
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
File: y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json)
Hash identifier: T+CZk8ajDurZMoB/YrwnC2qX79VXlD7TgQ30XrYFTY8=
Subject key identifier: 9D:8A:64:35:CF:F5:C5:AC:52:90:4B:7A:BD:83:5A:9C:95:01:53:BF
Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E
Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
Manifest number: 0210
Signing time: Fri 25 Sep 2026 03:10:25 +0000
Manifest this update: Fri 25 Sep 2026 03:10:24 +0000
Manifest next update: Fri 02 Oct 2026 03:10:24 +0000
Files and hashes: 1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: cNX+QLkfwAdJQ1izKYPKRVLP6Kw1ThBtA+MrkAE/jGA=)
2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: FyXf2fobeEelKCn2zXCHN98VT8DDXKJKgs0rdLSjTBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl
rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE01, serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
Validity
Not Before: Sep 25 03:10:24 2026 GMT
Not After : Oct 2 03:10:24 2026 GMT
Subject: CN=6ab5e621-c3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:c8:85:7a:a7:05:88:2f:f4:4b:30:ab:f9:
6b:37:29:49:5d:39:18:4c:9c:d1:7a:fe:c9:a8:b5:
5c:87:b6:42:81:c4:d5:a2:3b:85:43:26:21:0e:39:
f8:92:32:54:c4:7d:d9:49:b7:0b:9b:ef:35:02:2e:
c5:fd:32:cf:78:70:1f:da:ef:54:4b:61:75:7a:b2:
90:fb:9f:7b:ad:ac:67:00:2d:21:01:01:b5:bb:4a:
0f:ac:42:d1:35:53:97:a2:11:4c:42:f5:eb:2c:38:
f4:48:b1:b0:49:8d:28:4b:20:a9:39:74:78:46:74:
52:86:64:fa:2b:af:ef:12:e0:ed:42:c5:6a:1f:57:
ac:3e:c9:0f:8a:84:8d:20:77:31:41:f3:0a:c8:83:
50:97:a6:85:93:18:84:4f:d5:9d:65:19:5d:24:51:
5c:6a:20:75:c5:0c:2e:55:28:9b:3e:55:2c:08:ed:
ea:ca:4e:cc:6b:fa:68:b8:2c:2e:05:c9:e8:26:fb:
e2:e7:58:a0:22:c7:85:42:c1:e5:80:14:57:cf:01:
88:2b:93:3e:f1:c2:65:c5:b7:b0:16:06:ad:b1:c4:
ef:1d:5c:e3:1b:b9:f9:3e:08:91:61:e5:e5:2d:cb:
72:c0:26:1b:31:88:fa:e1:51:54:32:0c:10:38:86:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8A:64:35:CF:F5:C5:AC:52:90:4B:7A:BD:83:5A:9C:95:01:53:BF
X509v3 Authority Key Identifier:
keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:06:6a:f6:14:e2:68:e6:c9:45:48:22:e7:e5:7d:a5:3e:6f:
02:a3:1a:cd:ff:16:ab:1d:18:67:f1:4a:04:41:6b:3e:bb:d5:
85:51:90:70:4e:3f:46:94:a3:2a:cf:83:65:c3:bd:6f:25:82:
0f:16:de:21:6f:44:c7:5e:73:f8:1e:17:10:b2:d6:d0:b4:54:
05:c1:95:e3:b5:08:b5:1d:13:f1:a0:54:9f:bd:11:f4:ef:2a:
86:49:3d:4b:59:0c:39:2c:c7:eb:06:61:33:e9:5a:a2:01:a6:
40:c9:d2:4e:e6:13:a3:00:fb:76:5e:99:79:53:7e:c1:c1:b4:
52:ba:c9:3b:25:e3:fc:fc:b8:4b:63:c6:75:37:64:94:1c:ad:
22:d2:5e:68:b5:e9:48:09:3c:13:d1:03:5c:0c:54:2e:d1:f1:
30:92:1f:7a:a5:c8:7b:7f:bf:2a:57:59:1f:6e:6d:88:7c:b8:
67:9c:b9:50:f4:3c:d8:48:6e:b3:f2:25:c4:96:6f:04:d5:f5:
d8:d9:d5:e4:e6:17:fd:8a:1d:b5:89:c7:40:35:41:62:91:eb:
ea:b1:a8:91:53:86:71:e2:fc:f5:4c:2c:ca:14:be:14:2a:07:
66:0f:1c:32:37:3a:f8:c0:43:93:a9:c4:c6:19:56:79:56:f1:
b9:a6:bd:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZFMDExMTAvBgNVBAUTKENCN0U4RTU0Qzg3RTAxQ0U4Njc5Q0ZFNTUwRjFGRTlC
MjM2MTA4M0UwHhcNMjYwOTI1MDMxMDI0WhcNMjYxMDAyMDMxMDI0WjAYMRYwFAYD
VQQDEw02YWI1ZTYyMS1jM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbnIhXqnBYgv9Eswq/lrNylJXTkYTJzRev7JqLVch7ZCgcTVojuFQyYhDjn4
kjJUxH3ZSbcLm+81Ai7F/TLPeHAf2u9US2F1erKQ+597raxnAC0hAQG1u0oPrELR
NVOXohFMQvXrLDj0SLGwSY0oSyCpOXR4RnRShmT6K6/vEuDtQsVqH1esPskPioSN
IHcxQfMKyINQl6aFkxiET9WdZRldJFFcaiB1xQwuVSibPlUsCO3qyk7Ma/pouCwu
BcnoJvvi51igIseFQsHlgBRXzwGIK5M+8cJlxbewFgatscTvHVzjG7n5PgiRYeXl
LctywCYbMYj64VFUMgwQOIb/nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2KZDXP
9cWsUpBLer2DWpyVAVO/MB8GA1UdIwQYMBaAFMt+jlTIfgHOhnnP5VDx/psjYQg+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkUwMS9BNEY5Q0Q2NjlG
NUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFjNkdlY19sVVBILW15TmhD
RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENENC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkUwMS9BNEY5Q0Q2NjlGNUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFj
NkdlY19sVVBILW15TmhDRDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANQZq9hTiaObJRUgi5+V9pT5vAqMazf8Wqx0YZ/FKBEFrPrvVhVGQcE4/RpSj
Ks+DZcO9byWCDxbeIW9Ex15z+B4XELLW0LRUBcGV47UItR0T8aBUn70R9O8qhkk9
S1kMOSzH6wZhM+laogGmQMnSTuYTowD7dl6ZeVN+wcG0UrrJOyXj/Py4S2PGdTdk
lBytItJeaLXpSAk8E9EDXAxULtHxMJIfeqXIe3+/KldZH25tiHy4Z5y5UPQ82Ehu
s/IlxJZvBNX12NnV5OYX/YodtYnHQDVBYpHr6rGokVOGceL89UwsyhS+FCoHZg8c
Mjc6+MBDk6nExhlWeVbxuaa9oQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:32:27 2026 by rpki-client