
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
File: yq12WnMFvBUlSxWyW1vTm2Oow68.mft (raw, json)
Hash identifier: U+7iOcKtin3b5F7e5EQByTP3HwopgTPla+x5E5VT1G8=
Subject key identifier: 95:9B:80:8B:D4:75:7D:4F:63:1A:15:55:33:0F:5E:14:F7:92:73:36
Authority key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
Certificate issuer: /CN=A911082E/serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
Manifest number: DD
Signing time: Mon 21 Sep 2026 06:36:23 +0000
Manifest this update: Mon 21 Sep 2026 06:36:22 +0000
Manifest next update: Mon 28 Sep 2026 06:36:22 +0000
Files and hashes: 1: yq12WnMFvBUlSxWyW1vTm2Oow68.crl (hash: ZzjnNQP5qKU6wcLOKZPN66rXqT8DS3uyh/MI3ftVQb0=)
2: 2CD74E4E66E311F08F05EC49C4F9AE02.roa (hash: /XD7eUERO5lWybTU1XRtBW6LwOkjsdG2lxm5wvSE3SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl
rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Validity
Not Before: Sep 21 06:36:22 2026 GMT
Not After : Sep 28 06:36:22 2026 GMT
Subject: CN=6ab0d067-8787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:43:2a:e5:30:11:32:58:aa:a3:ba:9d:ef:
86:2c:3d:d1:ee:d7:24:b7:37:bb:73:2e:79:43:52:
63:8e:ba:4a:cd:6d:ea:c5:50:13:b3:c6:bd:d4:f8:
5f:44:90:ad:27:8c:3a:2f:5a:b0:ce:63:38:f9:c4:
0b:3d:86:8f:c9:fd:e2:24:a5:97:4d:c5:1e:a9:b5:
90:e0:89:86:d5:41:bd:8e:9d:36:5f:31:3f:a5:43:
c3:66:09:c1:a2:47:e7:5c:ce:d8:0f:53:d8:44:dd:
24:31:82:87:0d:b7:4c:6d:18:de:11:86:d4:c5:60:
66:97:f0:a2:1c:43:96:81:41:af:fa:d2:f7:46:19:
17:50:ad:01:43:85:fb:ed:f1:ec:e8:54:04:c5:27:
e2:8f:36:41:15:2e:c4:a9:f9:75:8e:81:39:0e:aa:
00:65:45:07:46:41:61:6e:92:ef:38:26:41:2d:c0:
10:88:06:d3:a9:ec:4e:41:25:d1:9a:2e:6d:ad:d3:
52:57:73:e8:63:5d:2b:09:a9:87:02:d7:0c:89:70:
3d:2a:12:3a:28:ff:96:79:e0:db:61:56:6b:31:63:
16:16:a9:68:b9:db:02:61:c8:27:17:8d:be:3a:56:
c2:74:8e:1e:97:d9:8e:51:e5:c0:b6:ae:c3:95:f3:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9B:80:8B:D4:75:7D:4F:63:1A:15:55:33:0F:5E:14:F7:92:73:36
X509v3 Authority Key Identifier:
keyid:CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:d1:cb:20:49:c2:ea:20:ab:00:c6:f2:0d:34:70:74:f1:57:
6a:96:72:13:17:4b:83:66:e4:5e:44:af:a9:af:64:ca:b6:33:
0b:ac:e4:a5:07:3f:de:73:24:03:b3:85:c0:9c:14:f0:6a:bb:
27:a7:2a:35:4f:9e:9e:cb:ae:ef:60:52:67:bd:d3:ef:96:86:
d8:b2:7f:2d:fc:6b:fd:40:e0:6b:4b:04:3a:71:7a:88:50:c7:
fa:6c:55:d3:94:e9:3f:7a:56:75:8b:9a:4f:ab:4a:75:25:6c:
79:93:d6:03:1e:dd:4e:c1:31:57:08:f9:89:d6:53:4f:32:72:
ee:53:f0:24:1c:b1:91:8f:c5:7a:e2:81:12:cb:0b:34:ca:c6:
47:76:a6:b5:71:43:9b:ea:23:fe:cc:64:45:f4:ab:24:7c:74:
66:50:1d:71:03:52:2a:0f:aa:a6:5e:4b:7f:e9:0d:20:66:e0:
aa:8a:80:08:d8:d5:f9:16:e1:c1:ad:e5:3d:e5:2e:2e:05:45:
7e:28:25:e0:7a:f4:43:27:33:90:f3:e5:51:27:4d:62:32:75:
05:2b:90:46:6e:e2:e6:02:73:19:09:16:4b:4b:ae:43:d5:dc:
f1:f4:52:b7:ec:ab:3b:57:30:ee:29:fd:4f:70:ad:d3:08:e7:
a1:48:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:52:12 2026 by rpki-client