
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json)
Hash identifier: DoxxW3kPO2DNlfwarbXJxAXYmcsHr3Dl8ZKbYDDKeWQ=
Subject key identifier: 4D:F1:38:1A:9D:30:48:14:6B:63:CB:AE:8E:AE:47:71:BC:EB:E0:1C
Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Certificate serial: 02F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
Manifest number: 02EF
Signing time: Sat 03 Oct 2026 01:28:35 +0000
Manifest this update: Sat 03 Oct 2026 01:28:34 +0000
Manifest next update: Sat 10 Oct 2026 01:28:34 +0000
Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: l3t5S+TMh/p5aZRIupnCy9pwRkDJN6Gbpq1O49Unio0=)
2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: NLXZ65JDAAnPzadraE0zYkg0or9UL4J3E22WlvbjmhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757 (0x2f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Validity
Not Before: Oct 3 01:28:34 2026 GMT
Not After : Oct 10 01:28:34 2026 GMT
Subject: CN=6ac05a42-8237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:86:81:1e:23:41:82:df:28:d3:30:09:34:
24:c4:31:29:2b:d9:6b:a6:a2:8d:c7:9f:53:73:c5:
ac:da:83:3d:ff:d3:10:cb:04:8a:2b:81:29:f0:45:
99:5a:33:03:e2:0c:40:ea:33:71:86:9b:fa:6f:19:
d1:89:fe:4a:30:2d:52:43:26:c3:83:d0:b5:65:c0:
a0:4f:97:da:c7:02:2a:ea:a7:6a:4b:62:34:45:26:
14:6b:87:ec:25:2b:88:4d:3e:44:e2:fd:93:ca:a5:
62:cd:44:33:bb:57:59:68:ab:e0:66:2a:f5:f3:43:
74:37:a7:53:ab:98:12:ff:b5:96:06:97:f9:8a:cc:
55:29:20:09:ca:41:7b:fa:39:c7:34:95:0e:1d:cf:
36:10:8c:ba:2b:5c:c9:0b:26:2a:4a:ce:0d:0a:09:
11:38:86:f7:8f:c4:81:b5:ee:ab:4a:24:46:8a:08:
53:28:b7:91:b9:a6:84:b7:42:26:b5:13:96:de:90:
89:e9:73:fb:7e:a2:85:91:a6:93:6f:0c:78:1a:3e:
8a:34:ca:4c:d0:9a:b9:7f:a8:07:c7:3a:74:a2:63:
44:f0:66:5a:59:7a:7e:67:b6:83:5f:7e:35:7a:89:
8c:9a:a4:5e:8d:9f:81:47:b1:29:e6:eb:35:94:b6:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F1:38:1A:9D:30:48:14:6B:63:CB:AE:8E:AE:47:71:BC:EB:E0:1C
X509v3 Authority Key Identifier:
keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ca:2b:7d:96:93:46:2c:e8:65:7c:6b:2e:26:1d:6f:07:71:
19:31:9c:37:8b:fc:f7:f9:68:20:75:41:51:a0:e2:1f:4c:09:
0f:79:a4:7b:ca:54:18:d6:35:5d:30:ad:d7:73:4d:9d:f8:e1:
73:a3:c4:1c:32:8b:05:0b:87:f0:26:eb:ce:96:85:c7:d9:4f:
85:ec:60:29:a2:22:45:58:78:43:1c:02:bc:9a:3c:a6:dc:17:
d2:66:7d:41:77:5d:53:3f:b2:ed:ee:80:29:a4:69:7e:fd:5b:
07:bd:ce:5e:3b:80:7d:2e:da:d1:d1:1a:53:28:d7:1d:14:22:
4d:fc:5f:f5:83:95:b9:62:c1:07:b9:83:a4:39:d4:1a:a6:db:
94:e2:70:9f:bc:60:f3:80:7b:d1:30:e0:c5:c0:96:21:b8:bf:
e0:72:b1:b3:d6:ce:c3:47:02:f8:6b:1d:1c:c0:66:00:d6:71:
95:99:33:cf:aa:a6:eb:85:de:c1:56:c3:9d:66:49:09:39:62:
72:19:22:55:c6:eb:02:db:da:c4:de:29:4a:11:b7:b8:80:ae:
3d:de:e2:2a:d0:b5:3a:58:48:23:2a:2d:99:13:8d:fd:2a:bf:
6c:32:75:40:44:f2:74:6c:b1:c6:b8:23:12:ae:dd:31:ef:e8:
b7:8c:f7:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0
NUYyNUUyMEIwHhcNMjYxMDAzMDEyODM0WhcNMjYxMDEwMDEyODM0WjAYMRYwFAYD
VQQDEw02YWMwNWE0Mi04MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjOGgR4jQYLfKNMwCTQkxDEpK9lrpqKNx59Tc8Ws2oM9/9MQywSKK4Ep8EWZ
WjMD4gxA6jNxhpv6bxnRif5KMC1SQybDg9C1ZcCgT5faxwIq6qdqS2I0RSYUa4fs
JSuITT5E4v2TyqVizUQzu1dZaKvgZir180N0N6dTq5gS/7WWBpf5isxVKSAJykF7
+jnHNJUOHc82EIy6K1zJCyYqSs4NCgkROIb3j8SBte6rSiRGighTKLeRuaaEt0Im
tROW3pCJ6XP7fqKFkaaTbwx4Gj6KNMpM0Jq5f6gHxzp0omNE8GZaWXp+Z7aDX341
eomMmqRejZ+BR7Ep5us1lLYrHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3xOBqd
MEgUa2PLro6uR3G86+AcMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw
RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14
M3FlcE9jdmltbzlGOGw0Z3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw8orfZaTRizoZXxrLiYdbwdxGTGcN4v89/loIHVBUaDiH0wJD3mke8pUGNY1
XTCt13NNnfjhc6PEHDKLBQuH8CbrzpaFx9lPhexgKaIiRVh4QxwCvJo8ptwX0mZ9
QXddUz+y7e6AKaRpfv1bB73OXjuAfS7a0dEaUyjXHRQiTfxf9YOVuWLBB7mDpDnU
GqbblOJwn7xg84B70TDgxcCWIbi/4HKxs9bOw0cC+GsdHMBmANZxlZkzz6qm64Xe
wVbDnWZJCTlichkiVcbrAtvaxN4pShG3uICuPd7iKtC1OlhIIyotmRON/Sq/bDJ1
QETydGyxxrgjEq7dMe/ot4z3UQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 17:54:59 2026 by rpki-client