
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json)
Hash identifier: DwyIhhNvezr6o2q1s+9eBaadNEunVubfFgazmdY7r5U=
Subject key identifier: AD:08:B9:FA:5F:69:AF:BE:04:61:58:AA:FC:53:4B:2B:A9:5D:61:66
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial: 087F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
Manifest number: 086B
Signing time: Sat 14 Nov 2026 20:48:30 +0000
Manifest this update: Sat 14 Nov 2026 20:48:29 +0000
Manifest next update: Sat 21 Nov 2026 20:48:29 +0000
Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: SgN75fufdH9Nx/Vjr3aBuu2h8HPpYCKbig1dfiDrPXA=)
2: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: Bjs5lfBqpZzgmWDJV0Xu1gn8UB3T2IWjUyjfP7AxZYw=)
3: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: zGjBv3KjTdJ9K8ezQZ4lGTuieMHEGvxttP2L5olrWPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Validity
Not Before: Nov 14 20:48:29 2026 GMT
Not After : Nov 21 20:48:29 2026 GMT
Subject: CN=6af8c91e-dda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:ca:94:87:4d:34:95:6a:8c:ee:b7:ec:b2:
ca:68:1d:ac:9c:70:fb:68:32:5f:7d:d5:9f:9d:5b:
26:34:77:3f:18:21:8a:e9:d0:91:84:e9:b1:ed:5e:
90:94:00:25:fd:e6:2b:57:79:49:a6:5e:b8:ae:47:
4e:34:c1:ef:b5:4c:fb:18:e5:f1:e2:cb:bb:99:e8:
5d:77:ed:fe:44:bb:4f:28:9c:21:25:82:f8:02:e1:
ac:b6:b6:b4:69:53:67:89:9d:11:e1:2f:45:a8:8e:
1e:b8:d2:b8:95:43:5d:76:c2:79:f7:1c:42:49:02:
13:10:08:14:d7:7f:5e:35:2b:55:13:0f:ab:d4:5a:
3e:66:6d:0e:24:41:a3:e3:8f:68:80:a5:f5:09:cd:
7c:4c:71:b4:56:cc:23:1b:c0:9b:4f:4e:77:27:97:
15:63:64:d3:7f:54:d7:c3:d6:a0:25:f7:e7:57:eb:
04:60:d2:02:cc:89:52:75:a7:dd:36:b3:19:8a:ea:
e5:1b:ee:6f:fa:fe:e2:7e:ba:e9:a6:6f:46:ce:97:
54:0c:55:f1:38:ac:f4:1b:63:b9:6f:70:b2:5d:de:
20:2b:71:91:2c:1c:10:c7:7d:f6:82:00:ac:56:c2:
99:3d:a7:ea:8e:24:b1:24:5e:30:1f:e1:f9:8f:fe:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:B9:FA:5F:69:AF:BE:04:61:58:AA:FC:53:4B:2B:A9:5D:61:66
X509v3 Authority Key Identifier:
keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:e1:5b:26:a2:33:cd:58:20:9b:80:52:2d:ed:af:e8:3b:f7:
69:dc:08:b9:5a:60:0d:2c:e0:59:b3:26:32:cc:62:19:50:40:
6d:14:86:f1:74:77:90:bb:49:db:84:7a:b7:33:1b:f5:a8:c8:
37:1b:60:9e:36:16:bf:e1:d6:c2:f1:49:b3:b1:63:3e:bb:a8:
c7:3f:70:41:6f:4c:63:6d:90:f4:9e:7a:a5:5c:7d:6d:1b:9b:
99:8e:74:b3:c5:64:b9:d9:36:f1:08:7f:f8:61:7f:75:8b:d6:
9a:ee:39:2e:fb:db:fb:86:04:95:d2:69:3a:de:06:23:69:ef:
6f:91:07:ff:15:9e:46:ef:93:b7:5e:f1:37:6e:8f:49:e0:92:
62:76:4b:0f:dd:e5:57:e6:d2:9c:fc:b0:c1:e2:13:ff:6d:86:
e8:35:09:d0:17:c5:c9:6f:cd:0e:85:de:51:83:30:9e:f9:5c:
b8:44:a0:31:e8:fe:35:95:17:90:0c:5e:98:a6:fc:6b:4e:36:
aa:ff:c1:c0:d1:03:c2:6c:e1:81:1f:93:1a:e3:4a:14:e2:07:
0f:8e:85:02:83:ee:32:c5:ad:1f:4a:52:45:6c:90:33:59:fb:
17:2a:2f:cd:73:b8:0c:e3:da:c4:72:b6:62:2b:f2:0a:9a:57:
31:c0:fd:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx
RjY0QzdCQUYwHhcNMjYxMTE0MjA0ODI5WhcNMjYxMTIxMjA0ODI5WjAYMRYwFAYD
VQQDEw02YWY4YzkxZS1kZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlKvKlIdNNJVqjO637LLKaB2snHD7aDJffdWfnVsmNHc/GCGK6dCRhOmx7V6Q
lAAl/eYrV3lJpl64rkdONMHvtUz7GOXx4su7mehdd+3+RLtPKJwhJYL4AuGstra0
aVNniZ0R4S9FqI4euNK4lUNddsJ59xxCSQITEAgU139eNStVEw+r1Fo+Zm0OJEGj
449ogKX1Cc18THG0VswjG8CbT053J5cVY2TTf1TXw9agJffnV+sEYNICzIlSdafd
NrMZiurlG+5v+v7ifrrppm9GzpdUDFXxOKz0G2O5b3CyXd4gK3GRLBwQx332ggCs
VsKZPafqjiSxJF4wH+H5j/74zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0Iufpf
aa++BGFYqvxTSyupXWFmMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0
OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI
OWRCa0N5MzNYZThmWk1lNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcOFbJqIzzVggm4BSLe2v6Dv3adwIuVpgDSzgWbMmMsxiGVBAbRSG8XR3kLtJ
24R6tzMb9ajINxtgnjYWv+HWwvFJs7FjPruoxz9wQW9MY22Q9J56pVx9bRubmY50
s8Vkudk28Qh/+GF/dYvWmu45Lvvb+4YEldJpOt4GI2nvb5EH/xWeRu+Tt17xN26P
SeCSYnZLD93lV+bSnPywweIT/22G6DUJ0BfFyW/NDoXeUYMwnvlcuESgMej+NZUX
kAxemKb8a042qv/BwNEDwmzhgR+TGuNKFOIHD46FAoPuMsWtH0pSRWyQM1n7Fyov
zXO4DOPaxHK2YivyCppXMcD9yQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:31:25 2026 by rpki-client