
$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier: frSYfg2g+HUIFosAPvCd2Ol18soxjlmUvzjbd6zgLlk=
Subject key identifier: CF:B9:66:48:A3:74:B9:F9:81:92:EC:84:FE:69:86:DD:FC:7D:9B:7A
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number: 0164
Signing time: Wed 13 May 2026 04:53:46 +0000
Manifest this update: Wed 13 May 2026 04:53:45 +0000
Manifest next update: Wed 20 May 2026 04:53:45 +0000
Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: t468zm0i/HqmC2SoiJPK3J1B09Tuy3LCZ41WFb8Mel0=)
2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: SKhqrlepkMrk6BddxM6G2PMvfO6t8Ob/zKNcmmPpDSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Validity
Not Before: May 13 04:53:45 2026 GMT
Not After : May 20 04:53:45 2026 GMT
Subject: CN=6a0403da-ce4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:25:f8:c9:2e:77:5b:fb:6f:16:86:11:a9:
f0:ab:3c:d4:42:bc:0e:03:5a:2a:80:2c:93:64:e5:
49:38:a5:ab:db:44:81:94:a8:04:b5:d0:25:14:1a:
23:66:e6:2d:90:c7:85:15:c0:0a:4c:63:af:d6:7d:
26:f3:89:6f:1a:e5:71:b2:08:4b:99:ee:0f:6d:4e:
be:5d:60:3b:cb:a5:a1:d8:d5:91:a0:5a:64:cb:44:
61:49:d7:8f:d2:ce:8b:9b:9e:e8:f7:b6:06:7e:42:
b0:eb:b6:8f:a9:da:ae:50:c0:61:ca:44:62:9f:1e:
2a:71:d0:ad:91:bf:4b:2d:67:b0:29:ab:fa:8c:1e:
bd:2c:f9:2d:fc:c3:47:45:e4:87:e8:f7:98:ba:77:
a8:ad:10:e9:b8:9c:be:ed:f3:04:2b:68:34:46:f3:
d4:cb:96:c0:59:7c:2f:2f:b8:31:90:e8:bb:87:f9:
c2:3d:1a:07:65:cb:8f:a8:cc:9c:43:da:83:61:8d:
30:c9:b2:f6:24:08:e2:7b:77:60:1e:5d:ac:c6:40:
24:cb:52:bc:e9:b5:30:61:2d:88:30:fa:d3:19:22:
f2:1f:ee:95:0f:e7:47:56:10:6c:8a:f2:42:f5:7c:
89:75:61:60:09:cc:9d:d7:bb:44:4c:62:f4:42:b8:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B9:66:48:A3:74:B9:F9:81:92:EC:84:FE:69:86:DD:FC:7D:9B:7A
X509v3 Authority Key Identifier:
keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:5e:30:7b:af:44:90:e1:c9:02:a0:2e:f9:75:16:c8:8d:81:
29:ab:9f:34:34:84:25:0d:e3:1c:31:23:bd:02:d8:4d:a4:12:
a9:8c:87:ea:1d:2f:be:65:fc:ef:f9:10:aa:5f:d5:48:28:ef:
57:aa:25:79:3b:23:2d:5a:08:00:de:a7:2a:dc:1b:87:11:ad:
b7:80:17:3e:c4:2e:12:05:5e:16:a7:c9:5c:2a:c2:8c:1e:d3:
26:eb:8a:0c:f1:df:b1:f6:bb:32:a5:32:e6:f9:1d:98:3a:3e:
04:f9:08:3c:21:2a:16:0b:c1:a6:a2:ec:cf:98:79:35:e9:35:
f1:49:2d:b7:a2:c8:47:03:e9:f2:f3:80:90:06:87:a6:01:af:
ac:7b:c1:5d:4a:4f:5b:7e:38:97:1e:06:50:f1:2f:b1:e2:16:
1f:58:6c:46:48:d9:54:10:91:18:57:02:25:19:e3:5a:d4:ac:
e4:33:ec:c3:1b:a4:ad:ab:14:35:63:24:dc:07:f3:b1:5d:6a:
79:28:dc:d6:d9:5b:d4:da:51:e9:64:48:57:68:71:c4:6b:80:
80:03:2e:1e:1f:0e:25:40:f7:bc:c7:cd:20:fd:b3:20:4a:a5:
69:bc:ad:8d:84:53:a8:04:a3:f3:e7:4b:f0:e6:8a:d7:ee:90:
bb:b0:de:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0
REQ2NzdGRUEwHhcNMjYwNTEzMDQ1MzQ1WhcNMjYwNTIwMDQ1MzQ1WjAYMRYwFAYD
VQQDEw02YTA0MDNkYS1jZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2w8l+Mkud1v7bxaGEanwqzzUQrwOA1oqgCyTZOVJOKWr20SBlKgEtdAlFBoj
ZuYtkMeFFcAKTGOv1n0m84lvGuVxsghLme4PbU6+XWA7y6Wh2NWRoFpky0RhSdeP
0s6Lm57o97YGfkKw67aPqdquUMBhykRinx4qcdCtkb9LLWewKav6jB69LPkt/MNH
ReSH6PeYuneorRDpuJy+7fMEK2g0RvPUy5bAWXwvL7gxkOi7h/nCPRoHZcuPqMyc
Q9qDYY0wybL2JAjie3dgHl2sxkAky1K86bUwYS2IMPrTGSLyH+6VD+dHVhBsivJC
9XyJdWFgCcyd17tETGL0QrgElwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+5Zkij
dLn5gZLshP5pht38fZt6MB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE
RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m
LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG
YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR14we69EkOHJAqAu+XUWyI2BKaufNDSEJQ3jHDEjvQLYTaQSqYyH6h0vvmX8
7/kQql/VSCjvV6oleTsjLVoIAN6nKtwbhxGtt4AXPsQuEgVeFqfJXCrCjB7TJuuK
DPHfsfa7MqUy5vkdmDo+BPkIPCEqFgvBpqLsz5h5Nek18Uktt6LIRwPp8vOAkAaH
pgGvrHvBXUpPW344lx4GUPEvseIWH1hsRkjZVBCRGFcCJRnjWtSs5DPswxukrasU
NWMk3AfzsV1qeSjc1tlb1NpR6WRIV2hxxGuAgAMuHh8OJUD3vMfNIP2zIEqlabyt
jYRTqASj8+dL8OaK1+6Qu7DeJQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:14:58 2026 by rpki-client