
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json)
Hash identifier: C/Q4oH5acZ1AtaG35fSGu8Sow3ldALrlBq7hhQVDgQ0=
Subject key identifier: B2:99:09:68:75:BD:0A:1F:61:5B:B5:6D:61:00:85:9B:B2:A7:05:DC
Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97
Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
Manifest number: 0278
Signing time: Sun 11 Oct 2026 02:31:10 +0000
Manifest this update: Sun 11 Oct 2026 02:31:09 +0000
Manifest next update: Sun 18 Oct 2026 02:31:09 +0000
Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: NeXcx9jq23nYVpOiIFEsNa9D6g8RnRBHOhvDGuSB45c=)
2: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: 1E6dEPIoMSwpwPKFPaitFfgKeB/UCjvPX24bGC045Y4=)
3: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: PWf4oMvr+PNTHRxrV3/i7vJtMPICCfeeIHaNdzjX+vU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl
rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
Validity
Not Before: Oct 11 02:31:09 2026 GMT
Not After : Oct 18 02:31:09 2026 GMT
Subject: CN=6acaf4ee-44e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:42:c5:8f:6f:9f:c8:3a:14:2b:be:b1:da:
21:1e:96:a2:65:b9:e1:3a:3b:40:85:13:73:18:76:
e5:f8:6a:e7:16:5a:61:b9:2d:c5:09:81:01:91:dd:
e3:3b:c6:c4:a3:1a:0e:68:ab:09:59:71:51:0c:97:
67:2f:35:46:72:ff:25:a1:5f:ff:8e:b7:13:20:9b:
e4:3d:1b:b5:fe:a2:20:25:f6:d1:43:d3:58:97:2e:
66:5a:94:92:86:4b:d2:45:78:5b:d6:a6:48:02:cb:
75:82:2f:76:78:c1:ef:d5:91:5e:97:dc:1a:06:e9:
72:d7:bd:af:90:22:93:cc:53:07:89:8b:3b:15:14:
1b:9f:c1:8b:c0:be:b0:8c:0d:6f:65:d4:9f:9a:09:
fb:72:22:f1:64:26:ed:6e:6c:d7:40:5e:67:42:6e:
ff:0c:f9:64:9b:61:a5:74:ae:33:ad:d9:9e:d5:30:
8f:1a:41:86:19:e5:a8:ed:04:ad:01:fd:ad:93:af:
4e:59:12:ef:81:48:ec:84:b9:60:d3:6b:0b:ac:cc:
31:80:bb:f0:3a:a3:c8:dc:54:ee:3b:30:86:78:6a:
57:6a:4b:a3:b5:3b:9e:03:0c:fd:ce:30:c1:39:73:
d7:85:9f:d5:83:9f:d9:9c:89:af:dd:e3:3c:43:91:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:99:09:68:75:BD:0A:1F:61:5B:B5:6D:61:00:85:9B:B2:A7:05:DC
X509v3 Authority Key Identifier:
keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:70:ff:fd:0d:5f:8a:a7:90:95:db:59:f0:6c:be:6f:31:b3:
10:2b:80:c8:18:ff:43:92:31:6a:33:c7:5b:e8:87:b8:16:00:
2c:16:e9:c2:42:4e:77:53:3a:91:4b:53:36:52:ed:23:ca:f4:
9b:15:3d:cf:af:1e:cb:9a:af:82:5a:3e:7e:9c:80:ac:23:bb:
ad:92:1d:3a:24:f8:53:2c:62:5f:8c:54:b5:bc:a5:ec:9b:62:
3c:d0:57:40:e0:cb:30:da:14:a2:7b:67:f8:74:e0:59:a8:74:
ef:4a:c4:fe:94:b4:20:e4:18:b4:f0:c4:85:78:a6:fa:ae:e7:
9d:a2:aa:b2:a4:ce:0d:4b:f9:af:e1:89:25:15:f1:a2:69:9e:
7f:89:15:93:e9:78:18:4f:59:18:ac:18:4e:e4:c0:f0:5a:25:
09:83:ec:7f:79:74:ba:07:00:d4:6d:4b:17:8b:37:cc:e6:1b:
f3:6f:e4:6c:ab:d0:51:bc:d7:ca:d5:46:2a:b8:f6:4e:45:de:
06:be:5b:c6:18:bc:cd:55:97:e6:e8:3b:6d:84:57:4d:16:c5:
9f:d8:f4:85:3b:21:63:bf:e2:a3:e0:04:f9:dd:20:7e:b4:fa:
75:a5:12:c7:a7:4e:b1:52:67:20:45:3c:84:a9:7c:7c:58:f2:
db:f7:89:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE
MUVCMDM1OTcwHhcNMjYxMDExMDIzMTA5WhcNMjYxMDE4MDIzMTA5WjAYMRYwFAYD
VQQDEw02YWNhZjRlZS00NGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw8FCxY9vn8g6FCu+sdohHpaiZbnhOjtAhRNzGHbl+GrnFlphuS3FCYEBkd3j
O8bEoxoOaKsJWXFRDJdnLzVGcv8loV//jrcTIJvkPRu1/qIgJfbRQ9NYly5mWpSS
hkvSRXhb1qZIAst1gi92eMHv1ZFel9waBuly172vkCKTzFMHiYs7FRQbn8GLwL6w
jA1vZdSfmgn7ciLxZCbtbmzXQF5nQm7/DPlkm2GldK4zrdme1TCPGkGGGeWo7QSt
Af2tk69OWRLvgUjshLlg02sLrMwxgLvwOqPI3FTuOzCGeGpXakujtTueAwz9zjDB
OXPXhZ/Vg5/ZnImv3eM8Q5Er2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKZCWh1
vQofYVu1bWEAhZuypwXcMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG
ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO
WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx
TEQ0cTF0OUF1TlRSNndOWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACXD//Q1fiqeQldtZ8Gy+bzGzECuAyBj/Q5IxajPHW+iHuBYALBbpwkJOd1M6
kUtTNlLtI8r0mxU9z68ey5qvglo+fpyArCO7rZIdOiT4UyxiX4xUtbyl7JtiPNBX
QODLMNoUontn+HTgWah070rE/pS0IOQYtPDEhXim+q7nnaKqsqTODUv5r+GJJRXx
ommef4kVk+l4GE9ZGKwYTuTA8FolCYPsf3l0ugcA1G1LF4s3zOYb82/kbKvQUbzX
ytVGKrj2TkXeBr5bxhi8zVWX5ug7bYRXTRbFn9j0hTshY7/io+AE+d0gfrT6daUS
x6dOsVJnIEU8hKl8fFjy2/eJog==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:46:39 2026 by rpki-client