
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json)
Hash identifier: rfOW4zgQ9nOOkkNUlmTRfFPRnF7NtFK80lVpQm4QbUY=
Subject key identifier: F0:14:9C:A4:21:2F:B8:67:7A:8E:ED:57:1E:6E:3F:7C:7A:56:7F:57
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial: 04A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
Manifest number: 0495
Signing time: Tue 29 Sep 2026 00:06:42 +0000
Manifest this update: Tue 29 Sep 2026 00:06:41 +0000
Manifest next update: Tue 06 Oct 2026 00:06:41 +0000
Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: 6UddV3MOURmmAIWZsZoOIbSY6tVJw3sXkqpMNYKxdqI=)
2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: Yp8vQRRn+1isdhS7HH7fMBWq8BHFrYVDOBpfy5O1p3A=)
3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: cVYpcEpLmW3gYRT3SsW9LPnpjNMLZz8OsKdq5PALSk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Validity
Not Before: Sep 29 00:06:41 2026 GMT
Not After : Oct 6 00:06:41 2026 GMT
Subject: CN=6abb0112-3d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:88:e2:5d:93:6c:87:20:f1:e5:98:6b:dd:
89:85:43:5a:f5:d8:b4:05:24:e0:f9:b6:f2:39:85:
5d:39:0f:86:f4:b9:24:90:57:4d:66:04:16:0f:55:
22:48:23:6c:96:31:6f:48:0d:75:61:85:4b:b2:04:
eb:7e:23:bc:93:0f:e4:11:8b:a7:25:e4:33:59:b3:
5b:43:0f:37:76:5d:8e:4f:ae:0b:ee:c4:25:dc:0f:
5e:de:44:fa:16:bf:b2:2e:2e:f7:3f:59:0f:84:a3:
3d:00:3a:bf:a4:ad:48:0c:34:75:4b:bd:11:c0:58:
cd:7e:fa:12:b1:4c:dc:49:32:2c:5c:e4:26:3f:e0:
b8:28:aa:23:27:6f:9e:53:11:05:8d:63:7f:9e:b9:
a8:bc:e8:e7:ed:72:5a:fc:e2:95:17:a6:de:18:70:
57:57:21:c2:47:31:65:90:5d:66:04:61:0d:b4:70:
bb:81:53:df:4f:b5:bb:0f:e4:4a:bb:df:f8:c7:40:
e0:ad:35:7e:02:b1:79:a0:69:39:8b:86:3a:99:e4:
9e:88:d0:ac:d4:e8:68:cc:49:b2:d1:0c:68:cf:de:
52:47:fb:dd:1f:cc:ab:a7:6d:05:3d:fa:13:97:5e:
3c:50:ca:bd:e6:c4:22:de:dd:5f:ae:10:24:51:df:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:9C:A4:21:2F:B8:67:7A:8E:ED:57:1E:6E:3F:7C:7A:56:7F:57
X509v3 Authority Key Identifier:
keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:a2:c0:4a:2f:bf:6c:31:1f:4c:5f:82:dd:b8:7c:68:2c:22:
d8:0f:73:5d:7c:1d:0f:72:a2:c2:98:f0:b1:51:a4:c7:39:90:
ce:3d:54:69:2a:11:48:73:80:84:3d:2e:69:bd:7d:c0:dc:f6:
42:27:d2:6e:17:99:88:ac:59:53:88:52:71:13:a2:27:a5:8d:
27:4a:02:b1:13:6b:97:17:4e:a9:d9:99:aa:9d:0b:ae:78:58:
88:4a:38:ea:f8:9f:05:ae:ba:ca:26:c9:7a:45:31:0a:4d:54:
4b:fa:ae:ce:ff:89:b1:84:bd:24:56:ce:96:8b:67:9f:44:a3:
6d:3c:39:02:10:80:99:b6:58:c9:9d:13:d9:ea:02:47:c0:79:
d4:84:12:de:c7:e6:fd:07:5d:e0:f4:16:7d:f6:6c:90:06:44:
b0:a5:c5:fa:e2:4e:4e:bc:37:9d:e0:e3:11:fa:b3:b1:77:a5:
a8:4a:f5:60:d6:0e:10:e1:ee:7a:54:30:0a:9e:9d:f2:b8:15:
21:b7:57:35:7f:53:4c:fe:9f:98:b8:57:e2:63:21:d7:8b:1d:
ff:65:74:11:04:47:ae:ad:b6:45:b9:ef:8b:88:44:9d:29:6b:
3e:55:91:a2:32:66:5e:70:ab:d0:c1:17:e0:f1:8e:9a:63:77:
be:ae:6e:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0
OUM1N0Y1MTUwHhcNMjYwOTI5MDAwNjQxWhcNMjYxMDA2MDAwNjQxWjAYMRYwFAYD
VQQDEw02YWJiMDExMi0zZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3yCI4l2TbIcg8eWYa92JhUNa9di0BSTg+bbyOYVdOQ+G9LkkkFdNZgQWD1Ui
SCNsljFvSA11YYVLsgTrfiO8kw/kEYunJeQzWbNbQw83dl2OT64L7sQl3A9e3kT6
Fr+yLi73P1kPhKM9ADq/pK1IDDR1S70RwFjNfvoSsUzcSTIsXOQmP+C4KKojJ2+e
UxEFjWN/nrmovOjn7XJa/OKVF6beGHBXVyHCRzFlkF1mBGENtHC7gVPfT7W7D+RK
u9/4x0DgrTV+ArF5oGk5i4Y6meSeiNCs1OhozEmy0Qxoz95SR/vdH8yrp20FPfoT
l148UMq95sQi3t1frhAkUd/tnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPAUnKQh
L7hneo7tVx5uP3x6Vn9XMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE
RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI
MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ6LASi+/bDEfTF+C3bh8aCwi2A9zXXwdD3KiwpjwsVGkxzmQzj1UaSoRSHOA
hD0uab19wNz2QifSbheZiKxZU4hScROiJ6WNJ0oCsRNrlxdOqdmZqp0LrnhYiEo4
6vifBa66yibJekUxCk1US/quzv+JsYS9JFbOlotnn0SjbTw5AhCAmbZYyZ0T2eoC
R8B51IQS3sfm/Qdd4PQWffZskAZEsKXF+uJOTrw3neDjEfqzsXelqEr1YNYOEOHu
elQwCp6d8rgVIbdXNX9TTP6fmLhX4mMh14sd/2V0EQRHrq22Rbnvi4hEnSlrPlWR
ojJmXnCr0MEX4PGOmmN3vq5uNA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:51:36 2026 by rpki-client