
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
File: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft (raw, json)
Hash identifier: AVMcWa8LqQzWmbE8FqKdJ9IsvlspyuhKLvPLftHRUz0=
Subject key identifier: F9:64:2C:F8:FA:2A:66:3C:F0:B9:1E:9A:60:E6:74:7E:74:52:E1:00
Authority key identifier: ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3
Certificate issuer: /CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
Certificate serial: 017B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
Manifest number: 0171
Signing time: Sun 27 Sep 2026 05:21:00 +0000
Manifest this update: Sun 27 Sep 2026 05:20:59 +0000
Manifest next update: Sun 04 Oct 2026 05:20:59 +0000
Files and hashes: 1: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl (hash: iI0u1O6WSrx5xrK6QjjBsItQyEdUk1Bm6N+QFe38gTE=)
2: 45D37CC28F8111EFB699FB63C4F9AE02.roa (hash: JwZ7pacGKBHVOcnwAfvD9FSN+qexZSqq2ZVTa+Xk0/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl
rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152787, serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
Validity
Not Before: Sep 27 05:20:59 2026 GMT
Not After : Oct 4 05:20:59 2026 GMT
Subject: CN=6ab8a7bc-e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:1c:bc:cb:10:09:6c:dd:f5:ab:ca:a6:67:
38:1b:b8:ca:be:19:c2:41:9a:7f:10:b8:e0:ba:2a:
3e:34:85:c5:89:cb:70:e3:6a:6c:c7:1b:8e:74:80:
f0:2a:a0:44:8c:c6:f1:15:d2:9e:af:44:1c:ff:d4:
21:24:8e:fe:5e:ba:6d:62:7b:ce:e9:45:69:a6:5e:
80:ba:50:5f:80:21:1e:37:6b:e5:a4:54:6a:ee:c6:
52:63:32:8e:82:26:15:55:a5:af:2f:67:64:c6:5a:
9b:23:5a:db:22:e0:df:5e:a2:41:e7:f2:01:5c:3f:
aa:0b:3e:99:54:1b:28:82:1b:01:67:a5:5d:c4:0d:
e6:9f:08:7d:32:2c:76:57:9c:2d:ea:5b:12:4a:0a:
71:14:ac:a8:25:15:9d:ee:e6:07:05:c2:fb:22:3c:
ca:59:b4:52:65:e5:b7:b4:0f:e1:d6:2f:93:10:c8:
c4:7d:e6:ed:2a:f4:0c:0e:78:3e:cd:7c:b1:af:85:
06:80:eb:ba:2c:b8:f1:cc:e5:15:ea:ee:5d:0e:1e:
ec:18:b6:50:5a:72:c5:0e:6b:4e:da:7d:48:13:25:
fa:c1:f4:bd:43:b6:de:de:51:3c:9f:98:e7:3f:de:
51:3a:2b:ed:0d:a2:b7:f8:aa:cc:fa:6e:43:66:49:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:64:2C:F8:FA:2A:66:3C:F0:B9:1E:9A:60:E6:74:7E:74:52:E1:00
X509v3 Authority Key Identifier:
keyid:ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:cd:b9:1b:bb:8d:f4:1b:36:2c:48:74:23:c7:a5:53:3b:db:
9b:4d:bb:5e:c9:49:10:6d:48:0a:fe:3d:a7:95:bd:c3:84:9c:
bd:2d:ff:cd:41:8f:54:87:d6:1b:91:6e:13:38:d0:f2:74:d0:
52:56:0d:ff:69:1d:ed:cc:3e:9b:8c:d1:b8:82:e6:d1:5b:e2:
a1:81:21:46:0e:71:67:cc:e4:ce:30:8e:1a:d1:8b:3c:35:5a:
6b:e6:12:32:5c:c1:ec:7c:25:ee:3f:0b:6d:a1:67:42:70:4d:
16:aa:f9:26:b1:fc:54:54:51:bf:ed:57:3b:c2:c8:38:13:fb:
2f:ae:a0:31:61:ae:3e:78:e5:a1:75:e5:12:29:40:b0:8b:a7:
05:82:8c:7a:89:fd:64:17:ed:a3:25:5b:6b:18:4b:f2:de:92:
0e:2f:ca:d9:6c:50:2f:4a:a1:dd:71:38:86:62:07:da:e8:45:
a4:f7:10:07:9c:06:08:98:cc:3b:bc:3d:0b:2b:62:96:84:5b:
16:ce:1c:b3:52:c2:e5:c2:77:a5:6f:55:7b:86:59:2c:cc:aa:
7e:4a:19:fb:c6:9b:44:37:23:e5:64:e2:03:4b:f1:ba:af:4f:
3c:2c:c1:fe:33:15:26:09:80:e2:61:d1:67:79:02:f0:6a:aa:
39:20:34:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI3ODcxMTAvBgNVBAUTKEVEODJBMkZEN0RFMTQ3NTI3Q0ZDQzQyNDdBMjU2QzFB
MEVEQjRFRDMwHhcNMjYwOTI3MDUyMDU5WhcNMjYxMDA0MDUyMDU5WjAYMRYwFAYD
VQQDEw02YWI4YTdiYy1lMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4xQcvMsQCWzd9avKpmc4G7jKvhnCQZp/ELjguio+NIXFictw42psxxuOdIDw
KqBEjMbxFdKer0Qc/9QhJI7+XrptYnvO6UVppl6AulBfgCEeN2vlpFRq7sZSYzKO
giYVVaWvL2dkxlqbI1rbIuDfXqJB5/IBXD+qCz6ZVBsoghsBZ6VdxA3mnwh9Mix2
V5wt6lsSSgpxFKyoJRWd7uYHBcL7IjzKWbRSZeW3tA/h1i+TEMjEfebtKvQMDng+
zXyxr4UGgOu6LLjxzOUV6u5dDh7sGLZQWnLFDmtO2n1IEyX6wfS9Q7be3lE8n5jn
P95ROivtDaK3+KrM+m5DZklJTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlkLPj6
KmY88LkemmDmdH50UuEAMB8GA1UdIwQYMBaAFO2Cov194UdSfPzEJHolbBoO207T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mjc4Ny8yQjFDNDdGRThG
NzkxMUVGOTJBQzc4MUVDNEY5QUUwMi83WUtpX1gzaFIxSjhfTVFrZWlWc0dnN2JU
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdZS2lfWDNoUjFKOF9NUWtlaVZzR2c3YlR0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Mjc4Ny8yQjFDNDdGRThGNzkxMUVGOTJBQzc4MUVDNEY5QUUwMi83WUtpX1gzaFIx
SjhfTVFrZWlWc0dnN2JUdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmc25G7uN9Bs2LEh0I8elUzvbm027XslJEG1ICv49p5W9w4ScvS3/zUGPVIfW
G5FuEzjQ8nTQUlYN/2kd7cw+m4zRuILm0VvioYEhRg5xZ8zkzjCOGtGLPDVaa+YS
MlzB7Hwl7j8LbaFnQnBNFqr5JrH8VFRRv+1XO8LIOBP7L66gMWGuPnjloXXlEilA
sIunBYKMeon9ZBftoyVbaxhL8t6SDi/K2WxQL0qh3XE4hmIH2uhFpPcQB5wGCJjM
O7w9CytiloRbFs4cs1LC5cJ3pW9Ve4ZZLMyqfkoZ+8abRDcj5WTiA0vxuq9PPCzB
/jMVJgmA4mHRZ3kC8GqqOSA0YA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:11:42 2026 by rpki-client