
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json)
Hash identifier: 9/cfO4NPsq7IoV7yNlzcnT6KXphlXpp9ouzu1Nx00JE=
Subject key identifier: FD:9E:DA:73:75:B1:68:C5:73:07:90:F9:4C:60:5C:AB:29:D0:11:CD
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 03A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
Manifest number: 0376
Signing time: Sun 27 Sep 2026 00:59:14 +0000
Manifest this update: Sun 27 Sep 2026 00:59:13 +0000
Manifest next update: Sun 04 Oct 2026 00:59:13 +0000
Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: ivkuCzBe+kLxts1rl5xECOXStabBWRCXI4XAKTl+GMM=)
2: 35AB985C68B511F18E116D7B7F47A888.roa (hash: zJzm+IxndwR1rSvg7Wy91Pwrmnj3T3uEe3l4l9/HMCw=)
3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: UazZSGRsaobkFh+uwdDtJ065Ep6bEbys8yH2m9dsJpw=)
4: 69046BD0ECFE11F0B05C9076386F56BC.roa (hash: YCe2AE1AYEPbcU1s9LwUlVk97WjIwXee65C9XOQSVi0=)
5: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: U6gY9KKT7NSCpx8jpV/iJKW5bvGforRTQeZvJLFkBWs=)
6: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ayI2v9zEaoadhkrRa+ZcLsyQwGLPommiSdSXuXbqNDA=)
7: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: PPilQKcKXmCzfDra94ptz+UOBe/ruKL5vBBrgys75yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930 (0x3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Sep 27 00:59:13 2026 GMT
Not After : Oct 4 00:59:13 2026 GMT
Subject: CN=6ab86a61-3c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:74:c9:75:47:4a:c7:a8:a3:ff:e5:e0:41:
8f:d2:2a:5c:23:53:1b:a8:cb:37:4a:7f:b1:3c:29:
38:46:0d:53:04:6e:39:24:39:da:36:88:eb:d9:c0:
de:72:cd:32:8b:7a:70:18:8b:39:3d:34:23:df:50:
19:ed:4f:6f:d0:58:d5:89:62:af:e1:e8:60:b2:f2:
15:f4:59:9e:8c:c3:82:0e:ec:a6:8c:cd:be:9a:18:
c7:22:07:d3:29:5f:c6:09:b8:ad:c1:db:38:04:f7:
f0:fc:5f:97:ee:c0:4f:bb:13:71:96:ef:54:7d:96:
d2:25:05:ef:29:eb:05:89:90:21:95:ab:af:ea:d9:
0f:4a:13:a1:2a:cd:b1:8e:e5:a7:81:39:f7:c2:72:
16:33:bf:83:e1:55:21:be:6b:e9:2f:a1:20:5b:27:
be:8c:cd:b2:a8:05:b8:e9:fb:ae:81:68:02:aa:4f:
be:51:0a:79:99:df:54:af:26:60:85:47:f6:78:92:
c4:d2:64:84:ae:05:cb:42:9c:1e:7a:81:79:a1:16:
c4:3b:22:44:18:78:1f:30:15:0b:5c:0a:7a:cb:f0:
0f:66:a4:97:76:f2:76:2c:23:31:12:7a:6f:34:84:
39:2a:70:4f:2a:b9:9d:f9:24:cf:bb:03:a9:c1:f3:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:DA:73:75:B1:68:C5:73:07:90:F9:4C:60:5C:AB:29:D0:11:CD
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:05:3f:e6:0b:6d:2a:7d:27:2a:3e:96:c6:5e:16:da:74:f0:
d1:32:c8:e5:b8:e5:c3:1f:95:98:cb:8f:e0:d3:05:53:63:78:
43:cd:01:9b:31:c3:cd:b9:f9:d1:b2:20:c2:b3:5c:3c:e1:62:
59:ac:08:04:1b:40:9a:52:5f:60:2a:c6:92:d5:66:ea:4f:a1:
c3:ae:da:99:b2:e2:c4:25:60:d5:cd:32:4e:ec:fa:79:18:26:
b2:43:38:ae:27:f1:bc:65:f7:6d:34:94:1f:9a:68:1e:76:ed:
3f:c3:6c:3e:aa:a8:94:84:11:99:23:a0:5f:a2:ae:b0:94:a5:
21:4b:9a:a1:1c:7f:ff:b3:38:f3:eb:e8:12:ca:7d:34:d0:ba:
a7:09:4b:49:ae:92:cd:f8:53:c5:d1:fe:72:39:48:e9:83:3d:
ba:34:36:01:c9:d1:b7:91:31:67:1d:2a:da:89:19:b5:dc:3b:
93:cf:b4:68:15:b6:60:c8:d6:ab:2d:32:c2:cc:ad:39:54:2f:
ed:39:73:a7:74:73:93:7a:d8:79:7e:80:94:13:22:3b:4d:1e:
52:c1:95:b3:18:26:d3:18:54:6e:a0:f2:e3:8b:f2:22:38:53:
17:98:1a:b4:d1:59:bd:98:4d:5a:d6:4b:c6:f1:16:4f:b1:20:
77:16:b4:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG
MkU0MDkyQjQwHhcNMjYwOTI3MDA1OTEzWhcNMjYxMDA0MDA1OTEzWjAYMRYwFAYD
VQQDEw02YWI4NmE2MS0zYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkKJ0yXVHSseoo//l4EGP0ipcI1MbqMs3Sn+xPCk4Rg1TBG45JDnaNojr2cDe
cs0yi3pwGIs5PTQj31AZ7U9v0FjViWKv4ehgsvIV9FmejMOCDuymjM2+mhjHIgfT
KV/GCbitwds4BPfw/F+X7sBPuxNxlu9UfZbSJQXvKesFiZAhlauv6tkPShOhKs2x
juWngTn3wnIWM7+D4VUhvmvpL6EgWye+jM2yqAW46fuugWgCqk++UQp5md9UryZg
hUf2eJLE0mSErgXLQpweeoF5oRbEOyJEGHgfMBULXAp6y/APZqSXdvJ2LCMxEnpv
NIQ5KnBPKrmd+STPuwOpwfMiUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2e2nN1
sWjFcweQ+UxgXKsp0BHNMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4
NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr
clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6
YTFPWTdnbVhjcGJ5NUFrclEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVgU/5gttKn0nKj6Wxl4W2nTw0TLI5bjlwx+VmMuP4NMFU2N4Q80BmzHDzbn5
0bIgwrNcPOFiWawIBBtAmlJfYCrGktVm6k+hw67ambLixCVg1c0yTuz6eRgmskM4
rifxvGX3bTSUH5poHnbtP8NsPqqolIQRmSOgX6KusJSlIUuaoRx//7M48+voEsp9
NNC6pwlLSa6SzfhTxdH+cjlI6YM9ujQ2AcnRt5ExZx0q2okZtdw7k8+0aBW2YMjW
qy0ywsytOVQv7Tlzp3Rzk3rYeX6AlBMiO00eUsGVsxgm0xhUbqDy44vyIjhTF5ga
tNFZvZhNWtZLxvEWT7Egdxa0tg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:15:59 2026 by rpki-client