
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier: O/OZ2tHUSdZbdBydI6vpHi0hPRTtOVznLYA356c9AhA=
Subject key identifier: A1:D5:B0:CF:E4:DE:60:99:11:DA:44:7D:D4:FD:63:B5:5D:BF:63:0C
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number: 0100
Signing time: Wed 25 Mar 2026 05:43:49 +0000
Manifest this update: Wed 25 Mar 2026 05:43:49 +0000
Manifest next update: Wed 01 Apr 2026 05:43:49 +0000
Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: wfFgNi0xbczwhebPHJnUAeZ8qXI9uhrbRrymW83zP9s=)
2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: yjuBkaQ9iRKgMQ7a+4P/BtzlYCvqc8B89mQbeBjPRXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Mar 25 05:43:49 2026 GMT
Not After : Apr 1 05:43:49 2026 GMT
Subject: CN=69c37615-22ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:76:60:74:85:eb:b7:73:7a:21:f2:e1:75:
d4:05:5e:ed:c6:ac:fd:0f:ba:78:e4:98:0e:d8:3d:
c1:99:8e:d3:89:51:9b:74:bf:18:42:f8:a5:f1:94:
eb:77:87:50:06:28:a2:2c:5f:65:4c:d8:4b:d7:33:
be:68:ef:8c:cd:d2:12:56:88:21:8a:b4:dd:65:b3:
76:6f:78:bc:04:3d:77:84:25:f7:33:a0:dc:b0:83:
5e:5e:c2:e2:a8:c1:fd:91:32:4b:0d:58:d3:d1:bd:
cc:00:f0:4b:27:75:c2:c5:3d:b4:32:77:02:f0:ca:
fc:17:c6:ae:6a:5b:63:3d:f4:5c:7f:b7:01:92:35:
36:9a:47:7d:06:59:75:c8:48:9b:cb:a0:30:15:e1:
01:76:7f:98:31:89:3c:19:df:14:e5:9c:1a:f3:9b:
fb:42:e1:81:ff:fe:68:46:3f:60:ba:79:60:dc:b9:
f3:ce:70:6d:64:28:a2:3c:eb:ba:aa:47:0e:9e:f3:
7b:75:ac:ed:7f:22:31:72:1c:80:a0:92:96:67:96:
d6:ad:44:f4:f7:04:43:22:b7:10:cc:4b:f5:be:3d:
db:cc:c7:af:c9:20:01:47:07:48:e6:47:e9:43:5e:
9a:d7:41:9e:68:42:0c:c1:97:60:88:3f:df:9e:61:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D5:B0:CF:E4:DE:60:99:11:DA:44:7D:D4:FD:63:B5:5D:BF:63:0C
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7b:d7:3f:13:35:b1:b0:63:34:7d:af:b6:fb:35:da:12:2d:
ea:b4:d6:a2:c6:8d:4c:f0:08:0f:9a:8a:db:96:26:23:7b:24:
47:d5:0e:da:48:04:aa:b5:44:10:78:80:4e:a7:9c:b2:a6:b8:
2d:b6:a3:52:b6:61:11:7c:1d:74:6c:b6:4a:24:79:f0:f7:7a:
71:69:8e:77:5c:e1:25:cd:16:ac:92:74:f6:51:d4:b8:07:a7:
b2:80:5d:d8:ba:67:ee:8e:96:c7:95:27:be:c3:5c:e7:10:70:
2f:a3:23:27:d8:51:53:c1:90:de:0b:53:b9:96:e0:80:f8:66:
3f:ff:59:43:7a:26:43:9f:2e:42:bd:6b:44:56:54:4f:57:4c:
42:b7:3c:35:62:ae:b5:48:ba:0e:80:c4:c4:c3:bb:17:c3:c5:
4d:d5:e7:8d:f2:e1:00:52:fe:29:19:b4:13:28:c3:b2:af:3c:
40:50:9e:ea:fb:c9:59:d8:36:2e:7a:69:9a:c7:e6:53:91:70:
66:9d:ac:74:94:35:a1:03:fb:f6:26:8d:91:e6:0a:5c:bb:5e:
e2:4a:f5:e6:76:03:f9:36:73:92:20:8e:8c:2d:1c:09:3d:59:
7b:1c:46:18:35:7a:ce:3d:f7:b3:e8:70:cf:cb:22:f7:db:e9:
43:90:e8:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg1RTkxMTAvBgNVBAUTKDYyNEI5NkUxRDY2NUVENzhFNzhERkFGNkMyMjAxOTEw
NzNEQjY2Q0MwHhcNMjYwMzI1MDU0MzQ5WhcNMjYwNDAxMDU0MzQ5WjAYMRYwFAYD
VQQDEw02OWMzNzYxNS0yMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqk12YHSF67dzeiHy4XXUBV7txqz9D7p45JgO2D3BmY7TiVGbdL8YQvil8ZTr
d4dQBiiiLF9lTNhL1zO+aO+MzdISVoghirTdZbN2b3i8BD13hCX3M6DcsINeXsLi
qMH9kTJLDVjT0b3MAPBLJ3XCxT20MncC8Mr8F8aualtjPfRcf7cBkjU2mkd9Bll1
yEiby6AwFeEBdn+YMYk8Gd8U5Zwa85v7QuGB//5oRj9gunlg3LnzznBtZCiiPOu6
qkcOnvN7daztfyIxchyAoJKWZ5bWrUT09wRDIrcQzEv1vj3bzMevySABRwdI5kfp
Q16a10GeaEIMwZdgiD/fnmHcawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHVsM/k
3mCZEdpEfdT9Y7Vdv2MMMB8GA1UdIwQYMBaAFGJLluHWZe1454369sIgGRBz22bM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DMTEyRjU1Q0Qx
NzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdYam5qZnIyd2lBWkVIUGJa
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdY
am5qZnIyd2lBWkVIUGJac3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoHvXPxM1sbBjNH2vtvs12hIt6rTWosaNTPAID5qK25YmI3skR9UO2kgEqrVE
EHiATqecsqa4LbajUrZhEXwddGy2SiR58Pd6cWmOd1zhJc0WrJJ09lHUuAensoBd
2Lpn7o6Wx5UnvsNc5xBwL6MjJ9hRU8GQ3gtTuZbggPhmP/9ZQ3omQ58uQr1rRFZU
T1dMQrc8NWKutUi6DoDExMO7F8PFTdXnjfLhAFL+KRm0EyjDsq88QFCe6vvJWdg2
LnppmsfmU5FwZp2sdJQ1oQP79iaNkeYKXLte4kr15nYD+TZzkiCOjC0cCT1ZexxG
GDV6zj33s+hwz8si99vpQ5DoaQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:04:59 2026 by rpki-client