
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File: y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier: C61XvztPwCfS0PNjlzZHn3n7XISs2aewwL7/qhoV0Cc=
Subject key identifier: 4D:5A:D9:E0:E9:9A:B7:3C:82:2D:68:95:26:B8:7A:9F:58:1A:AA:0A
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial: 098E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number: 0974
Signing time: Tue 22 Sep 2026 19:53:53 +0000
Manifest this update: Tue 22 Sep 2026 19:53:53 +0000
Manifest next update: Tue 29 Sep 2026 19:53:53 +0000
Files and hashes: 1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: T9M3GjdIOFqjkGOzwX9PHLuQcJSFIYlzdgzkx42FVak=)
2: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: VNNGkBpD1q5WZ16FnB1qRceTw8NjIdUzV5+D2PvmOUk=)
3: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4=)
4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: 6Szm2QWfkOsYb1i1zd7g9FOIR4EuHLgd8D1MqV0Eyn4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446 (0x98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Validity
Not Before: Sep 22 19:53:53 2026 GMT
Not After : Sep 29 19:53:53 2026 GMT
Subject: CN=6ab2dcd1-38b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:42:2e:b5:cc:b4:e9:fd:6e:a0:2b:24:8e:
8f:55:f6:0a:fe:40:4e:5d:b3:3f:32:5b:f5:2b:fa:
30:1b:fb:86:14:ea:e3:fb:5e:2a:5c:e7:86:93:9d:
e5:37:21:95:9e:7e:25:10:73:bf:e4:ad:6d:12:64:
bf:5c:f6:70:ea:8c:35:35:d9:4e:e3:e1:1e:1c:b4:
02:84:9b:ee:2b:c1:9c:a2:65:06:fe:68:0e:2b:1b:
62:32:68:7c:4a:6b:bc:cd:a5:7e:a0:ac:38:8d:32:
de:6b:0a:b0:46:ee:4d:bf:d8:ef:10:eb:af:b5:82:
ae:c4:4d:d8:65:15:59:9e:b7:0f:5b:cf:a2:ac:c6:
e9:f0:a1:52:48:5e:1b:a4:d1:5d:b4:94:7b:07:0a:
d2:6d:f8:e6:30:69:67:71:0a:0a:51:14:5d:b0:18:
f3:ec:d0:8e:a1:3c:12:3e:00:27:56:57:ed:33:14:
b1:00:9f:d9:02:ce:a3:d6:ba:1a:f9:39:ff:50:e5:
77:91:ba:9c:7d:aa:66:5b:78:a6:c1:87:e7:e4:c8:
41:48:23:ba:e2:13:1e:03:a4:2f:3c:30:5b:e4:ee:
3c:fe:8d:e0:3c:4f:5e:01:3c:06:7c:59:66:6e:fd:
62:5a:6f:8b:d9:46:0d:5a:39:b0:7a:69:3c:3c:b6:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5A:D9:E0:E9:9A:B7:3C:82:2D:68:95:26:B8:7A:9F:58:1A:AA:0A
X509v3 Authority Key Identifier:
keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:2f:8b:01:89:58:9f:59:ef:6e:34:d6:44:da:00:3d:84:f6:
c1:25:bc:71:cf:e1:1d:81:02:c4:df:bb:c1:81:c5:0e:95:31:
74:19:eb:ef:45:91:98:38:ea:c9:d2:cb:55:a5:f1:ed:75:a0:
c1:16:cd:95:8d:2d:fa:c1:d2:34:3c:e0:5c:9e:f3:7b:d8:8f:
be:85:13:82:00:1e:69:6f:c2:19:b8:cc:e2:fb:51:44:6f:f6:
c2:28:a5:aa:d1:ad:d5:74:0c:6a:f6:67:c4:4d:7f:fb:0f:0e:
37:47:31:c1:0a:2d:b2:62:e1:08:85:a5:79:d7:e9:50:70:e1:
55:fd:8d:a9:69:13:10:d6:da:50:d6:15:50:7a:42:6f:5f:c5:
60:eb:05:44:48:92:3e:10:ac:30:90:f3:4b:be:e8:1a:94:97:
d7:01:96:51:a2:b9:c7:2e:c6:97:63:ca:ba:02:ac:5c:96:72:
c2:88:79:ed:de:3b:f8:99:f4:da:fc:ab:61:b1:d9:38:5c:ed:
c2:0a:69:91:ee:0d:74:0a:d4:df:8e:26:9e:ce:67:2f:21:11:
4a:c7:d2:31:76:79:ab:9e:6e:5a:fc:08:79:5e:3a:03:f6:0f:
c8:d2:bc:3a:0a:ca:56:f7:78:f9:e2:39:0f:8f:a6:98:c4:c1:
30:c2:ca:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVFRDAxMTAvBgNVBAUTKENCRTEzMUEwODNBNDU2M0M3QzQzOURCMDc5QjY0QjZB
RDExMDFBN0MwHhcNMjYwOTIyMTk1MzUzWhcNMjYwOTI5MTk1MzUzWjAYMRYwFAYD
VQQDEw02YWIyZGNkMS0zOGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwR9CLrXMtOn9bqArJI6PVfYK/kBOXbM/Mlv1K/owG/uGFOrj+14qXOeGk53l
NyGVnn4lEHO/5K1tEmS/XPZw6ow1NdlO4+EeHLQChJvuK8GcomUG/mgOKxtiMmh8
Smu8zaV+oKw4jTLeawqwRu5Nv9jvEOuvtYKuxE3YZRVZnrcPW8+irMbp8KFSSF4b
pNFdtJR7BwrSbfjmMGlncQoKURRdsBjz7NCOoTwSPgAnVlftMxSxAJ/ZAs6j1roa
+Tn/UOV3kbqcfapmW3imwYfn5MhBSCO64hMeA6QvPDBb5O48/o3gPE9eATwGfFlm
bv1iWm+L2UYNWjmwemk8PLYj5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1a2eDp
mrc8gi1olSa4ep9YGqoKMB8GA1UdIwQYMBaAFMvhMaCDpFY8fEOdsHm2S2rREBp8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUVEMC82RUVCMTE1MEMy
QjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1ZqeDhRNTJ3ZWJaTGF0RVFH
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ktRXhvSU9rVmp4OFE1MndlYlpMYXRFUUdudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUVEMC82RUVCMTE1MEMyQjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1Zq
eDhRNTJ3ZWJaTGF0RVFHbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAry+LAYlYn1nvbjTWRNoAPYT2wSW8cc/hHYECxN+7wYHFDpUxdBnr70WRmDjq
ydLLVaXx7XWgwRbNlY0t+sHSNDzgXJ7ze9iPvoUTggAeaW/CGbjM4vtRRG/2wiil
qtGt1XQMavZnxE1/+w8ON0cxwQotsmLhCIWledfpUHDhVf2NqWkTENbaUNYVUHpC
b1/FYOsFREiSPhCsMJDzS77oGpSX1wGWUaK5xy7Gl2PKugKsXJZywoh57d47+Jn0
2vyrYbHZOFztwgppke4NdArU344mns5nLyERSsfSMXZ5q55uWvwIeV46A/YPyNK8
OgrKVvd4+eI5D4+mmMTBMMLKKw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:28:02 2026 by rpki-client