
$ rpki-client -vvf rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
File: Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft (raw, json)
Hash identifier: WmWJOADw/19WZ86IW18rmHYvHmIJAbLII74+p4SAYe8=
Subject key identifier: 81:D7:7F:71:20:79:46:B7:68:12:45:C3:6D:95:85:C0:86:4B:94:3F
Authority key identifier: 63:A8:1D:C2:E9:B5:AA:6C:56:6A:85:47:42:3D:83:54:64:AF:0C:A3
Certificate issuer: /CN=A91860FA/serialNumber=63A81DC2E9B5AA6C566A8547423D835464AF0CA3
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6gdwum1qmxWaoVHQj2DVGSvDKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
Manifest number: 1C
Signing time: Thu 23 Jul 2026 11:05:03 +0000
Manifest this update: Thu 23 Jul 2026 11:05:03 +0000
Manifest next update: Thu 30 Jul 2026 11:05:03 +0000
Files and hashes: 1: Y6gdwum1qmxWaoVHQj2DVGSvDKM.crl (hash: MyVSsBj7Nc9qFjeZKi60hADm2gL9L4GHqBhs6FqfpKk=)
2: 4C633D6264BD11F1A2B56523A247A888.roa (hash: 79BqBb9Zc/AZb6ss6AMEpHv2WWoRA5MLwpdVg6olajM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.crl
rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6gdwum1qmxWaoVHQj2DVGSvDKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91860FA, serialNumber=63A81DC2E9B5AA6C566A8547423D835464AF0CA3
Validity
Not Before: Jul 23 11:05:03 2026 GMT
Not After : Jul 30 11:05:03 2026 GMT
Subject: CN=6a61f55f-4c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:ac:25:69:90:72:71:d8:c2:5c:b3:2f:f2:
e7:50:56:b9:a8:b7:21:59:93:6b:b8:c8:51:bb:ec:
02:ff:db:f8:87:92:fc:0a:28:d4:e4:72:8a:b2:2a:
e4:65:02:fa:71:c0:9b:1a:3c:84:54:65:7d:c4:18:
1c:a0:6b:f1:c0:46:ae:c3:31:bb:99:68:cb:c9:31:
93:c8:f3:37:be:52:95:9f:6c:99:dc:62:85:f0:d7:
2d:ba:98:14:22:2a:e5:f9:aa:a9:d7:18:33:80:a7:
1b:84:ae:e3:b1:45:eb:52:d9:1a:9f:45:b0:e1:bd:
16:9a:dd:77:56:41:4e:77:5a:72:05:28:d5:1b:9e:
46:c5:30:34:b3:a2:9d:c5:49:7a:37:7f:12:e4:cc:
d5:6b:2e:83:36:13:09:ef:30:df:3c:f2:7b:2b:e4:
9a:11:21:f9:1d:d7:db:0c:cf:28:3b:73:cc:d5:c8:
ad:5b:bb:05:6a:e7:98:3f:fd:eb:29:ab:75:03:ac:
78:98:ad:e6:5c:43:58:bf:c6:d1:3e:89:3c:6d:1f:
5a:e3:c0:97:7c:62:e5:21:c4:27:3b:cd:6c:fd:e4:
22:9e:fb:4e:d2:24:bc:59:a0:75:f9:7b:a0:0a:65:
9c:7b:df:a5:f6:6c:7d:fc:6d:5e:cf:cf:8a:94:58:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:7F:71:20:79:46:B7:68:12:45:C3:6D:95:85:C0:86:4B:94:3F
X509v3 Authority Key Identifier:
keyid:63:A8:1D:C2:E9:B5:AA:6C:56:6A:85:47:42:3D:83:54:64:AF:0C:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6gdwum1qmxWaoVHQj2DVGSvDKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:dc:f0:09:e6:7a:29:b5:42:6b:5f:0f:15:97:bf:13:0f:a3:
b7:3e:18:bb:29:46:7b:e7:d2:5c:97:87:83:d7:8b:3e:4a:c2:
33:72:bf:53:62:3c:09:fc:5d:05:11:4d:b6:a7:13:da:91:83:
16:bd:9f:3b:3a:36:b1:b7:c2:4f:ba:5c:0b:94:6e:10:94:1e:
8b:a7:99:8c:aa:e4:5c:06:52:ec:84:90:ef:9f:96:31:12:ac:
35:87:a3:6f:52:ae:57:27:a2:4d:cb:84:c1:38:5e:4b:64:b9:
91:b2:44:57:64:14:ca:63:62:2c:f7:1f:43:ac:74:b1:f3:1c:
88:9c:4b:6d:12:f0:c1:78:a6:47:da:d6:06:92:a3:0d:8e:82:
1d:eb:e5:a9:34:55:9b:f8:ac:c8:80:df:57:41:da:59:d7:33:
8b:22:3f:1e:de:e4:9e:e1:5c:36:b8:d3:bd:5c:3c:49:a1:db:
69:07:e4:60:41:aa:72:75:68:6c:90:8c:11:45:e1:68:43:df:
1b:df:31:19:31:65:3d:e7:69:03:a8:df:85:25:fb:b6:ea:52:
7c:3c:89:e0:de:cc:74:84:3a:80:76:5d:a2:d9:90:2e:61:0c:
63:5f:3e:a9:a1:38:5d:98:92:91:7c:d4:d1:03:ba:f2:66:11:
27:a5:d5:80
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjBGQTExMC8GA1UEBRMoNjNBODFEQzJFOUI1QUE2QzU2NkE4NTQ3NDIzRDgzNTQ2
NEFGMENBMzAeFw0yNjA3MjMxMTA1MDNaFw0yNjA3MzAxMTA1MDNaMBgxFjAUBgNV
BAMTDTZhNjFmNTVmLTRjMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxFawlaZBycdjCXLMv8udQVrmotyFZk2u4yFG77AL/2/iHkvwKKNTkcoqyKuRl
AvpxwJsaPIRUZX3EGByga/HARq7DMbuZaMvJMZPI8ze+UpWfbJncYoXw1y26mBQi
KuX5qqnXGDOApxuEruOxRetS2RqfRbDhvRaa3XdWQU53WnIFKNUbnkbFMDSzop3F
SXo3fxLkzNVrLoM2EwnvMN888nsr5JoRIfkd19sMzyg7c8zVyK1buwVq55g//esp
q3UDrHiYreZcQ1i/xtE+iTxtH1rjwJd8YuUhxCc7zWz95CKe+07SJLxZoHX5e6AK
ZZx736X2bH38bV7Pz4qUWAOJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgdd/cSB5
RrdoEkXDbZWFwIZLlD8wHwYDVR0jBBgwFoAUY6gdwum1qmxWaoVHQj2DVGSvDKMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MEZBLzU0NEUzQzZDNjRB
RDExRjFBQjQ4OERGQjkxNDdBODg4L1k2Z2R3dW0xcW14V2FvVkhRajJEVkdTdkRL
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWTZnZHd1bTFxbXhXYW9WSFFqMkRWR1N2REtNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2
MEZBLzU0NEUzQzZDNjRBRDExRjFBQjQ4OERGQjkxNDdBODg4L1k2Z2R3dW0xcW14
V2FvVkhRajJEVkdTdkRLTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAi3PAJ5noptUJrXw8Vl78TD6O3Phi7KUZ759Jcl4eD14s+SsIzcr9TYjwJ/F0F
EU22pxPakYMWvZ87Ojaxt8JPulwLlG4QlB6Lp5mMquRcBlLshJDvn5YxEqw1h6Nv
Uq5XJ6JNy4TBOF5LZLmRskRXZBTKY2Is9x9DrHSx8xyInEttEvDBeKZH2tYGkqMN
joId6+WpNFWb+KzIgN9XQdpZ1zOLIj8e3uSe4Vw2uNO9XDxJodtpB+RgQapydWhs
kIwRReFoQ98b3zEZMWU952kDqN+FJfu26lJ8PIng3sx0hDqAdl2i2ZAuYQxjXz6p
oThdmJKRfNTRA7ryZhEnpdWA
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:55:09 2026 by rpki-client