
$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json)
Hash identifier: PNAZEnPNLw7MwiqnlUnyoiXyyC7wUpsEWeUcV4KNshE=
Subject key identifier: 54:27:73:3E:29:71:26:CA:C1:DB:30:BC:7A:F4:87:34:A7:A3:FA:8A
Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
Manifest number: FB
Signing time: Wed 13 May 2026 06:25:56 +0000
Manifest this update: Wed 13 May 2026 06:25:56 +0000
Manifest next update: Wed 20 May 2026 06:25:56 +0000
Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: yCeqkvfj78JOfXpsNoNtvJvmE11f2Eb55C1k+bfL0ak=)
2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: tvmpk8Ite7pSp5NKIoDYEAchnf/U0Ef+pNgJmhuXtZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Validity
Not Before: May 13 06:25:56 2026 GMT
Not After : May 20 06:25:56 2026 GMT
Subject: CN=6a041974-238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:d7:87:4c:b0:54:df:ba:7b:21:7c:ae:73:
1f:7e:7e:f1:20:d9:ef:f8:49:42:11:2c:88:36:88:
fb:a1:50:89:a1:c0:c5:91:86:6c:42:11:c1:e5:c5:
ba:84:3c:38:7b:96:68:3c:28:eb:5f:4c:a4:0e:3b:
72:6e:7a:65:53:de:3c:ec:82:5f:87:1c:1f:01:25:
c6:12:c9:9d:3e:cc:95:9e:a1:df:5a:74:74:96:0b:
5b:ae:1b:79:82:27:d0:c3:12:21:c2:9b:e4:fb:a5:
7d:04:71:4e:fb:37:c0:a9:c8:ae:e0:2e:69:03:13:
03:22:ce:f8:67:c6:bc:bd:06:9f:0f:f7:69:71:ff:
1b:92:92:89:0c:8d:01:9e:01:31:6f:48:fa:ac:c1:
91:23:ef:3a:7d:3a:93:22:bb:1f:bb:8f:f9:27:c4:
2f:1d:58:12:c5:31:38:a3:c7:3f:10:75:69:e6:0b:
64:c7:3d:b0:6a:fa:05:e3:6a:8b:02:28:a4:41:71:
a8:7d:1a:81:47:c4:a0:0b:83:61:74:a9:98:56:84:
16:1b:ed:b4:47:c6:5b:68:e5:07:d6:5c:b0:2a:32:
cd:78:5b:ab:a4:77:84:bb:b1:c0:ae:f4:b0:6d:92:
ab:0c:60:52:7f:51:e6:c0:1e:1a:fe:6c:41:de:fb:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:73:3E:29:71:26:CA:C1:DB:30:BC:7A:F4:87:34:A7:A3:FA:8A
X509v3 Authority Key Identifier:
keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c6:b4:56:94:47:83:2c:39:ca:10:f3:40:1a:08:8b:27:49:
74:14:7e:ba:e1:3b:16:b6:26:ec:72:4a:56:2c:71:e7:bf:41:
b9:2d:55:bf:0f:7f:56:0f:13:83:81:54:8e:13:9a:f0:0d:04:
fd:2c:f7:59:ab:0d:85:c5:4f:98:1d:cf:f9:03:82:d7:86:58:
13:22:08:6f:7d:4f:17:0c:9f:7b:3f:1f:e6:8e:4a:a6:bc:c4:
5d:1d:48:c8:83:cb:0c:cc:76:4d:8a:a0:b7:f8:44:29:0a:f6:
aa:90:5c:5e:37:76:97:c6:a7:2b:89:9a:62:87:56:8b:41:f9:
a0:18:7d:62:12:70:1d:88:10:e4:64:c7:31:5a:15:30:43:96:
58:77:5e:50:00:b4:d3:5b:e1:aa:01:1f:8f:da:bb:b1:89:9d:
f5:db:b2:ac:91:06:d3:41:2e:82:2d:3f:e1:ff:ae:cc:c6:4f:
18:fc:94:fb:81:32:e5:61:c7:09:41:e7:1b:2c:10:60:91:9b:
9e:aa:b5:7c:04:1f:be:0a:7f:e6:f6:d3:65:c2:b4:fe:c7:cb:
65:7e:8a:c0:13:85:1b:61:05:d6:dd:9f:b7:0f:ec:af:e6:2e:
ec:09:95:d3:43:8a:92:d0:39:76:6c:bf:d7:95:e7:d4:6f:88:
f7:7d:b8:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE3QjAxMTAvBgNVBAUTKENBMjk3NzQ3NDMwQTFCRUIzNDBCQ0EzOUQ2MjIyRkQy
NjQxOUI3REIwHhcNMjYwNTEzMDYyNTU2WhcNMjYwNTIwMDYyNTU2WjAYMRYwFAYD
VQQDEw02YTA0MTk3NC0yMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwIzXh0ywVN+6eyF8rnMffn7xINnv+ElCESyINoj7oVCJocDFkYZsQhHB5cW6
hDw4e5ZoPCjrX0ykDjtybnplU9487IJfhxwfASXGEsmdPsyVnqHfWnR0lgtbrht5
gifQwxIhwpvk+6V9BHFO+zfAqciu4C5pAxMDIs74Z8a8vQafD/dpcf8bkpKJDI0B
ngExb0j6rMGRI+86fTqTIrsfu4/5J8QvHVgSxTE4o8c/EHVp5gtkxz2wavoF42qL
AiikQXGofRqBR8SgC4NhdKmYVoQWG+20R8ZbaOUH1lywKjLNeFurpHeEu7HArvSw
bZKrDGBSf1HmwB4a/mxB3vukDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQncz4p
cSbKwdswvHr0hzSno/qKMB8GA1UdIwQYMBaAFMopd0dDChvrNAvKOdYiL9JkGbfb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTdCMC9FMUFDODIxMEQ4
ODMxMUVGOTU0QTNENzBDNEY5QUUwMi95aWwzUjBNS0ctczBDOG81MWlJdjBtUVp0
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lpbDNSME1LRy1zMEM4bzUxaUl2MG1RWnQ5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTdCMC9FMUFDODIxMEQ4ODMxMUVGOTU0QTNENzBDNEY5QUUwMi95aWwzUjBNS0ct
czBDOG81MWlJdjBtUVp0OXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqca0VpRHgyw5yhDzQBoIiydJdBR+uuE7FrYm7HJKVixx579BuS1Vvw9/Vg8T
g4FUjhOa8A0E/Sz3WasNhcVPmB3P+QOC14ZYEyIIb31PFwyfez8f5o5KprzEXR1I
yIPLDMx2TYqgt/hEKQr2qpBcXjd2l8anK4maYodWi0H5oBh9YhJwHYgQ5GTHMVoV
MEOWWHdeUAC001vhqgEfj9q7sYmd9duyrJEG00Eugi0/4f+uzMZPGPyU+4Ey5WHH
CUHnGywQYJGbnqq1fAQfvgp/5vbTZcK0/sfLZX6KwBOFG2EF1t2ftw/sr+Yu7AmV
00OKktA5dmy/15Xn1G+I9324mA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:35:54 2026 by rpki-client