
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json)
Hash identifier: Js/XlbaExze2ZDCpJ3zo32QgAyHWQd/da6kM40jF7JA=
Subject key identifier: 61:CA:CB:A8:2E:B4:52:68:FB:28:E7:F8:32:01:8A:38:70:A7:4C:4B
Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Certificate serial: 25D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
Manifest number: 25C1
Signing time: Sun 18 Oct 2026 15:45:01 +0000
Manifest this update: Sun 18 Oct 2026 15:45:00 +0000
Manifest next update: Sun 25 Oct 2026 15:45:00 +0000
Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: EaXFi6F2v0KsJRrVdI6K5d8fs497ZAz/cmtGe2T6Z/8=)
2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: rbb9vzT6ZdvpjVZ3GXOm6few5Y28G7tYzO6mN3D77lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 15:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9685 (0x25d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Validity
Not Before: Oct 18 15:45:00 2026 GMT
Not After : Oct 25 15:45:00 2026 GMT
Subject: CN=6ad4e97d-9bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:07:b5:27:6c:43:4a:e8:bd:31:11:16:3b:
8b:e6:51:3e:e0:b1:e3:fa:c4:81:33:b2:ca:6a:62:
e4:42:d3:6e:4c:ac:f9:d7:41:fe:59:1d:fd:4b:39:
07:37:e3:81:81:af:a8:49:e3:0c:9d:77:e5:bb:fb:
53:d4:a2:a9:14:69:d5:30:d3:4b:4c:01:bc:cb:5b:
8c:aa:dc:15:1b:b7:b5:c8:96:5d:ba:8e:50:23:c0:
8f:06:47:b4:b6:16:3d:77:6d:aa:18:ac:b4:0d:f6:
34:20:11:af:97:54:36:08:3a:be:24:57:ed:2c:25:
a8:d7:99:2c:f7:f7:02:95:98:a8:68:8a:08:9e:c5:
83:4a:40:67:39:12:f9:d6:69:8c:5f:96:46:ba:f3:
09:96:a3:26:84:26:16:20:81:d5:f8:36:71:b1:42:
4c:0b:d4:f7:82:dd:66:e6:27:93:6d:cb:98:08:c0:
b5:91:5e:15:f6:d1:0c:85:fc:b3:67:e3:21:0e:ab:
0e:fd:e2:f0:04:b9:df:2d:0c:7e:1b:f2:5f:e4:f6:
26:c8:08:89:65:ca:4c:83:c0:4c:e5:86:2a:06:52:
c1:fe:a3:24:aa:c4:c6:e9:09:91:9f:4b:a8:cd:12:
31:66:cb:d0:1c:4c:9d:59:4d:c6:4c:13:9a:fe:8c:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:CB:A8:2E:B4:52:68:FB:28:E7:F8:32:01:8A:38:70:A7:4C:4B
X509v3 Authority Key Identifier:
keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:21:14:c2:82:f9:f5:fe:4d:21:42:3d:88:72:45:76:63:0e:
a0:f4:21:3b:5e:fd:b8:60:59:30:cc:a2:2e:b0:c4:eb:7c:13:
22:09:13:e5:85:0e:06:7c:e6:77:cd:7b:d6:a4:d5:7f:5d:56:
c4:c2:80:f7:37:80:9d:cb:37:33:2b:2b:00:05:66:f7:21:ce:
46:ae:68:99:f7:26:9c:b2:c2:d1:da:55:13:72:96:b5:46:eb:
63:65:04:fe:c8:23:40:6c:ac:c1:1f:68:21:ab:4b:7a:c4:04:
b6:d4:64:89:ee:9b:14:f9:7c:8c:9c:75:e7:b7:ce:b8:3b:fc:
d9:e2:8e:74:6b:a5:53:3b:fb:7f:57:1e:7e:60:a0:dc:a0:98:
dc:78:09:bf:18:4f:a7:ae:4b:27:bb:29:0e:f7:0d:fa:bd:86:
df:d1:f7:b4:c2:48:b8:cb:d6:cb:a2:96:42:5c:b2:13:22:a3:
9d:34:df:b6:ac:41:1b:5b:e7:2e:f2:78:fe:bf:e7:9d:93:83:
52:02:44:a4:5b:2c:12:c6:b6:11:17:43:c1:a1:20:00:80:40:
83:98:6a:57:b7:b6:70:69:76:24:19:da:8a:d4:90:8a:42:cb:
0a:ce:b5:a4:5b:8b:13:5c:82:20:e9:8e:30:2c:97:05:ba:10:
1b:bd:32:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5
RUEwNEQ0RTEwHhcNMjYxMDE4MTU0NTAwWhcNMjYxMDI1MTU0NTAwWjAYMRYwFAYD
VQQDEw02YWQ0ZTk3ZC05YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvToHtSdsQ0rovTERFjuL5lE+4LHj+sSBM7LKamLkQtNuTKz510H+WR39SzkH
N+OBga+oSeMMnXflu/tT1KKpFGnVMNNLTAG8y1uMqtwVG7e1yJZduo5QI8CPBke0
thY9d22qGKy0DfY0IBGvl1Q2CDq+JFftLCWo15ks9/cClZioaIoInsWDSkBnORL5
1mmMX5ZGuvMJlqMmhCYWIIHV+DZxsUJMC9T3gt1m5ieTbcuYCMC1kV4V9tEMhfyz
Z+MhDqsO/eLwBLnfLQx+G/Jf5PYmyAiJZcpMg8BM5YYqBlLB/qMkqsTG6QmRn0uo
zRIxZsvQHEydWU3GTBOa/owasQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHKy6gu
tFJo+yjn+DIBijhwp0xLMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB
ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP
NHp3QkttVEZRck9lb0UxT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGyEUwoL59f5NIUI9iHJFdmMOoPQhO179uGBZMMyiLrDE63wTIgkT5YUOBnzm
d8171qTVf11WxMKA9zeAncs3MysrAAVm9yHORq5omfcmnLLC0dpVE3KWtUbrY2UE
/sgjQGyswR9oIatLesQEttRkie6bFPl8jJx157fOuDv82eKOdGulUzv7f1cefmCg
3KCY3HgJvxhPp65LJ7spDvcN+r2G39H3tMJIuMvWy6KWQlyyEyKjnTTftqxBG1vn
LvJ4/r/nnZODUgJEpFssEsa2ERdDwaEgAIBAg5hqV7e2cGl2JBnaitSQikLLCs61
pFuLE1yCIOmOMCyXBboQG70yqA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 19:52:49 2026 by rpki-client