fEUGZw6KJnPB81Zvh6UWZnPirbP
j2n3a5TXdPimDbMD+mWOBk864QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrZ0v+D
yyU4H6mMZReFHYbGCDn8MB8GA1UdIwQYMBaAFMkkzeQVRZdLb1eDLmxgO8yJZtng
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRERC9CNEEyODM2MjlF
MUIxMUU5OEUxRTRFNUVDNEY5QUUwMi95U1RONUJWRmwwdHZWNE11YkdBN3pJbG0y
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lTVE41QlZGbDB0dlY0TXViR0E3eklsbTJlQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkRERC9CNEEyODM2MjlFMUIxMUU5OEUxRTRFNUVDNEY5QUUwMi95U1RONUJWRmww
dHZWNE11YkdBN3pJbG0yZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT07bdBj3RY38EuuLqTe/0BvuYsKPgORjs+e7nXc8rzP5pxm7d4c0uWYxMl7f
3UIyRINXvSVljZGNBhDfnCyTTnH/4+9Vb0BkKH65MMZs486V/Hj2sCO2nkvsAfJD
RDJB7rHGhEFjOWsqI8dW3wuoQmMIsm8gJc8ZacUlMZrNRGClJDRZPaS6M5RKsgs6
Yrdgs3wsN58Iks2T0GPuLZSOV6Vu8wV4IuCrC7/zJ9XwrSGhTty+a1HpNlgQl48U
4H5fxyJOIrk3lT2nzJNQQIkTqc53buH9u+4EBk0NLJZzlmwzAr3n0VdEAPygKZdz
RhMtl7MvnK23UCtGHlHc4ws5Yw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:23:52 2026 by rpki-client