
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json)
Hash identifier: 8TC/8RtrVHnnaVUGD1YiSCAEFL51t0EBp03bZU7tEEA=
Subject key identifier: 41:09:B7:0A:56:54:6B:3A:8A:2F:A7:0C:93:C0:64:95:DB:DF:E8:A7
Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
Manifest number: 05CA
Signing time: Sun 20 Sep 2026 23:39:24 +0000
Manifest this update: Sun 20 Sep 2026 23:39:23 +0000
Manifest next update: Sun 27 Sep 2026 23:39:23 +0000
Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: 5QkAh1QjHjzbDyj02CVME3GfpDLfTd2e7K0bzvhkpyw=)
2: F83346DA410211F097F43F85C4F9AE02.roa (hash: HlHozKQbiUgJEzpu3Hjn82lhGmduZGu23FAaPzM4W3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Validity
Not Before: Sep 20 23:39:23 2026 GMT
Not After : Sep 27 23:39:23 2026 GMT
Subject: CN=6ab06eac-588b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:6e:32:29:ec:b2:c2:4a:a3:9f:ae:f7:65:
be:38:9b:79:3f:28:bb:90:14:54:4d:10:03:38:97:
f2:38:10:9f:1a:a6:c7:64:4e:28:60:85:27:a7:be:
37:7f:6c:c1:7c:d0:fa:86:38:67:27:70:8d:1e:a3:
f5:2e:b1:c4:96:e6:7c:6c:01:f8:80:a5:21:a2:25:
57:78:05:8f:51:ec:1e:41:50:32:f2:a4:64:b9:fd:
4d:df:dc:27:e1:38:03:31:b4:a5:81:c9:7d:9c:1b:
f8:c1:e8:33:2c:1f:53:63:51:60:b8:e9:0c:c3:d5:
d4:4d:d5:72:53:f9:c9:5b:82:c2:8c:d7:a1:08:af:
02:5d:14:dd:b0:5e:cc:72:cb:e0:a2:77:8a:14:58:
b0:59:b8:86:f1:0b:10:aa:4f:be:3a:81:0f:b9:3a:
fc:68:06:bb:ee:84:81:ac:58:5f:e3:e1:c2:42:e1:
ef:55:fd:b9:58:d8:60:d3:d5:9e:b8:0c:d1:3c:52:
3a:7f:85:a9:05:75:94:90:f2:c3:43:07:ca:3a:07:
5a:6b:a2:34:85:dd:e6:36:15:2f:35:19:f1:05:10:
32:49:cb:ae:41:af:34:aa:55:9b:12:b3:93:6c:92:
6a:cd:5a:09:2f:b3:ff:e8:fd:80:2f:a2:bc:3b:38:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:B7:0A:56:54:6B:3A:8A:2F:A7:0C:93:C0:64:95:DB:DF:E8:A7
X509v3 Authority Key Identifier:
keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:d2:cd:af:46:54:80:4b:19:8d:02:0a:93:10:4c:a9:76:b1:
7f:f8:5f:39:53:f2:85:29:18:6e:c6:21:e5:33:01:52:d9:00:
61:5e:8d:9c:84:6e:c3:f7:f3:f0:9d:6d:da:96:55:5a:ab:4b:
6f:98:7f:87:55:4b:c1:97:7e:4d:67:58:0a:a1:df:d6:4b:76:
e3:c5:3c:0a:6e:d4:92:65:a6:2d:b6:ec:a8:e7:ca:f7:32:f8:
0d:47:82:88:8a:b4:32:aa:ed:5c:bf:69:00:4a:2c:31:36:c8:
48:72:01:f9:ab:21:31:90:5a:15:8e:b4:8e:13:e0:24:9f:e5:
5b:c2:f7:0e:32:df:56:b5:42:c3:2f:70:41:8b:96:7a:ad:bf:
17:cc:fa:72:08:d8:6f:8d:4a:54:b6:0a:fc:3a:47:d1:de:b1:
0d:04:6b:e3:c8:80:38:c4:e4:10:85:45:2f:e8:3a:b6:84:ac:
f4:a2:9e:42:a1:cf:f0:a2:70:b7:7d:fd:3a:6f:ee:73:ca:72:
74:b4:dc:86:bf:9b:78:e7:fd:d4:b8:1a:7b:bd:8e:4d:d2:e9:
db:d3:cd:54:bc:b0:76:22:1e:bc:ef:8d:20:cb:38:8e:a9:7d:
93:67:72:eb:9a:62:86:b5:9b:e9:b6:23:eb:1a:d4:92:48:9d:
bd:47:4b:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQwQUYxMTAvBgNVBAUTKDYzQjcwMUI3MjcwNkYzMTkwQkVGOEJGQkZBMzRGRkEz
M0Y0RjZCRDYwHhcNMjYwOTIwMjMzOTIzWhcNMjYwOTI3MjMzOTIzWjAYMRYwFAYD
VQQDEw02YWIwNmVhYy01ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvNuMinsssJKo5+u92W+OJt5Pyi7kBRUTRADOJfyOBCfGqbHZE4oYIUnp743
f2zBfND6hjhnJ3CNHqP1LrHEluZ8bAH4gKUhoiVXeAWPUeweQVAy8qRkuf1N39wn
4TgDMbSlgcl9nBv4wegzLB9TY1FguOkMw9XUTdVyU/nJW4LCjNehCK8CXRTdsF7M
csvgoneKFFiwWbiG8QsQqk++OoEPuTr8aAa77oSBrFhf4+HCQuHvVf25WNhg09We
uAzRPFI6f4WpBXWUkPLDQwfKOgdaa6I0hd3mNhUvNRnxBRAyScuuQa80qlWbErOT
bJJqzVoJL7P/6P2AL6K8OzjjuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEJtwpW
VGs6ii+nDJPAZJXb3+inMB8GA1UdIwQYMBaAFGO3AbcnBvMZC++L+/o0/6M/T2vW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBBRi8xRTMzOUIzNjg4
REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9ZN2NCdHljRzh4a0w3NHY3LWpUX296OVBh
OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDBBRi8xRTMzOUIzNjg4REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9ZN2NCdHljRzh4
a0w3NHY3LWpUX296OVBhOVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl9LNr0ZUgEsZjQIKkxBMqXaxf/hfOVPyhSkYbsYh5TMBUtkAYV6NnIRuw/fz
8J1t2pZVWqtLb5h/h1VLwZd+TWdYCqHf1kt248U8Cm7UkmWmLbbsqOfK9zL4DUeC
iIq0MqrtXL9pAEosMTbISHIB+ashMZBaFY60jhPgJJ/lW8L3DjLfVrVCwy9wQYuW
eq2/F8z6cgjYb41KVLYK/DpH0d6xDQRr48iAOMTkEIVFL+g6toSs9KKeQqHP8KJw
t339Om/uc8pydLTchr+beOf91Lgae72OTdLp29PNVLywdiIevO+NIMs4jql9k2dy
65pihrWb6bYj6xrUkkidvUdLzQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:43:14 2026 by rpki-client