
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
File: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json)
Hash identifier: tZbq34QM1l3vrx1M2ddZNxV8bldvw6ZT5arDZr5P5EU=
Subject key identifier: 92:DC:1F:81:E2:69:EA:02:AE:52:4D:6D:F7:60:5B:79:5C:87:96:FE
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
Manifest number: 88
Signing time: Mon 11 May 2026 07:44:51 +0000
Manifest this update: Mon 11 May 2026 07:44:50 +0000
Manifest next update: Mon 18 May 2026 07:44:50 +0000
Files and hashes: 1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: yllvxzG6FIPsWx4HhVJWlHGNO6fa9ZgynyTTmN4bZIw=)
2: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: gAF8NOxTri4lmRnjfw1NrjD/U5F8xAKVG+vonQB71no=)
3: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: gKh2lmx6ZZYyw96B7i0NN7NG7ZPJA6ncWMPAGGPkE84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Validity
Not Before: May 11 07:44:50 2026 GMT
Not After : May 18 07:44:50 2026 GMT
Subject: CN=6a0188f3-618a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:4e:d4:61:87:39:c9:55:e8:85:c9:a7:10:
ed:41:b2:10:ba:8d:0b:14:3b:bd:b5:d3:69:f1:bf:
e2:ef:ff:d7:e4:28:57:2b:21:6a:75:15:79:41:79:
f5:74:09:11:30:99:de:cb:d1:3a:86:e1:1f:6d:aa:
9a:58:7f:fa:f3:57:d2:d7:e7:9a:8d:88:d5:04:d7:
20:c8:b0:3a:01:0b:72:93:c1:61:f9:a3:2f:eb:82:
8e:1c:e0:e0:aa:52:3a:76:89:ff:b2:7e:47:6f:be:
1f:7a:6b:e7:22:6f:49:83:c0:a7:d5:91:70:5e:6f:
ae:4b:8f:b1:e7:5f:b9:f6:a1:7b:46:22:12:5d:e5:
60:a2:02:17:6d:d8:9c:76:05:5a:2b:c0:83:0f:c1:
b9:24:c1:bf:d1:e9:a6:44:6c:d9:e2:3a:fe:82:eb:
3b:5d:69:a4:92:15:0a:0b:d0:f9:0c:d3:52:84:cc:
7f:78:8c:cb:f2:02:03:f9:60:94:be:15:3f:b1:68:
c8:da:6f:3e:90:ed:9f:c9:81:b4:90:30:2d:74:0c:
bd:c7:97:2b:0b:79:f8:d9:d7:ca:09:11:42:6f:8b:
44:da:71:41:20:10:36:d8:92:cb:ba:1a:c0:69:d5:
f9:e4:1e:08:15:5e:ac:74:5a:de:a7:8a:9f:79:68:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DC:1F:81:E2:69:EA:02:AE:52:4D:6D:F7:60:5B:79:5C:87:96:FE
X509v3 Authority Key Identifier:
keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d6:36:f1:22:4e:34:7b:2a:75:30:ac:c4:3e:e8:cb:d7:a0:
fd:8b:21:69:ae:69:05:04:5b:c8:c5:1c:92:a8:2d:01:08:6a:
42:c4:4a:34:96:f0:4b:ef:6b:9b:a5:d5:ef:02:79:1f:16:b1:
98:93:d1:83:a1:b7:d9:25:89:db:ff:65:d2:00:89:b5:37:f2:
4f:87:68:3b:3c:a7:20:e0:bd:62:54:80:40:08:bf:23:26:44:
46:6b:1d:bf:dc:f8:5f:96:91:11:43:40:b7:69:df:85:19:9a:
84:c6:4b:2e:c5:9d:53:c9:42:ab:cc:b9:e5:97:b6:b2:6b:10:
b9:e9:d1:35:82:ac:fb:dd:2f:95:c1:1e:9c:67:a2:2a:99:cd:
6b:7e:a6:b3:96:e7:f9:63:f9:b3:e2:24:e8:52:5f:17:10:4e:
b6:c6:e5:53:f4:b7:e6:b5:45:90:e3:8f:70:df:54:87:82:5c:
26:f6:18:9e:18:4d:d2:5c:79:95:7f:56:bc:53:93:87:99:5a:
44:fd:84:96:91:a2:7b:da:c4:33:47:bd:85:0b:be:3d:0f:2e:
b8:e2:ad:aa:53:11:a1:b1:3e:0e:80:60:45:ae:f5:85:72:44:
39:ab:c1:11:77:41:5e:42:0a:49:51:d7:1f:59:ee:23:1e:29:
42:3f:0d:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZENEMxMTAvBgNVBAUTKDYzODMzQTI0MUUzRTQ5NTlFQkExOUM3MDFEMDQ4ODdE
QjRCMUZDNzQwHhcNMjYwNTExMDc0NDUwWhcNMjYwNTE4MDc0NDUwWjAYMRYwFAYD
VQQDEw02YTAxODhmMy02MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZtO1GGHOclV6IXJpxDtQbIQuo0LFDu9tdNp8b/i7//X5ChXKyFqdRV5QXn1
dAkRMJney9E6huEfbaqaWH/681fS1+eajYjVBNcgyLA6AQtyk8Fh+aMv64KOHODg
qlI6don/sn5Hb74femvnIm9Jg8Cn1ZFwXm+uS4+x51+59qF7RiISXeVgogIXbdic
dgVaK8CDD8G5JMG/0emmRGzZ4jr+gus7XWmkkhUKC9D5DNNShMx/eIzL8gID+WCU
vhU/sWjI2m8+kO2fyYG0kDAtdAy9x5crC3n42dfKCRFCb4tE2nFBIBA22JLLuhrA
adX55B4IFV6sdFrep4qfeWgKmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLcH4Hi
aeoCrlJNbfdgW3lch5b+MB8GA1UdIwQYMBaAFGODOiQePklZ66GccB0EiH20sfx0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkQ0Qy81NkVDM0Q5Qzgz
NkQxMUYwODgxNjAwNkFDNEY5QUUwMi9ZNE02SkI0LVNWbnJvWnh3SFFTSWZiU3hf
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1k0TTZKQjQtU1Zucm9aeHdIUVNJZmJTeF9IUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkQ0Qy81NkVDM0Q5QzgzNkQxMUYwODgxNjAwNkFDNEY5QUUwMi9ZNE02SkI0LVNW
bnJvWnh3SFFTSWZiU3hfSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvdY28SJONHsqdTCsxD7oy9eg/Yshaa5pBQRbyMUckqgtAQhqQsRKNJbwS+9r
m6XV7wJ5HxaxmJPRg6G32SWJ2/9l0gCJtTfyT4doOzynIOC9YlSAQAi/IyZERmsd
v9z4X5aREUNAt2nfhRmahMZLLsWdU8lCq8y55Ze2smsQuenRNYKs+90vlcEenGei
KpnNa36ms5bn+WP5s+Ik6FJfFxBOtsblU/S35rVFkOOPcN9Uh4JcJvYYnhhN0lx5
lX9WvFOTh5laRP2ElpGie9rEM0e9hQu+PQ8uuOKtqlMRobE+DoBgRa71hXJEOavB
EXdBXkIKSVHXH1nuIx4pQj8Nnw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:14 2026 by rpki-client