
$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json)
Hash identifier: qRCPKwBWDu83beGv3ReUWCNUTbCy1hHsLpF1tr2wepQ=
Subject key identifier: EB:C7:66:7D:C5:BE:4D:37:CC:72:E9:7E:A1:87:DB:D6:64:64:B8:57
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
Manifest number: 01C7
Signing time: Wed 25 Mar 2026 03:04:16 +0000
Manifest this update: Wed 25 Mar 2026 03:04:16 +0000
Manifest next update: Wed 01 Apr 2026 03:04:16 +0000
Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: iLNcgHZuuWEQJsQz16gnSRt/wRYpOVq4rfW2Ao5/f8o=)
2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: g62n6MuaUWV6TMBxgw6JfizdoiYQ10/TclDcRrurcgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Validity
Not Before: Mar 25 03:04:16 2026 GMT
Not After : Apr 1 03:04:16 2026 GMT
Subject: CN=69c350b0-3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:95:16:68:fb:68:61:77:0b:ad:40:5f:16:
03:2e:20:29:50:24:f1:74:f5:08:72:78:4e:8d:77:
a2:d9:3f:be:2d:7e:9b:b7:63:39:b6:4a:c9:db:a9:
9c:54:03:02:63:a1:7f:89:aa:25:9c:14:37:e1:7c:
86:bc:26:72:88:e3:9a:2e:8d:c5:ce:a0:c4:ad:e9:
01:08:d0:1b:a3:d4:a6:7e:00:c9:18:fd:4b:24:2d:
72:63:e4:99:45:cd:f3:0e:05:36:84:aa:15:b1:42:
43:0e:66:e3:11:9c:a3:c4:1a:9f:0b:b0:a8:e5:1c:
b2:94:53:44:73:a0:46:b6:6b:2a:52:bf:0e:10:09:
51:58:e3:34:ca:9f:5d:a3:fd:80:66:73:94:dd:ab:
e3:1d:c2:3c:c8:68:a7:70:31:48:12:eb:55:b0:52:
13:fc:74:4d:9d:be:7d:d7:a6:e8:37:61:1c:24:58:
e6:01:bf:fd:4f:8e:c6:44:2e:b0:6a:c0:49:36:af:
e6:8b:0c:57:a0:42:6e:af:06:80:ed:c2:5b:b5:21:
30:47:e7:1a:e2:cd:1a:4a:d5:cf:12:07:bb:60:36:
2e:a3:3a:6a:23:64:2c:0d:96:da:12:07:73:96:4f:
ee:f4:8f:1a:9d:42:c1:35:ce:52:15:b0:98:f0:f3:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C7:66:7D:C5:BE:4D:37:CC:72:E9:7E:A1:87:DB:D6:64:64:B8:57
X509v3 Authority Key Identifier:
keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:dd:fd:d2:3e:2d:e0:c3:77:35:2b:47:a7:c2:46:21:32:03:
87:c1:a9:5b:a7:c5:a9:b9:95:9f:d0:9e:9b:7b:57:74:cb:50:
95:e8:db:30:b0:46:7b:82:6f:3c:3a:b6:7e:3b:e7:34:4a:81:
57:71:93:c8:ef:35:52:8b:5d:9c:36:7c:58:ac:8d:a2:7f:cf:
1f:ba:ff:78:4b:af:ca:9c:96:6d:1f:56:43:f2:7f:ab:a8:fa:
e5:52:a9:21:67:11:5d:8c:d6:cd:c8:bf:48:57:b9:e5:b1:1f:
a2:26:a9:a0:07:03:da:b3:6f:33:77:1f:ad:25:95:7a:dd:01:
c3:5c:2a:e1:58:41:de:c1:e5:8f:f4:87:86:a0:e1:ac:99:58:
31:b8:27:8e:ce:8f:5e:6e:1f:f9:e7:39:8a:62:41:43:c5:f9:
e6:c5:bb:9e:1c:52:0b:d3:3e:bb:a3:d1:fc:38:73:bc:f6:d6:
29:70:bb:25:ea:91:b2:31:df:2d:45:ad:79:6d:ea:77:00:7f:
17:46:ab:b5:d3:f4:1b:3f:b0:09:4d:f9:6f:7f:d9:2f:16:b7:
82:7b:cb:d8:a7:41:af:83:73:1d:fd:83:da:ab:d4:1b:3b:75:
f6:14:f9:d7:47:5b:59:32:f5:67:03:90:1a:61:a6:65:ec:0a:
75:d2:cf:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjI4RTIxMTAvBgNVBAUTKEM4OEMyQUE5NEFBRTVFRjlGNEQ0OTdFODM4N0EzOURE
MUJDRTkzOUQwHhcNMjYwMzI1MDMwNDE2WhcNMjYwNDAxMDMwNDE2WjAYMRYwFAYD
VQQDEw02OWMzNTBiMC0zY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAllyVFmj7aGF3C61AXxYDLiApUCTxdPUIcnhOjXei2T++LX6bt2M5tkrJ26mc
VAMCY6F/iaolnBQ34XyGvCZyiOOaLo3FzqDErekBCNAbo9SmfgDJGP1LJC1yY+SZ
Rc3zDgU2hKoVsUJDDmbjEZyjxBqfC7Co5RyylFNEc6BGtmsqUr8OEAlRWOM0yp9d
o/2AZnOU3avjHcI8yGincDFIEutVsFIT/HRNnb5916boN2EcJFjmAb/9T47GRC6w
asBJNq/miwxXoEJurwaA7cJbtSEwR+ca4s0aStXPEge7YDYuozpqI2QsDZbaEgdz
lk/u9I8anULBNc5SFbCY8PO8cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvHZn3F
vk03zHLpfqGH29ZkZLhXMB8GA1UdIwQYMBaAFMiMKqlKrl759NSX6Dh6Od0bzpOd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhFMi9DRTU0MDZGNjcy
RTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2bjAxSmZvT0hvNTNSdk9r
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjhFMi9DRTU0MDZGNjcyRTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2
bjAxSmZvT0hvNTNSdk9rNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMt390j4t4MN3NStHp8JGITIDh8GpW6fFqbmVn9Cem3tXdMtQlejbMLBGe4Jv
PDq2fjvnNEqBV3GTyO81UotdnDZ8WKyNon/PH7r/eEuvypyWbR9WQ/J/q6j65VKp
IWcRXYzWzci/SFe55bEfoiapoAcD2rNvM3cfrSWVet0Bw1wq4VhB3sHlj/SHhqDh
rJlYMbgnjs6PXm4f+ec5imJBQ8X55sW7nhxSC9M+u6PR/DhzvPbWKXC7JeqRsjHf
LUWteW3qdwB/F0artdP0Gz+wCU35b3/ZLxa3gnvL2KdBr4NzHf2D2qvUGzt19hT5
10dbWTL1ZwOQGmGmZewKddLPSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:36:24 2026 by rpki-client