
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
File: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json)
Hash identifier: s755eQQxIhkINsi3JBfI8zLZuBstlatucY+u76mBfkQ=
Subject key identifier: 0D:5C:C9:E6:55:C0:23:9C:7B:96:98:84:7E:7C:56:33:5F:86:49:D3
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
Manifest number: 70
Signing time: Wed 25 Mar 2026 07:05:06 +0000
Manifest this update: Wed 25 Mar 2026 07:05:05 +0000
Manifest next update: Wed 01 Apr 2026 07:05:05 +0000
Files and hashes: 1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: DgvFMH/ANKXRithUGF+gE29nLBMSKnuv6WCHTGXM7Ps=)
2: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: gKh2lmx6ZZYyw96B7i0NN7NG7ZPJA6ncWMPAGGPkE84=)
3: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: gAF8NOxTri4lmRnjfw1NrjD/U5F8xAKVG+vonQB71no=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Validity
Not Before: Mar 25 07:05:05 2026 GMT
Not After : Apr 1 07:05:05 2026 GMT
Subject: CN=69c38922-7075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:48:fe:ae:a7:b7:1b:0d:5a:9e:44:73:ab:
ab:70:d6:cc:fd:ee:28:68:f4:1a:53:9f:76:7e:e4:
a9:d9:82:d4:14:9d:ad:ec:65:d6:0e:9a:ab:88:91:
09:cf:15:ec:92:52:fd:d0:2f:e8:42:57:ae:48:e5:
6b:c5:aa:41:33:ba:8b:29:2f:a3:65:69:95:4a:0e:
84:ce:be:1f:b3:72:f5:5d:d2:a1:eb:40:ec:f8:41:
56:f2:b3:a5:1f:89:27:4e:e7:09:76:8c:27:73:89:
5e:f1:b4:80:a0:e7:d5:ac:ef:39:38:b8:75:08:ba:
4e:f4:b1:e2:92:cc:cf:de:c3:a2:58:ca:38:8a:93:
e7:84:bb:54:c8:68:9e:8c:f8:86:00:d5:5a:69:d1:
84:48:19:22:72:b2:6a:14:07:48:fc:bd:ff:44:e0:
b7:0b:e8:85:3c:62:2d:02:d5:bd:62:a5:99:d3:21:
dd:1a:69:d4:8f:a5:a9:a9:70:44:5f:fa:5b:f4:22:
41:d1:bd:7e:4e:dc:55:98:ad:b4:63:90:4a:47:e2:
cc:e6:25:ea:30:6a:2d:98:03:27:a6:c2:93:b0:47:
bd:fa:40:ba:c5:74:1b:e1:d5:99:e8:0d:f1:33:cd:
8d:5c:fc:f5:c0:05:fb:07:51:e9:00:cc:6c:c3:a8:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5C:C9:E6:55:C0:23:9C:7B:96:98:84:7E:7C:56:33:5F:86:49:D3
X509v3 Authority Key Identifier:
keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4a:9c:94:b5:12:1d:68:0f:b8:ec:29:d3:4c:78:fd:37:1e:
c0:25:d9:97:68:97:73:fb:91:d5:cc:03:2e:26:b0:8e:86:63:
c3:46:b5:61:31:6c:f0:db:e0:d3:76:4f:3b:67:8f:6c:22:62:
b0:1f:47:81:22:1c:f7:75:28:98:61:92:60:8d:d8:b2:20:81:
22:38:07:24:00:11:1c:33:c5:fc:f8:83:81:df:f1:5a:4d:44:
0b:09:4e:19:39:21:f2:5b:2e:70:7d:46:0f:27:48:3a:14:7e:
93:dc:76:64:91:ac:b7:42:ee:e6:81:fe:3e:d4:4d:92:ab:2d:
e5:28:8b:9c:2a:5e:9a:78:fd:05:60:1c:de:36:5d:e4:09:e0:
78:29:bd:b7:f1:a7:29:69:6f:47:38:21:23:fa:c7:c8:d3:36:
40:03:56:1b:1f:c0:7d:43:7e:8f:11:20:41:c0:86:e4:97:39:
0c:ef:34:f7:85:9f:b8:8e:69:f0:d3:e0:cb:8b:6a:9b:0f:da:
0a:02:14:87:eb:a1:8d:d0:bb:eb:1d:24:6f:4b:90:47:91:4b:
e0:fa:83:cc:6f:c1:81:a2:de:f1:dc:04:0d:d3:86:99:e9:80:
42:0c:30:02:34:42:2b:49:12:55:be:d7:d1:a0:b8:8d:ff:6e:
05:3e:1a:ca
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RkQ0QzExMC8GA1UEBRMoNjM4MzNBMjQxRTNFNDk1OUVCQTE5QzcwMUQwNDg4N0RC
NEIxRkM3NDAeFw0yNjAzMjUwNzA1MDVaFw0yNjA0MDEwNzA1MDVaMBgxFjAUBgNV
BAMTDTY5YzM4OTIyLTcwNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCF+Ej+rqe3Gw1ankRzq6tw1sz97iho9BpTn3Z+5KnZgtQUna3sZdYOmquIkQnP
FeySUv3QL+hCV65I5WvFqkEzuospL6NlaZVKDoTOvh+zcvVd0qHrQOz4QVbys6Uf
iSdO5wl2jCdziV7xtICg59Ws7zk4uHUIuk70seKSzM/ew6JYyjiKk+eEu1TIaJ6M
+IYA1Vpp0YRIGSJysmoUB0j8vf9E4LcL6IU8Yi0C1b1ipZnTId0aadSPpampcERf
+lv0IkHRvX5O3FWYrbRjkEpH4szmJeowai2YAyemwpOwR736QLrFdBvh1ZnoDfEz
zY1c/PXABfsHUekAzGzDqKHXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDVzJ5lXA
I5x7lpiEfnxWM1+GSdMwHwYDVR0jBBgwFoAUY4M6JB4+SVnroZxwHQSIfbSx/HQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRDRDLzU2RUMzRDlDODM2
RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zucm9aeHdIUVNJZmJTeF9I
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWTRNNkpCNC1TVm5yb1p4d0hRU0lmYlN4X0hRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG
RDRDLzU2RUMzRDlDODM2RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zu
cm9aeHdIUVNJZmJTeF9IUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCuSpyUtRIdaA+47CnTTHj9Nx7AJdmXaJdz+5HVzAMuJrCOhmPDRrVhMWzw2+DT
dk87Z49sImKwH0eBIhz3dSiYYZJgjdiyIIEiOAckABEcM8X8+IOB3/FaTUQLCU4Z
OSHyWy5wfUYPJ0g6FH6T3HZkkay3Qu7mgf4+1E2Sqy3lKIucKl6aeP0FYBzeNl3k
CeB4Kb238acpaW9HOCEj+sfI0zZAA1YbH8B9Q36PESBBwIbklzkM7zT3hZ+4jmnw
0+DLi2qbD9oKAhSH66GN0LvrHSRvS5BHkUvg+oPMb8GBot7x3AQN04aZ6YBCDDAC
NEIrSRJVvtfRoLiN/24FPhrK
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:57 2026 by rpki-client