
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
File: yTQ499zhrbP_4OWIU2-que__79c.mft (raw, json)
Hash identifier: +OuQe3Xqbt2qyWhMQQG9AtxHR9SfOgXvwXDkAhfGHjM=
Subject key identifier: 28:CA:BB:AF:DA:88:F0:36:CC:1D:63:44:AC:39:EA:70:7D:DF:8E:7F
Authority key identifier: C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
Certificate issuer: /CN=A915B2EC/serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
Manifest number: 0644
Signing time: Tue 22 Sep 2026 22:46:58 +0000
Manifest this update: Tue 22 Sep 2026 22:46:57 +0000
Manifest next update: Tue 29 Sep 2026 22:46:57 +0000
Files and hashes: 1: yTQ499zhrbP_4OWIU2-que__79c.crl (hash: s9aVdfMnlh4UvikXhdPy2eJc4rf/25NmvIdnyF9ei9w=)
2: 6D1560E01C6411F1B68A335785EE528E.roa (hash: BYU5FIyktvv26Nz2Rm1eQhqdMYLLaex730hzv42dZLo=)
3: 6D98D7C21C6411F1B68A335785EE528E.roa (hash: p7GvvvhnBiIlq2AFY9FalMi/aIDVDUbfZqCsTS3w2ms=)
4: 6B7B69D21C6411F1B68A335785EE528E.roa (hash: t3WJZ+TqxO9rAjYRJ0g09t3brgTmkG4d6oU027EJ4NU=)
5: 6C8E6D381C6411F1B68A335785EE528E.roa (hash: PHiN9WhM1Yjs+fJf4ch6Xa0wX5cn9N5EasUrbY9oPEs=)
6: 6C0CA7EE1C6411F1B68A335785EE528E.roa (hash: U+LavfCdJdFhu3KM3IjuquJhxlvTznrSauq2yP2RdA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B2EC, serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Validity
Not Before: Sep 22 22:46:57 2026 GMT
Not After : Sep 29 22:46:57 2026 GMT
Subject: CN=6ab30562-86bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:3b:b8:ee:39:ef:02:39:06:8b:95:f4:f7:
99:54:09:8e:53:63:32:4c:36:68:81:6e:4e:2d:6c:
a3:be:e2:af:19:81:5d:92:ee:92:36:5d:4d:b8:4f:
3f:25:9a:db:e1:9a:a1:de:74:fd:bc:d7:ae:69:49:
08:4c:84:b2:1c:a6:37:04:6d:30:f7:22:d4:2d:b2:
a2:de:b0:9b:4a:2f:72:ae:d3:88:bb:34:b8:36:a6:
d9:7f:68:d1:11:e9:4c:f7:cc:1e:26:b4:f1:a8:fb:
ab:26:00:ce:e2:e3:06:f9:43:94:d3:de:f5:bb:a3:
5f:a1:89:ec:72:ed:5b:47:20:39:db:bd:4a:4a:82:
18:ac:23:f3:0b:76:b5:78:02:2e:3f:bb:f6:d5:5c:
21:ba:33:69:0c:c3:83:d6:de:6a:33:fd:bd:99:dc:
cb:8a:10:b9:5f:7e:58:46:b4:79:82:68:3e:5b:bd:
6c:77:76:a0:93:23:a4:68:f6:bb:d3:ea:a2:ac:80:
76:f4:ca:03:1b:dc:c1:33:33:e5:27:13:a0:4f:ad:
5d:48:62:6c:b4:ed:91:ff:37:ad:fb:6e:65:5a:79:
ce:7d:83:d1:54:7b:cc:cb:5a:3f:4a:85:f0:92:70:
87:09:fd:28:76:f7:8f:11:89:49:47:67:0f:3b:89:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:BB:AF:DA:88:F0:36:CC:1D:63:44:AC:39:EA:70:7D:DF:8E:7F
X509v3 Authority Key Identifier:
keyid:C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:59:22:d4:53:7d:01:96:9d:aa:4a:49:fa:60:c0:56:d0:8b:
17:2c:9f:bf:c9:67:8d:ab:7d:4d:84:77:49:c8:26:c9:d0:4f:
c1:cc:46:14:3a:fd:95:c6:91:fb:89:5f:6c:c1:8b:d2:48:17:
58:df:39:a0:b4:b5:88:da:e6:e9:10:42:76:d1:76:a5:73:e2:
5d:c4:3a:4b:a7:3e:fd:db:81:9f:88:0a:0d:d5:10:ec:5a:0b:
f3:2e:ab:7e:7c:a2:b8:3b:cb:e7:c8:e6:05:a4:d9:b5:f7:33:
eb:b5:f6:65:91:e9:3a:48:4e:83:7e:d0:71:ef:09:a7:d0:9d:
25:a4:11:ab:33:40:46:3e:71:3d:06:1b:33:6f:c4:5c:c1:55:
f1:87:8c:20:f0:74:c0:4a:62:64:a2:d9:d1:fb:8b:3e:c5:ad:
c9:d8:40:61:7a:cd:b0:6c:21:50:43:a7:76:fc:77:60:b8:77:
ff:28:8a:a2:b6:1e:ff:18:f2:d3:99:2f:28:11:ca:24:8f:32:
f0:b3:73:88:54:33:9e:b2:af:38:6b:2c:8c:2e:15:cd:44:63:
c0:b6:90:c2:7e:e6:ae:b6:9a:e8:ca:ad:c7:ec:d0:9d:96:77:
b3:05:39:9d:c5:5d:db:f5:40:35:c2:2e:90:54:09:e6:f0:45:
39:d9:fc:22
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QjJFQzExMC8GA1UEBRMoQzkzNDM4RjdEQ0UxQURCM0ZGRTBFNTg4NTM2RkFBQjlF
RkZGRUZENzAeFw0yNjA5MjIyMjQ2NTdaFw0yNjA5MjkyMjQ2NTdaMBgxFjAUBgNV
BAMTDTZhYjMwNTYyLTg2YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfVzu47jnvAjkGi5X095lUCY5TYzJMNmiBbk4tbKO+4q8ZgV2S7pI2XU24Tz8l
mtvhmqHedP28165pSQhMhLIcpjcEbTD3ItQtsqLesJtKL3Ku04i7NLg2ptl/aNER
6Uz3zB4mtPGo+6smAM7i4wb5Q5TT3vW7o1+hiexy7VtHIDnbvUpKghisI/MLdrV4
Ai4/u/bVXCG6M2kMw4PW3moz/b2Z3MuKELlfflhGtHmCaD5bvWx3dqCTI6Ro9rvT
6qKsgHb0ygMb3MEzM+UnE6BPrV1IYmy07ZH/N637bmVaec59g9FUe8zLWj9KhfCS
cIcJ/Sh2948RiUlHZw87iTz9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKMq7r9qI
8DbMHWNErDnqcH3fjn8wHwYDVR0jBBgwFoAUyTQ499zhrbP/4OWIU2+que//79cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMkVDLzg0Mjc1OTU2MkIw
OTExRUM4NTFCOTgwRUM0RjlBRTAyL3lUUTQ5OXpocmJQXzRPV0lVMi1xdWVfXzc5
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveVRRNDk5emhyYlBfNE9XSVUyLXF1ZV9fNzljLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC
MkVDLzg0Mjc1OTU2MkIwOTExRUM4NTFCOTgwRUM0RjlBRTAyL3lUUTQ5OXpocmJQ
XzRPV0lVMi1xdWVfXzc5Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAgWSLUU30Blp2qSkn6YMBW0IsXLJ+/yWeNq31NhHdJyCbJ0E/BzEYUOv2VxpH7
iV9swYvSSBdY3zmgtLWI2ubpEEJ20Xalc+JdxDpLpz7924GfiAoN1RDsWgvzLqt+
fKK4O8vnyOYFpNm19zPrtfZlkek6SE6DftBx7wmn0J0lpBGrM0BGPnE9Bhszb8Rc
wVXxh4wg8HTASmJkotnR+4s+xa3J2EBhes2wbCFQQ6d2/HdguHf/KIqith7/GPLT
mS8oEcokjzLws3OIVDOesq84ayyMLhXNRGPAtpDCfuautproyq3H7NCdlnezBTmd
xV3b9UA1wi6QVAnm8EU52fwi
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:27:12 2026 by rpki-client