
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json)
Hash identifier: QrF03ONm0UrabHEAqrHZ+kohEKtJ5yjrLXXPUX5M3XA=
Subject key identifier: 47:A2:0C:37:A4:40:2D:3A:5D:9A:D8:81:11:36:70:8C:E3:F2:C0:87
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
Manifest number: 024D
Signing time: Wed 23 Sep 2026 02:17:11 +0000
Manifest this update: Wed 23 Sep 2026 02:17:10 +0000
Manifest next update: Wed 30 Sep 2026 02:17:10 +0000
Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: TNB2rMc2RCBSmKb9KdKaH/i/YA76gtdxFMz1iH033eo=)
2: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=)
3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=)
4: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Sep 23 02:17:10 2026 GMT
Not After : Sep 30 02:17:10 2026 GMT
Subject: CN=6ab336a6-9784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dc:ba:45:ae:db:4e:ac:68:47:68:e5:c6:13:
17:ff:de:3c:93:ec:d9:85:9e:a4:1a:c4:e3:5e:6d:
56:93:7d:98:b2:b7:eb:17:3e:4f:ba:cb:e5:4d:32:
7c:3a:a1:be:00:97:4a:d2:1c:99:2d:2b:45:50:0e:
8c:d2:8b:1b:81:f2:9d:cc:e3:3e:11:4e:5b:3b:eb:
d4:b0:32:86:24:ac:29:31:5b:94:dc:72:59:49:2b:
17:0b:64:1b:26:8a:2a:59:df:a9:48:a6:57:83:6c:
a9:35:d0:7f:f7:63:e0:cc:f1:9a:c9:61:48:86:68:
9e:22:e1:d0:c7:6e:f4:1f:b3:f6:f2:f4:cf:bc:c0:
b0:ff:09:00:19:3a:75:d8:aa:78:b0:64:ca:a1:4a:
b7:ec:4e:8e:73:ea:e9:34:de:97:94:4b:d9:35:61:
35:d4:ef:96:9d:ff:f3:6c:1d:e1:47:15:d8:06:58:
42:a3:9e:e1:5f:00:f6:39:2d:6f:47:11:47:ee:21:
c6:bd:ae:cb:12:72:1f:cc:ec:7a:38:0f:de:d4:77:
28:84:75:d0:70:cd:48:7e:b9:ac:88:a0:1e:b4:ae:
86:ac:81:df:09:63:d1:11:06:e9:6a:4a:dd:0c:57:
92:f8:34:a0:62:5b:ea:1f:a2:5f:4f:70:51:f0:ac:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:0C:37:A4:40:2D:3A:5D:9A:D8:81:11:36:70:8C:E3:F2:C0:87
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9d:41:59:fb:64:80:25:68:0a:89:dd:72:05:6b:99:f3:27:
bc:b0:f9:73:2e:20:d1:34:5d:a1:c7:b4:14:17:60:92:1a:c8:
d4:94:3b:63:b6:65:86:38:56:55:b2:e1:49:b5:91:e8:de:78:
23:a3:b7:3f:02:9d:96:da:fb:f4:61:d9:b7:82:b3:71:7a:b7:
6f:20:4c:0e:4a:96:c7:64:cc:34:0d:16:4f:b2:13:7e:1c:ed:
1e:9e:e9:9d:5c:62:60:79:25:d9:da:63:03:72:9c:12:58:04:
e7:7a:04:74:30:ea:60:bd:28:01:5b:64:cd:3a:02:ba:58:fa:
87:ec:0c:22:38:28:48:22:78:74:68:d4:05:0c:2b:5a:21:f4:
81:5a:7d:c0:11:ac:f4:d3:60:dc:56:66:4b:ae:4c:37:75:b0:
9a:3c:10:43:81:86:64:d1:a0:6c:83:46:98:ca:9a:e3:ae:e1:
2f:23:6b:bf:ee:6a:de:e8:29:95:b1:35:a2:b5:20:6f:e9:fe:
63:57:a7:32:45:5c:a0:89:97:d5:35:4b:a5:99:25:05:a0:0c:
7d:be:16:e4:82:aa:eb:68:25:ab:02:8c:2b:a1:50:7e:48:44:
41:07:a9:22:16:92:97:d6:a0:5f:3c:5a:da:29:c8:47:c6:15:
a4:e1:5a:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE
RjAzRDcyNDcwHhcNMjYwOTIzMDIxNzEwWhcNMjYwOTMwMDIxNzEwWjAYMRYwFAYD
VQQDEw02YWIzMzZhNi05Nzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8ty6Ra7bTqxoR2jlxhMX/948k+zZhZ6kGsTjXm1Wk32YsrfrFz5PusvlTTJ8
OqG+AJdK0hyZLStFUA6M0osbgfKdzOM+EU5bO+vUsDKGJKwpMVuU3HJZSSsXC2Qb
JooqWd+pSKZXg2ypNdB/92PgzPGayWFIhmieIuHQx270H7P28vTPvMCw/wkAGTp1
2Kp4sGTKoUq37E6Oc+rpNN6XlEvZNWE11O+Wnf/zbB3hRxXYBlhCo57hXwD2OS1v
RxFH7iHGva7LEnIfzOx6OA/e1HcohHXQcM1IfrmsiKAetK6GrIHfCWPREQbpakrd
DFeS+DSgYlvqH6JfT3BR8KzPBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeiDDek
QC06XZrYgRE2cIzj8sCHMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw
MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ
bUVKcFBUaGhHVkxmQTlja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi51BWftkgCVoCondcgVrmfMnvLD5cy4g0TRdoce0FBdgkhrI1JQ7Y7ZlhjhW
VbLhSbWR6N54I6O3PwKdltr79GHZt4KzcXq3byBMDkqWx2TMNA0WT7ITfhztHp7p
nVxiYHkl2dpjA3KcElgE53oEdDDqYL0oAVtkzToCulj6h+wMIjgoSCJ4dGjUBQwr
WiH0gVp9wBGs9NNg3FZmS65MN3WwmjwQQ4GGZNGgbINGmMqa467hLyNrv+5q3ugp
lbE1orUgb+n+Y1enMkVcoImX1TVLpZklBaAMfb4W5IKq62glqwKMK6FQfkhEQQep
IhaSl9agXzxa2inIR8YVpOFafw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:38:17 2026 by rpki-client