
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json)
Hash identifier: Lz2hqtUE5OCdTW3sqUXTaYCSLe+BS6k6hcKMu+FmD0Y=
Subject key identifier: 00:B1:FE:D0:91:AE:61:2A:96:FC:FF:95:A8:61:77:4A:4C:F7:EF:8E
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 1152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
Manifest number: 1137
Signing time: Wed 22 Jul 2026 17:23:00 +0000
Manifest this update: Wed 22 Jul 2026 17:23:00 +0000
Manifest next update: Wed 29 Jul 2026 17:23:00 +0000
Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: Z5Z0I4ocWakP7GSGSij53Y4LiNXPvoYB+kU8OoJNOlE=)
2: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: MInSGZWk/+V+/O784VPQkOPEvkikcYw1hh5xAfaMy+Y=)
3: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: QNd+7yoJE7XGdb3l9stbVIXGPJdYrSjK5lDsTdFfmX0=)
4: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: aScypq58ma32Blk4gXAn5hRCMA++RlRKUglRyBdAIIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4434 (0x1152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: Jul 22 17:23:00 2026 GMT
Not After : Jul 29 17:23:00 2026 GMT
Subject: CN=6a60fc74-c1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:90:7f:71:df:b3:93:14:24:13:d2:fb:dc:
ff:5d:2c:60:b5:ca:52:f3:43:ac:b2:93:7e:42:86:
77:9d:e5:73:78:b0:48:6b:85:8d:58:df:63:2b:1a:
93:a3:b1:46:20:d8:7c:a3:53:75:30:97:a1:15:ce:
54:f6:f1:ea:c7:b0:34:9c:14:f0:15:08:6a:f8:a9:
d8:45:03:d1:19:27:2d:52:03:a3:d6:a8:27:b8:17:
e8:5a:c3:24:39:f6:2b:97:5b:38:7e:d5:ab:83:e4:
4d:b8:c8:53:77:b9:b8:58:3a:f3:f4:d4:08:ab:4e:
c1:45:26:81:ba:be:ef:b4:9b:33:27:d8:8c:b8:b8:
64:3c:4f:b4:cf:6b:7a:80:69:06:ff:05:a3:04:37:
b4:e8:dd:4c:87:2d:e7:e1:2f:9e:b4:65:13:45:42:
5b:6f:f5:17:7f:f4:7f:40:28:f9:3d:1c:90:18:db:
e1:f5:ba:08:56:2a:5e:8f:cc:39:12:71:f0:db:94:
08:3a:2f:f4:d7:dd:7c:81:e3:0e:43:e8:8e:22:2c:
0f:b0:1f:09:2a:b9:ed:d2:e9:1e:47:5c:f0:4d:e2:
cf:07:12:3b:7b:94:1b:58:0e:98:ff:6c:41:fc:6b:
5b:50:25:96:a7:2f:a1:26:1a:4a:bf:52:c8:97:d4:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B1:FE:D0:91:AE:61:2A:96:FC:FF:95:A8:61:77:4A:4C:F7:EF:8E
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:78:74:a4:df:8c:aa:95:c2:d3:34:93:d8:7e:81:e2:6b:37:
43:00:22:fc:96:e1:fe:76:d4:7a:30:46:b2:b1:ce:6d:65:7f:
94:60:d7:c6:e6:24:df:af:7e:77:59:bd:a1:00:c5:75:79:ef:
20:74:5a:9c:9c:97:ac:57:63:2d:4f:3d:a6:6a:fa:49:ae:fd:
fb:4d:53:40:4a:7b:85:7f:1a:be:37:8d:dc:a4:72:93:e4:d5:
70:0d:cb:60:38:18:e2:05:19:44:85:f7:63:5a:8f:e0:e0:6b:
a5:92:1c:d8:d7:46:3a:2a:90:39:f2:36:88:9f:d3:f3:9b:62:
69:b7:c3:2b:41:55:77:06:11:7d:d3:e1:a6:7b:68:06:4b:3b:
98:8e:dd:ef:49:cc:79:66:7c:3a:50:92:e6:7c:95:64:43:6b:
5d:4e:62:8b:37:0c:aa:1c:a9:97:5b:55:b8:c6:ad:29:93:1a:
46:ee:14:8a:71:0a:7f:68:4e:42:e0:46:f3:17:c8:98:68:10:
48:df:1a:94:31:69:e1:69:db:fe:48:a3:57:0d:13:7b:31:fe:
40:30:b2:55:e2:1b:f6:a1:43:b3:28:ff:69:93:1e:2c:c0:2d:
09:27:28:bd:54:ab:78:70:56:37:9d:72:11:16:0e:4c:07:48:
43:01:5d:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx
RkI5QTVGMkEwHhcNMjYwNzIyMTcyMzAwWhcNMjYwNzI5MTcyMzAwWjAYMRYwFAYD
VQQDEw02YTYwZmM3NC1jMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0mCQf3Hfs5MUJBPS+9z/XSxgtcpS80OsspN+QoZ3neVzeLBIa4WNWN9jKxqT
o7FGINh8o1N1MJehFc5U9vHqx7A0nBTwFQhq+KnYRQPRGSctUgOj1qgnuBfoWsMk
OfYrl1s4ftWrg+RNuMhTd7m4WDrz9NQIq07BRSaBur7vtJszJ9iMuLhkPE+0z2t6
gGkG/wWjBDe06N1Mhy3n4S+etGUTRUJbb/UXf/R/QCj5PRyQGNvh9boIVipej8w5
EnHw25QIOi/01918geMOQ+iOIiwPsB8JKrnt0ukeR1zwTeLPBxI7e5QbWA6Y/2xB
/GtbUCWWpy+hJhpKv1LIl9QrVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACx/tCR
rmEqlvz/lahhd0pM9++OMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5
MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzU1OC8wRjIxMjE0RTM5MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0
V0Y0eENzMk5feXNmdWFYeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO3h0pN+MqpXC0zST2H6B4ms3QwAi/Jbh/nbUejBGsrHObWV/lGDXxuYk369+
d1m9oQDFdXnvIHRanJyXrFdjLU89pmr6Sa79+01TQEp7hX8avjeN3KRyk+TVcA3L
YDgY4gUZRIX3Y1qP4OBrpZIc2NdGOiqQOfI2iJ/T85tiabfDK0FVdwYRfdPhpnto
Bks7mI7d70nMeWZ8OlCS5nyVZENrXU5iizcMqhypl1tVuMatKZMaRu4UinEKf2hO
QuBG8xfImGgQSN8alDFp4Wnb/kijVw0TezH+QDCyVeIb9qFDsyj/aZMeLMAtCSco
vVSreHBWN51yERYOTAdIQwFdYA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:14 2026 by rpki-client