
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier: 642R8rVlM/0D4frGSklv7fq3n9U/Lp5iD1rm8iX8isg=
Subject key identifier: DA:EF:D8:C5:CA:9B:CC:21:D2:70:44:EC:C0:E4:FE:2D:BE:8B:51:E8
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial: 1031
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number: 101A
Signing time: Tue 12 May 2026 17:28:40 +0000
Manifest this update: Tue 12 May 2026 17:28:39 +0000
Manifest next update: Tue 19 May 2026 17:28:39 +0000
Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: xyK/8eIKFR1IdnHpBm/FygMt9XZXg1XLPo7SaLs+nQI=)
2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: 8Pao0AT8dxW6T4CwAgWpHWpXxG/CEjpNqpmyQLKWTcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4145 (0x1031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Validity
Not Before: May 12 17:28:39 2026 GMT
Not After : May 19 17:28:39 2026 GMT
Subject: CN=6a036348-a240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:47:d0:f8:7b:91:7b:18:98:16:6a:7b:25:
56:75:df:1b:e5:19:31:ff:05:ee:71:eb:8e:27:0c:
f9:11:e3:6b:01:49:3e:2e:0b:1e:ff:42:3c:37:2a:
75:b6:13:0b:50:82:52:b3:92:00:92:45:fb:1c:92:
ee:94:74:9d:27:b2:22:d9:f7:fb:4e:80:4d:d0:65:
a8:7f:25:4f:a3:01:f2:08:52:64:07:8f:6f:66:b0:
59:4d:1f:63:c8:26:ad:4d:95:21:40:e0:eb:e6:1c:
36:d5:96:b6:b8:d3:29:88:bd:c7:7e:b7:09:e3:c2:
e0:32:3c:1c:79:17:fc:fd:88:ec:57:88:22:c4:9c:
af:cd:f4:56:b3:6b:84:c4:2c:99:56:db:6e:4a:a7:
4b:d6:26:c4:1c:6f:40:b1:30:b9:b5:09:30:78:d2:
5e:d2:42:ac:05:8b:43:e4:bf:22:66:f6:d8:d0:2c:
95:fd:d2:ae:ca:3e:0d:a9:3f:ab:53:4b:1f:e6:28:
c6:72:49:17:51:1d:21:8d:a9:61:d5:86:2b:11:cf:
27:76:e0:c2:92:22:09:87:b4:8b:fc:36:86:8b:be:
9b:84:77:1f:04:20:d2:7c:5f:ff:98:d6:b6:9d:91:
0a:ea:a0:ef:5a:6c:bf:c6:b4:f0:f3:29:76:e4:15:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EF:D8:C5:CA:9B:CC:21:D2:70:44:EC:C0:E4:FE:2D:BE:8B:51:E8
X509v3 Authority Key Identifier:
keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:fa:99:94:9d:a6:b9:fc:01:51:03:28:c9:e9:22:a5:ad:df:
56:48:31:7c:4e:28:c9:36:24:e2:2e:89:52:fb:d1:f3:11:3b:
30:46:9a:7b:eb:92:0c:f8:73:64:54:09:40:59:cb:68:e7:f0:
e7:ec:1c:7c:da:00:60:f3:c3:fa:d1:2c:cf:7b:84:59:97:0a:
dc:20:ed:03:3c:5d:13:63:e4:87:52:84:7c:b2:2b:f0:13:30:
16:c1:77:c4:88:53:9d:01:7d:76:b9:75:83:34:91:99:cb:4d:
af:f2:23:b9:5b:d7:38:43:22:bc:8c:cd:f1:20:8e:07:47:f2:
1c:f8:b3:7d:46:c9:ae:c4:36:5c:b5:d7:d3:9e:5e:b0:34:0f:
ec:73:c7:10:ef:e3:52:bd:b4:94:34:ed:6d:28:d3:da:af:2d:
4d:db:4d:27:f4:f5:f0:7d:9c:de:96:ca:04:d8:26:74:64:92:
42:c5:0a:6d:e3:d3:ff:27:0d:29:61:62:aa:67:16:54:59:f5:
05:6d:98:8e:df:2c:1e:8b:15:f8:55:fd:e2:44:b3:9f:50:ee:
23:f6:2b:fc:ff:a0:7f:eb:e4:0a:79:8a:49:7f:b5:57:1f:7d:
e3:e2:31:c3:aa:1c:90:c8:ab:8b:5e:b9:6e:6d:52:4e:d1:38:
c3:cb:83:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIyRUUxMTAvBgNVBAUTKEM4MjQzNDc0MjVCQUM4QUY1OUI0RTE5NjZCQzEwREJG
QThCREFCODIwHhcNMjYwNTEyMTcyODM5WhcNMjYwNTE5MTcyODM5WjAYMRYwFAYD
VQQDEw02YTAzNjM0OC1hMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJNH0Ph7kXsYmBZqeyVWdd8b5Rkx/wXuceuOJwz5EeNrAUk+Lgse/0I8Nyp1
thMLUIJSs5IAkkX7HJLulHSdJ7Ii2ff7ToBN0GWofyVPowHyCFJkB49vZrBZTR9j
yCatTZUhQODr5hw21Za2uNMpiL3HfrcJ48LgMjwceRf8/YjsV4gixJyvzfRWs2uE
xCyZVttuSqdL1ibEHG9AsTC5tQkweNJe0kKsBYtD5L8iZvbY0CyV/dKuyj4NqT+r
U0sf5ijGckkXUR0hjalh1YYrEc8nduDCkiIJh7SL/DaGi76bhHcfBCDSfF//mNa2
nZEK6qDvWmy/xrTw8yl25BXdYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrv2MXK
m8wh0nBE7MDk/i2+i1HoMB8GA1UdIwQYMBaAFMgkNHQlusivWbThlmvBDb+ovauC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjJFRS8xRjQxMUY1ODZD
MjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlLOVp0T0dXYThFTnY2aTlx
NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lDUTBkQ1c2eUs5WnRPR1dhOEVOdjZpOXE0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjJFRS8xRjQxMUY1ODZDMjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlL
OVp0T0dXYThFTnY2aTlxNEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVfqZlJ2mufwBUQMoyekipa3fVkgxfE4oyTYk4i6JUvvR8xE7MEaae+uSDPhz
ZFQJQFnLaOfw5+wcfNoAYPPD+tEsz3uEWZcK3CDtAzxdE2Pkh1KEfLIr8BMwFsF3
xIhTnQF9drl1gzSRmctNr/IjuVvXOEMivIzN8SCOB0fyHPizfUbJrsQ2XLXX055e
sDQP7HPHEO/jUr20lDTtbSjT2q8tTdtNJ/T18H2c3pbKBNgmdGSSQsUKbePT/ycN
KWFiqmcWVFn1BW2Yjt8sHosV+FX94kSzn1DuI/Yr/P+gf+vkCnmKSX+1Vx994+Ix
w6ockMiri165bm1STtE4w8uDBA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:18:26 2026 by rpki-client