
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json)
Hash identifier: UL2Nn3EYqo4SEvqSXvUVKwzT/XtPx1GJxYucoW7WZCc=
Subject key identifier: 5B:A1:33:54:6A:F5:24:08:A3:D1:5B:A4:76:D3:9D:67:24:42:6F:CA
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial: 081C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
Manifest number: 080A
Signing time: Tue 12 May 2026 21:14:35 +0000
Manifest this update: Tue 12 May 2026 21:14:34 +0000
Manifest next update: Tue 19 May 2026 21:14:34 +0000
Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: Hgi9+AfQZ7A04tsPtb2Gea6PI4Q+stgPdN59koflrvw=)
2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: qglLYq7r5hz5k4fW3XvsL6XPXtp+KRbOwdrUaMlNod8=)
3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: u+6wnGx2BCNffz/w+UONTWtqIYdeVxC/HbLsF2PYqHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Validity
Not Before: May 12 21:14:34 2026 GMT
Not After : May 19 21:14:34 2026 GMT
Subject: CN=6a03983b-125a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:68:98:88:e6:c3:6d:c2:b1:02:52:b5:7c:
a5:30:6f:fe:f8:f3:6e:df:30:ce:19:b7:7f:3e:c1:
6e:ac:5b:bd:4f:ba:51:33:1c:52:6e:dc:23:fc:1c:
56:df:5c:d9:8d:85:40:46:a9:39:b0:3a:b9:2c:89:
e6:6b:f4:33:0c:a4:1d:9d:15:6f:6d:03:b0:f0:e4:
e8:7a:4f:5e:90:0f:db:89:03:f4:1b:14:10:a9:07:
70:54:b9:6d:ee:79:e4:35:c9:4d:32:57:95:f9:74:
dc:3a:55:bc:5e:00:27:be:79:c6:85:09:87:e8:97:
54:06:63:ff:f2:24:09:af:fc:12:d1:2c:a1:12:b5:
09:64:59:bf:7f:4d:8b:b3:ae:e3:ba:ab:ae:ab:dc:
85:00:4c:4e:a1:b4:2e:dc:d6:da:df:90:48:00:ac:
3d:a2:99:63:34:24:a3:ba:c3:71:d1:1c:3c:59:32:
aa:5b:cb:f1:ab:72:e2:88:d3:48:9c:47:24:52:cc:
08:de:ef:c4:22:f9:37:15:80:7a:cd:68:fa:d5:96:
e8:72:63:ce:47:eb:be:69:d5:f1:dd:14:0a:4c:eb:
ab:4f:10:e2:69:9f:f6:cc:28:bb:3a:6d:0a:6c:d5:
89:8a:e9:eb:29:1b:1a:2c:c2:12:89:ed:10:eb:f2:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A1:33:54:6A:F5:24:08:A3:D1:5B:A4:76:D3:9D:67:24:42:6F:CA
X509v3 Authority Key Identifier:
keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:ed:dc:00:93:20:3a:a5:bf:d7:94:ff:70:4f:09:98:20:37:
4d:e9:9c:25:38:d8:71:4c:4b:e7:73:23:25:21:1d:3a:e0:b7:
6e:d8:76:15:07:16:6f:9b:32:c3:f8:a6:e8:93:a7:8a:62:ae:
5f:77:07:ea:d7:f6:47:81:7c:7b:67:a2:fc:a9:6f:ef:db:64:
56:7f:69:56:15:b7:67:23:fa:12:87:8d:63:33:37:a0:73:f0:
03:fe:6b:2c:f3:fb:57:95:0e:5b:b1:13:ff:64:e3:37:3e:89:
d6:3f:00:5b:f7:a4:0b:6b:2c:93:95:7b:92:c5:c0:56:40:dc:
3d:12:b6:dc:7d:9c:d6:45:4c:ca:a1:ee:02:ff:61:9f:81:92:
e7:a7:00:44:1a:c8:51:50:0c:93:2f:a1:09:1e:31:6b:ff:7a:
12:ff:90:2a:68:7d:4d:c3:f0:f9:d1:df:e5:cb:5a:6e:67:16:
88:eb:47:cc:20:bb:0a:88:8b:0a:32:f6:1c:95:1d:00:4e:00:
01:be:d6:5d:1d:49:52:d9:4a:31:9a:aa:ed:27:48:af:d4:1c:
0d:ab:ba:cf:46:ba:ce:94:5e:0f:7e:cc:ef:58:77:ae:e2:92:
df:64:7d:bd:86:83:16:0c:e1:06:80:b1:d0:2d:24:59:eb:9a:
e3:50:22:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx
RjY0QzdCQUYwHhcNMjYwNTEyMjExNDM0WhcNMjYwNTE5MjExNDM0WjAYMRYwFAYD
VQQDEw02YTAzOTgzYi0xMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA13xomIjmw23CsQJStXylMG/++PNu3zDOGbd/PsFurFu9T7pRMxxSbtwj/BxW
31zZjYVARqk5sDq5LInma/QzDKQdnRVvbQOw8OToek9ekA/biQP0GxQQqQdwVLlt
7nnkNclNMleV+XTcOlW8XgAnvnnGhQmH6JdUBmP/8iQJr/wS0SyhErUJZFm/f02L
s67juquuq9yFAExOobQu3Nba35BIAKw9opljNCSjusNx0Rw8WTKqW8vxq3LiiNNI
nEckUswI3u/EIvk3FYB6zWj61ZbocmPOR+u+adXx3RQKTOurTxDiaZ/2zCi7Om0K
bNWJiunrKRsaLMISie0Q6/I/2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuhM1Rq
9SQIo9FbpHbTnWckQm/KMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0
OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI
OWRCa0N5MzNYZThmWk1lNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAku3cAJMgOqW/15T/cE8JmCA3TemcJTjYcUxL53MjJSEdOuC3bth2FQcWb5sy
w/im6JOnimKuX3cH6tf2R4F8e2ei/Klv79tkVn9pVhW3ZyP6EoeNYzM3oHPwA/5r
LPP7V5UOW7ET/2TjNz6J1j8AW/ekC2ssk5V7ksXAVkDcPRK23H2c1kVMyqHuAv9h
n4GS56cARBrIUVAMky+hCR4xa/96Ev+QKmh9TcPw+dHf5ctabmcWiOtHzCC7CoiL
CjL2HJUdAE4AAb7WXR1JUtlKMZqq7SdIr9QcDau6z0a6zpReD37M71h3ruKS32R9
vYaDFgzhBoCx0C0kWeua41Aicw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:41:10 2026 by rpki-client