
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier: bjFrkoN2f74JAx9J2bgXP+bHYE3eaTs0tAofNOH23bc=
Subject key identifier: 3F:B4:20:E3:9C:D8:61:49:2E:7E:21:BD:74:94:F7:6C:F9:7B:59:F9
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number: 01AB
Signing time: Sun 27 Sep 2026 04:29:05 +0000
Manifest this update: Sun 27 Sep 2026 04:29:05 +0000
Manifest next update: Sun 04 Oct 2026 04:29:05 +0000
Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: cvrHaH6aihKfVoDR1Qj5wQeCWoXLb7a6Oudz3N0j4Sk=)
2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: 05nFnz6le7/gfCsII6bmMAMlQ4HFGQxS/gFaNZcGMLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Validity
Not Before: Sep 27 04:29:05 2026 GMT
Not After : Oct 4 04:29:05 2026 GMT
Subject: CN=6ab89b91-155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:88:2b:b2:4b:23:35:63:7e:b3:ad:b8:ec:
e2:aa:be:07:84:53:a5:fb:fa:54:08:53:b8:15:53:
13:a8:d9:c4:94:6e:9d:17:2a:52:21:ff:4f:77:44:
2d:66:72:c9:3d:fc:8c:56:55:19:3f:88:d0:fe:1e:
ce:9c:06:6b:11:6c:f8:09:df:a4:3a:3e:53:c2:0f:
57:0f:f2:42:5d:04:32:77:dc:b5:11:72:ad:d1:90:
be:cf:aa:13:8a:ff:46:6e:54:82:88:ca:c9:61:2d:
a9:a4:97:0b:08:90:27:38:58:b6:b6:e0:6e:6f:7a:
ed:ed:d9:e7:d9:60:5e:93:31:d4:0f:96:83:a9:1e:
c2:33:f1:8b:8c:e0:8a:a5:83:88:a5:10:58:f4:f3:
a3:aa:17:d8:c1:0d:f9:20:ce:0c:24:bf:62:78:59:
82:a9:46:91:b3:7b:1e:34:5c:06:f7:e2:20:16:5b:
03:0c:a5:03:e5:c2:f9:47:40:39:f2:9c:26:26:82:
9c:cd:a3:75:10:ed:db:a1:08:54:b9:f2:6f:cf:53:
c7:fd:cf:86:3c:5b:a8:a1:ce:5b:f0:eb:fa:ad:7b:
69:af:92:3b:75:42:02:3d:98:4b:3b:ca:45:2e:4c:
fa:0b:03:43:f5:ac:4a:ef:1b:8a:5a:65:fb:fe:89:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B4:20:E3:9C:D8:61:49:2E:7E:21:BD:74:94:F7:6C:F9:7B:59:F9
X509v3 Authority Key Identifier:
keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:9b:dc:db:12:0e:86:d7:73:5c:ce:df:30:c4:17:d5:3f:8d:
d6:79:16:a6:f8:a3:e3:cc:37:37:a2:ea:34:b1:74:78:fe:84:
9e:2f:6e:5d:3b:55:2c:1f:c9:48:99:95:cf:fe:44:9e:95:7e:
df:14:b6:e9:6f:80:3f:af:21:ea:81:7a:37:2a:70:e9:3d:ce:
73:58:d8:3e:09:ea:1c:8a:9e:2a:50:fa:28:13:b4:7f:35:a7:
cd:8f:66:ab:55:da:f9:87:aa:e1:f0:f5:71:d6:10:fb:79:40:
83:73:42:ba:e1:e4:79:d2:c2:22:56:8c:01:94:0f:2c:e7:d7:
cb:5e:db:d2:ce:51:59:ec:67:0b:d5:65:aa:e2:a5:c6:11:66:
71:93:6d:b1:11:fd:c7:45:64:f9:81:c2:00:bf:40:d6:33:09:
41:eb:54:61:3c:27:ce:1c:95:fd:43:11:78:20:ab:2e:5f:c6:
65:8d:39:3e:39:8f:8e:77:25:bd:6d:19:e8:bd:6c:3f:3b:f3:
f1:01:9c:3c:a7:cd:4d:ea:d6:6a:52:16:dd:5d:f2:20:df:4e:
36:50:d3:a6:e9:03:93:93:0a:f2:ac:2d:4d:01:55:da:65:26:
35:74:3b:dc:5a:a8:e4:68:3b:cb:50:8b:8f:1e:4a:7c:04:29:
7e:15:17:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0
REQ2NzdGRUEwHhcNMjYwOTI3MDQyOTA1WhcNMjYxMDA0MDQyOTA1WjAYMRYwFAYD
VQQDEw02YWI4OWI5MS0xNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQSIK7JLIzVjfrOtuOziqr4HhFOl+/pUCFO4FVMTqNnElG6dFypSIf9Pd0Qt
ZnLJPfyMVlUZP4jQ/h7OnAZrEWz4Cd+kOj5Twg9XD/JCXQQyd9y1EXKt0ZC+z6oT
iv9GblSCiMrJYS2ppJcLCJAnOFi2tuBub3rt7dnn2WBekzHUD5aDqR7CM/GLjOCK
pYOIpRBY9POjqhfYwQ35IM4MJL9ieFmCqUaRs3seNFwG9+IgFlsDDKUD5cL5R0A5
8pwmJoKczaN1EO3boQhUufJvz1PH/c+GPFuooc5b8Ov6rXtpr5I7dUICPZhLO8pF
Lkz6CwND9axK7xuKWmX7/okrxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+0IOOc
2GFJLn4hvXSU92z5e1n5MB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE
RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m
LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG
YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUZvc2xIOhtdzXM7fMMQX1T+N1nkWpvij48w3N6LqNLF0eP6Eni9uXTtVLB/J
SJmVz/5EnpV+3xS26W+AP68h6oF6Nypw6T3Oc1jYPgnqHIqeKlD6KBO0fzWnzY9m
q1Xa+Yeq4fD1cdYQ+3lAg3NCuuHkedLCIlaMAZQPLOfXy17b0s5RWexnC9VlquKl
xhFmcZNtsRH9x0Vk+YHCAL9A1jMJQetUYTwnzhyV/UMReCCrLl/GZY05PjmPjncl
vW0Z6L1sPzvz8QGcPKfNTerWalIW3V3yIN9ONlDTpukDk5MK8qwtTQFV2mUmNXQ7
3Fqo5Gg7y1CLjx5KfAQpfhUXNQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:25:12 2026 by rpki-client