
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier: /ZvlgwMnPJBoUATQjxbJ6FBqHsx9+NnRlRxpOntkecc=
Subject key identifier: B7:3F:91:18:1E:E6:2A:2F:43:70:89:8A:1E:2C:82:D7:09:D6:C3:91
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial: 0F06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number: 0EFA
Signing time: Tue 06 Oct 2026 17:44:00 +0000
Manifest this update: Tue 06 Oct 2026 17:44:00 +0000
Manifest next update: Tue 13 Oct 2026 17:44:00 +0000
Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: 2TgOsQ9rPl/eTL3TuDLBQz6/Sb5Op3QFCcThivxBSpw=)
2: BA55D63C415311F1A8AAFB3BCA833773.roa (hash: 5c6lk8zZg9JDdCtbr0MwnxF7u7fQcm0RumOai6GNeD4=)
3: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: UPi+EXP3M++eU/SlCZMA1QlfPjsM5dTJBEKasdPEKHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3846 (0xf06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Validity
Not Before: Oct 6 17:44:00 2026 GMT
Not After : Oct 13 17:44:00 2026 GMT
Subject: CN=6ac53360-2a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:8c:03:26:94:f0:ee:62:98:33:0f:90:22:
ef:b4:12:9f:2f:3f:bc:c6:ba:91:3a:8f:74:37:b3:
e6:54:40:ab:19:e8:ad:63:9b:25:21:77:1d:b4:85:
05:ed:ec:48:7d:5d:9f:e1:7e:20:25:25:29:2e:cd:
60:dd:18:a0:4e:cd:e9:72:0c:65:c0:b5:97:d7:62:
e7:99:04:42:1c:ba:f3:23:be:d4:28:9c:50:f2:b8:
15:6a:1c:b0:5a:11:f0:1a:f9:b2:53:d6:b9:6c:86:
97:ea:41:ac:4c:6b:92:18:78:2b:45:bf:67:b4:49:
90:29:a8:0d:1c:91:28:5e:ee:d1:52:67:e7:ce:6e:
42:d7:c8:87:e0:37:2d:1d:cd:6f:da:4a:74:e9:46:
13:26:ba:41:8a:de:d9:bc:35:2d:cb:5c:cf:a8:c0:
6f:e3:00:db:07:e0:85:87:72:57:de:aa:71:1f:e0:
80:6b:42:9b:aa:c5:ca:c7:d2:d9:73:f1:44:c4:44:
7f:b6:67:32:d7:4b:90:d3:4a:d7:23:c9:0c:4d:0c:
c3:86:ba:64:81:bf:1e:53:dd:f6:eb:4f:3d:49:85:
ba:65:5d:10:fd:19:48:78:ff:53:e8:7f:df:07:ac:
22:88:77:8e:5f:de:96:f0:8c:b9:0f:d5:1a:9b:77:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3F:91:18:1E:E6:2A:2F:43:70:89:8A:1E:2C:82:D7:09:D6:C3:91
X509v3 Authority Key Identifier:
keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e8:aa:9b:8d:d8:df:86:4a:5d:fb:da:b3:16:85:ab:96:8d:
16:b9:af:6c:4a:60:1c:93:f8:65:39:9d:de:d9:2b:4d:13:e7:
9a:b4:02:53:a2:df:c6:1b:63:2d:d0:4a:e5:6d:78:49:0d:7c:
3c:b0:3e:1a:11:65:49:87:dc:5e:fb:f9:f9:97:3b:aa:56:64:
3b:be:34:40:f3:c3:8d:54:63:be:37:2b:f2:24:95:e4:8e:63:
d1:73:11:6d:27:7a:b2:8c:e3:4c:3f:b0:16:fc:a8:3d:d9:45:
f5:62:b4:72:11:0e:4e:e1:40:28:a7:07:bd:01:b0:93:26:cb:
d8:e5:17:6d:50:fc:c4:f0:91:0f:26:3e:4a:9a:e7:cd:da:d0:
49:08:07:3e:1a:f6:6d:42:b7:36:c1:67:1f:74:23:a8:45:d0:
42:cc:d4:38:a0:3f:66:db:a9:b7:7c:69:40:56:da:fa:b2:b3:
4c:09:ff:3e:50:77:d7:f5:ca:3a:59:66:f3:d4:6e:69:9e:39:
7d:3f:13:95:c8:31:56:a6:25:dd:bb:30:0b:84:8e:96:bb:79:
25:24:43:5c:31:a6:91:6a:6f:46:25:5c:ac:7b:8a:1e:6b:7b:
56:3b:3d:52:91:0d:47:70:f0:5a:66:e8:0f:b6:9b:6d:bf:fd:
98:69:74:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF
M0UyMjc4ODcwHhcNMjYxMDA2MTc0NDAwWhcNMjYxMDEzMTc0NDAwWjAYMRYwFAYD
VQQDEw02YWM1MzM2MC0yYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5+OMAyaU8O5imDMPkCLvtBKfLz+8xrqROo90N7PmVECrGeitY5slIXcdtIUF
7exIfV2f4X4gJSUpLs1g3RigTs3pcgxlwLWX12LnmQRCHLrzI77UKJxQ8rgVahyw
WhHwGvmyU9a5bIaX6kGsTGuSGHgrRb9ntEmQKagNHJEoXu7RUmfnzm5C18iH4Dct
Hc1v2kp06UYTJrpBit7ZvDUty1zPqMBv4wDbB+CFh3JX3qpxH+CAa0KbqsXKx9LZ
c/FExER/tmcy10uQ00rXI8kMTQzDhrpkgb8eU9326089SYW6ZV0Q/RlIeP9T6H/f
B6wiiHeOX96W8Iy5D9Uam3cnCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLc/kRge
5iovQ3CJih4sgtcJ1sORMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF
QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3
NEJvY08zZFFJY2pqNGllSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+iqm43Y34ZKXfvasxaFq5aNFrmvbEpgHJP4ZTmd3tkrTRPnmrQCU6Lfxhtj
LdBK5W14SQ18PLA+GhFlSYfcXvv5+Zc7qlZkO740QPPDjVRjvjcr8iSV5I5j0XMR
bSd6sozjTD+wFvyoPdlF9WK0chEOTuFAKKcHvQGwkybL2OUXbVD8xPCRDyY+Sprn
zdrQSQgHPhr2bUK3NsFnH3QjqEXQQszUOKA/Ztupt3xpQFba+rKzTAn/PlB31/XK
Ollm89RuaZ45fT8TlcgxVqYl3bswC4SOlrt5JSRDXDGmkWpvRiVcrHuKHmt7Vjs9
UpENR3DwWmboD7abbb/9mGl08Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:41:15 2026 by rpki-client