
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json)
Hash identifier: S7o5ITgfLmBJyRZ9R+6IxwhbRqdvJZEsIUrFwd1ToYI=
Subject key identifier: B9:7A:B2:E7:6E:29:47:BA:7C:5E:21:7C:FF:09:EB:DC:5F:70:08:3D
Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Certificate serial: 0574
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
Manifest number: 056B
Signing time: Tue 24 Mar 2026 23:02:27 +0000
Manifest this update: Tue 24 Mar 2026 23:02:26 +0000
Manifest next update: Tue 31 Mar 2026 23:02:26 +0000
Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: oJWwxFEKVlAj8r1rUE8XnH01+q6BuvSLdLPOrQNr5TM=)
2: 004A745EDBB011F0904A453A4D641951.roa (hash: 0TWkmfJVbCOLiU1v9M8I2M82G17YACYNARPjaSNnjI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Validity
Not Before: Mar 24 23:02:26 2026 GMT
Not After : Mar 31 23:02:26 2026 GMT
Subject: CN=69c31803-dd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:d6:a7:41:f9:05:96:4c:14:df:79:ff:cf:
42:43:fb:b5:51:d2:2e:c8:22:2e:62:9c:84:c3:b6:
9f:b5:ab:82:d1:04:d1:61:99:a7:4d:40:9b:1a:56:
1b:6c:61:f1:7d:4f:07:3f:f4:26:10:13:66:ba:77:
41:90:55:2f:50:00:ac:af:d0:4b:67:30:d1:c6:fb:
ee:0b:1b:3b:d1:13:b5:35:fa:14:0c:21:12:53:6c:
bd:09:5c:c6:b5:95:2c:10:dc:69:1d:f1:5b:09:20:
89:91:8a:84:a4:2d:32:31:66:f2:ac:91:3f:cb:ad:
f6:ae:b0:28:ab:ae:82:18:9b:6a:91:17:d7:d1:cc:
4e:54:47:04:36:f6:3a:55:b2:9c:2d:a0:9d:9d:7a:
ad:be:3a:07:38:b6:6b:d8:5b:f1:7a:b9:61:c7:73:
65:39:7b:d1:50:5d:9a:28:7a:14:f3:ae:3c:b6:a9:
39:db:73:de:29:f8:55:46:e5:c7:6c:31:53:96:e5:
0a:96:11:c8:06:30:67:47:3a:de:84:c8:6c:28:4b:
72:0e:a0:a0:88:a1:2b:03:71:15:93:a9:6e:0f:a9:
a5:ca:d0:2a:09:75:3b:34:0a:a0:e4:07:8c:1a:81:
df:4d:2e:00:ef:62:41:e3:93:d1:7a:94:12:08:38:
b4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:B2:E7:6E:29:47:BA:7C:5E:21:7C:FF:09:EB:DC:5F:70:08:3D
X509v3 Authority Key Identifier:
keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:f4:4e:18:75:16:70:c6:91:75:33:07:5a:76:ae:a9:a2:88:
a0:0c:a8:b3:50:8a:2b:0c:c6:79:ed:92:cb:5b:82:92:a5:74:
c9:3a:d6:25:0f:c7:ae:d7:09:a0:f7:91:05:e6:a3:25:4b:fb:
d1:c8:23:ae:ab:3a:19:f0:93:b1:e3:77:fd:b8:38:85:43:38:
9b:fd:ed:1f:f3:00:fb:68:61:b7:1d:2e:a0:59:05:d5:9f:80:
57:0b:86:a6:74:e6:6d:af:37:65:ed:85:37:41:74:cd:b7:81:
f3:81:c2:b1:11:e2:b2:a9:fc:b8:2e:31:89:fb:d0:43:9d:9a:
58:07:d0:c5:c3:56:b5:6e:60:b2:2d:ff:fe:83:e8:9a:3c:5d:
75:d9:aa:6b:82:a7:58:60:62:23:76:3a:46:c7:1b:cf:82:ce:
46:1d:fc:0b:c9:f3:ab:2b:df:57:6e:64:e3:f6:f9:e5:0a:c7:
08:75:8e:d5:c5:bd:fa:54:92:50:79:51:d3:17:fa:d3:eb:89:
ed:c6:67:27:01:ab:f4:8e:b0:0c:40:47:1c:08:d2:c6:b9:6b:
64:2d:4e:53:05:2d:c0:fb:22:a0:f9:50:9e:ed:6b:f8:01:ce:
62:2d:2d:e4:a8:0d:bc:95:f8:0d:d1:93:7f:ca:5f:af:51:85:
29:d1:65:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF
NDgzRUY1RjIwHhcNMjYwMzI0MjMwMjI2WhcNMjYwMzMxMjMwMjI2WjAYMRYwFAYD
VQQDEw02OWMzMTgwMy1kZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnKrWp0H5BZZMFN95/89CQ/u1UdIuyCIuYpyEw7aftauC0QTRYZmnTUCbGlYb
bGHxfU8HP/QmEBNmundBkFUvUACsr9BLZzDRxvvuCxs70RO1NfoUDCESU2y9CVzG
tZUsENxpHfFbCSCJkYqEpC0yMWbyrJE/y632rrAoq66CGJtqkRfX0cxOVEcENvY6
VbKcLaCdnXqtvjoHOLZr2Fvxerlhx3NlOXvRUF2aKHoU8648tqk523PeKfhVRuXH
bDFTluUKlhHIBjBnRzrehMhsKEtyDqCgiKErA3EVk6luD6mlytAqCXU7NAqg5AeM
GoHfTS4A72JB45PRepQSCDi0vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLl6sudu
KUe6fF4hfP8J69xfcAg9MB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1
QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzAzOS9CQjUzMjNFODI1QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFk
X1BIZWtFeWN2bkhrZy05ZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIfROGHUWcMaRdTMHWnauqaKIoAyos1CKKwzGee2Sy1uCkqV0yTrWJQ/HrtcJ
oPeRBeajJUv70cgjrqs6GfCTseN3/bg4hUM4m/3tH/MA+2hhtx0uoFkF1Z+AVwuG
pnTmba83Ze2FN0F0zbeB84HCsRHisqn8uC4xifvQQ52aWAfQxcNWtW5gsi3//oPo
mjxdddmqa4KnWGBiI3Y6Rscbz4LORh38C8nzqyvfV25k4/b55QrHCHWO1cW9+lSS
UHlR0xf60+uJ7cZnJwGr9I6wDEBHHAjSxrlrZC1OUwUtwPsioPlQnu1r+AHOYi0t
5KgNvJX4DdGTf8pfr1GFKdFlOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:51:06 2026 by rpki-client