
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier: UKccftjlugrwz60b21QmYMfbw9ml19m1PuaZJYO6F2I=
Subject key identifier: C9:E7:60:92:A4:8B:24:A0:6C:E4:57:AD:7A:FA:B2:20:06:AE:BD:D6
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number: 01FC
Signing time: Wed 25 Mar 2026 02:51:33 +0000
Manifest this update: Wed 25 Mar 2026 02:51:33 +0000
Manifest next update: Wed 01 Apr 2026 02:51:33 +0000
Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: SJl+Ax2hDwCEIU2xjhlHWhWmwXKqkVcgYvIT8aaHMfk=)
2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: cgC2ydMTGIHogqUutqNvoyHdmfwEliEqE+1X5oBYTDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Validity
Not Before: Mar 25 02:51:33 2026 GMT
Not After : Apr 1 02:51:33 2026 GMT
Subject: CN=69c34db5-5191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:d9:24:17:a4:52:b6:19:32:3b:7f:0a:75:
a9:71:48:ab:00:17:cb:b0:39:a2:c1:40:5c:d7:cb:
13:44:22:80:3b:95:2a:97:0a:d0:4f:78:ee:4a:3b:
a1:a3:7e:06:59:74:b3:46:5e:a8:90:0a:c3:21:91:
54:dd:14:b0:5d:45:bf:09:8f:4b:3f:52:5c:af:c3:
b4:28:f3:43:48:c1:af:37:dc:dd:17:04:8d:93:1c:
ab:b4:7a:57:c0:90:82:81:76:bc:4e:55:24:33:87:
14:26:fe:9e:ed:8f:28:ee:88:df:f2:9c:c4:b1:65:
a7:79:b4:d8:8d:49:67:18:ee:49:b2:4e:82:e2:a6:
55:9f:21:e7:1a:dc:73:1d:f5:a0:06:0f:5c:72:ab:
4e:9a:cd:ab:38:f8:9e:c4:f1:a4:67:a1:ed:44:71:
74:36:44:42:1f:7a:6d:9e:9f:96:2d:c7:e8:cd:3a:
70:c3:df:b1:83:bf:16:3a:36:e7:22:ca:fc:c5:33:
b9:52:4b:66:a0:99:a8:e9:1b:cc:21:04:3c:b3:2d:
4f:2f:0d:b2:b3:88:6a:3c:67:94:fd:19:0d:79:3b:
7c:c0:f6:16:09:8e:0d:fa:e0:61:47:53:02:6a:3d:
4d:d7:ef:0d:85:ba:1c:bd:82:04:bd:36:ce:50:83:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E7:60:92:A4:8B:24:A0:6C:E4:57:AD:7A:FA:B2:20:06:AE:BD:D6
X509v3 Authority Key Identifier:
keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:05:f7:62:6a:b9:a0:7c:44:b4:82:45:0b:5b:2b:3c:3d:16:
ec:6b:90:cb:71:9d:37:f6:52:71:4b:29:46:7a:21:bc:82:97:
2c:36:cf:83:05:44:7e:1e:8e:41:0e:05:a0:ec:d3:c0:73:4e:
29:5e:e6:6c:c3:af:0d:03:25:59:bd:72:6f:6c:db:13:9a:2b:
9a:bd:a1:21:4e:31:b1:3e:34:62:23:bf:33:6e:8f:18:0d:28:
69:69:92:30:db:d3:33:3a:af:d5:b5:4e:54:3a:db:21:50:85:
22:49:7d:1b:fa:71:4b:9f:bf:fe:26:2b:f4:43:fd:97:a3:59:
82:40:f9:f1:2c:08:87:7c:b5:47:ba:d2:68:17:8d:00:19:03:
2c:7b:2d:27:e2:1a:79:15:cf:85:3f:dd:d9:90:7e:a3:0f:0b:
78:65:b8:33:61:7a:b5:bc:38:c5:fb:90:84:06:f2:a5:ff:7f:
52:ea:7c:41:65:ee:ee:9a:a8:2f:86:32:eb:7e:22:2a:0d:17:
e1:f4:75:e6:35:5d:4c:10:0a:1b:01:e5:3f:32:ad:be:10:73:
da:09:0a:23:89:9d:0e:8c:8d:94:18:93:99:a7:39:76:d1:26:
78:d0:9a:61:41:86:a6:41:d6:0b:69:8c:3d:57:f2:32:26:e1:
21:f5:2a:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2
RDY3NzU4MDkwHhcNMjYwMzI1MDI1MTMzWhcNMjYwNDAxMDI1MTMzWjAYMRYwFAYD
VQQDEw02OWMzNGRiNS01MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs8HZJBekUrYZMjt/CnWpcUirABfLsDmiwUBc18sTRCKAO5UqlwrQT3juSjuh
o34GWXSzRl6okArDIZFU3RSwXUW/CY9LP1Jcr8O0KPNDSMGvN9zdFwSNkxyrtHpX
wJCCgXa8TlUkM4cUJv6e7Y8o7ojf8pzEsWWnebTYjUlnGO5Jsk6C4qZVnyHnGtxz
HfWgBg9ccqtOms2rOPiexPGkZ6HtRHF0NkRCH3ptnp+WLcfozTpww9+xg78WOjbn
Isr8xTO5UktmoJmo6RvMIQQ8sy1PLw2ys4hqPGeU/RkNeTt8wPYWCY4N+uBhR1MC
aj1N1+8NhbocvYIEvTbOUIOkUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnnYJKk
iySgbORXrXr6siAGrr3WMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3
NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX
Nk9zVS1WUHExanR0WjNXQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArgX3Ymq5oHxEtIJFC1srPD0W7GuQy3GdN/ZScUspRnohvIKXLDbPgwVEfh6O
QQ4FoOzTwHNOKV7mbMOvDQMlWb1yb2zbE5ormr2hIU4xsT40YiO/M26PGA0oaWmS
MNvTMzqv1bVOVDrbIVCFIkl9G/pxS5+//iYr9EP9l6NZgkD58SwIh3y1R7rSaBeN
ABkDLHstJ+IaeRXPhT/d2ZB+ow8LeGW4M2F6tbw4xfuQhAbypf9/Uup8QWXu7pqo
L4Yy634iKg0X4fR15jVdTBAKGwHlPzKtvhBz2gkKI4mdDoyNlBiTmac5dtEmeNCa
YUGGpkHWC2mMPVfyMibhIfUqmg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:55 2026 by rpki-client