
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier: 5B4R5I7+cO2ULWBijvcK3fWj6suN0RfM+CCsXcCWf30=
Subject key identifier: FE:67:FC:0F:32:21:75:D7:EC:05:14:EA:84:49:69:C3:74:9A:24:60
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial: 1055
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number: 103E
Signing time: Wed 22 Jul 2026 17:35:02 +0000
Manifest this update: Wed 22 Jul 2026 17:35:01 +0000
Manifest next update: Wed 29 Jul 2026 17:35:01 +0000
Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: Obyc2M7F+L6jSG+YJ3ScIEVw92xatSqG59ldgcEMcIU=)
2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: 8Pao0AT8dxW6T4CwAgWpHWpXxG/CEjpNqpmyQLKWTcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4181 (0x1055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Validity
Not Before: Jul 22 17:35:01 2026 GMT
Not After : Jul 29 17:35:01 2026 GMT
Subject: CN=6a60ff46-a457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:ed:32:9b:26:82:f5:26:37:4a:e9:7f:a2:
63:ba:2a:6d:b8:45:d0:36:42:69:0b:f6:5a:ca:9e:
17:b3:04:a9:61:f0:6b:6b:06:d3:fa:09:ab:a4:bd:
3f:8b:14:f8:15:5c:16:54:f0:19:5d:3f:26:86:b3:
f8:b6:db:b0:bc:5d:60:c9:bf:59:96:d2:0c:70:99:
48:c0:4c:88:66:22:fe:2e:cd:11:2c:f7:f1:8c:cf:
d7:f0:e5:e4:82:d6:2d:7f:c3:f2:e5:c1:80:ce:98:
10:c9:4d:9f:a0:30:d3:e2:48:5f:ba:ef:8c:a1:e8:
c7:47:80:9c:90:45:89:aa:83:72:cf:b6:31:f4:6f:
3c:3c:61:2a:bc:c1:00:e1:e8:9a:2c:ff:36:82:67:
5e:e3:dc:4b:56:f6:21:e4:9b:10:6b:f6:5d:cb:0d:
ff:c5:56:a2:1f:a8:df:e2:24:32:56:92:ac:59:6f:
c8:48:5f:dc:2d:5d:a2:39:96:b4:67:74:23:35:71:
fe:30:6c:d2:1f:ce:fa:64:fc:a8:a2:6b:5d:fd:d7:
42:ee:c1:5f:38:bb:cf:52:67:b8:ea:70:4e:c8:e1:
0e:a4:cb:7f:84:fe:d9:c5:a0:fe:c8:be:4b:a2:1b:
8d:c3:49:43:2a:8c:3d:0b:46:4e:2c:76:0d:a7:96:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:67:FC:0F:32:21:75:D7:EC:05:14:EA:84:49:69:C3:74:9A:24:60
X509v3 Authority Key Identifier:
keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:9f:96:87:72:18:b2:6c:cd:aa:40:00:8e:66:57:c6:c4:9b:
d2:10:d3:d4:09:f1:53:65:98:a5:6d:f1:e0:47:aa:ef:e4:fb:
57:0e:45:2e:7a:0b:e5:32:26:ba:94:a4:69:56:e5:65:9a:fa:
ef:e1:5a:5c:c6:d3:90:f6:5f:43:d1:24:b8:ab:5b:a7:b1:e2:
17:cb:63:d4:6f:b9:c1:de:cc:41:41:46:54:87:1e:57:a5:d7:
2b:50:58:45:a7:cb:3a:ff:fa:59:aa:31:c7:02:82:e3:af:7c:
1e:c8:24:98:dd:93:a3:c1:c0:3a:50:fc:eb:a3:d4:98:0d:c3:
13:31:17:fc:f3:91:5e:08:6e:d6:d9:92:7b:53:99:2d:03:49:
ca:81:c5:2a:60:45:6a:18:75:33:2a:41:2a:2b:47:c3:2f:33:
10:74:61:c3:c9:88:99:b3:55:9c:19:2c:e1:bf:11:99:93:dd:
a6:1d:ec:6c:6a:cb:0d:dd:8f:7c:37:f9:73:c5:25:3a:62:bc:
0b:1c:5a:41:1f:3e:6d:e1:9e:53:bf:45:e9:a8:c6:3c:7b:ae:
4d:57:12:fe:55:0a:64:7e:45:f3:66:3a:dc:27:61:2c:5a:a2:
de:5c:90:17:53:67:b1:af:f3:77:22:4a:3c:7b:05:af:bc:2e:
52:b7:0f:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIyRUUxMTAvBgNVBAUTKEM4MjQzNDc0MjVCQUM4QUY1OUI0RTE5NjZCQzEwREJG
QThCREFCODIwHhcNMjYwNzIyMTczNTAxWhcNMjYwNzI5MTczNTAxWjAYMRYwFAYD
VQQDEw02YTYwZmY0Ni1hNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWXtMpsmgvUmN0rpf6JjuiptuEXQNkJpC/Zayp4XswSpYfBrawbT+gmrpL0/
ixT4FVwWVPAZXT8mhrP4ttuwvF1gyb9ZltIMcJlIwEyIZiL+Ls0RLPfxjM/X8OXk
gtYtf8Py5cGAzpgQyU2foDDT4khfuu+MoejHR4CckEWJqoNyz7Yx9G88PGEqvMEA
4eiaLP82gmde49xLVvYh5JsQa/Zdyw3/xVaiH6jf4iQyVpKsWW/ISF/cLV2iOZa0
Z3QjNXH+MGzSH876ZPyoomtd/ddC7sFfOLvPUme46nBOyOEOpMt/hP7ZxaD+yL5L
ohuNw0lDKow9C0ZOLHYNp5aGCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5n/A8y
IXXX7AUU6oRJacN0miRgMB8GA1UdIwQYMBaAFMgkNHQlusivWbThlmvBDb+ovauC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjJFRS8xRjQxMUY1ODZD
MjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlLOVp0T0dXYThFTnY2aTlx
NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lDUTBkQ1c2eUs5WnRPR1dhOEVOdjZpOXE0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjJFRS8xRjQxMUY1ODZDMjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlL
OVp0T0dXYThFTnY2aTlxNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJZ+Wh3IYsmzNqkAAjmZXxsSb0hDT1AnxU2WYpW3x4Eeq7+T7Vw5FLnoL5TIm
upSkaVblZZr67+FaXMbTkPZfQ9EkuKtbp7HiF8tj1G+5wd7MQUFGVIceV6XXK1BY
RafLOv/6WaoxxwKC4698HsgkmN2To8HAOlD866PUmA3DEzEX/PORXghu1tmSe1OZ
LQNJyoHFKmBFahh1MypBKitHwy8zEHRhw8mImbNVnBks4b8RmZPdph3sbGrLDd2P
fDf5c8UlOmK8CxxaQR8+beGeU79F6ajGPHuuTVcS/lUKZH5F82Y63CdhLFqi3lyQ
F1Nnsa/zdyJKPHsFr7wuUrcPtA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:10 2026 by rpki-client