
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier: CwtsPzU/UzDYvwx2OqawgKOHqn2dMhSCOmPLzQwX/8I=
Subject key identifier: 5A:E0:04:EB:CF:DF:1F:5B:DF:95:E1:69:A0:08:53:5F:8E:1D:38:54
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number: 010F
Signing time: Wed 25 Mar 2026 05:18:19 +0000
Manifest this update: Wed 25 Mar 2026 05:18:19 +0000
Manifest next update: Wed 01 Apr 2026 05:18:19 +0000
Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: dnvVRt3sLA+8Bf1r3shK3YRVB3i7NYpVBhsMQHtmyWI=)
2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: 5oMhHK5GexMn6Fihs/+IOJ93dC15hw4lCqu3Gtv/Uc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Validity
Not Before: Mar 25 05:18:19 2026 GMT
Not After : Apr 1 05:18:19 2026 GMT
Subject: CN=69c3701b-d2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:8f:ba:72:59:4c:c7:98:c8:ef:52:93:6d:
a5:b4:67:cd:0a:d3:4f:2e:1d:10:82:17:ea:61:d6:
47:2d:35:1e:9b:5d:21:bd:63:ea:41:f9:3a:a5:8e:
3b:8a:3f:75:a5:c7:d9:2d:89:85:2d:3c:cf:1b:5a:
1e:bf:1e:d4:e3:c4:b9:22:68:2f:8d:23:33:e5:a5:
02:c8:66:a9:3a:63:5e:f0:78:df:17:db:b5:b4:92:
7d:a8:84:b9:04:f0:d6:0f:a7:23:42:be:46:5f:57:
73:e7:2a:7c:55:57:ea:eb:54:8c:14:66:2d:45:75:
a2:23:30:ce:22:04:71:8a:82:73:1f:04:57:b2:40:
20:71:23:da:b4:a1:4a:44:04:bd:4a:00:92:1a:86:
b7:17:2a:13:e6:21:9a:98:e0:ca:a0:9c:70:94:53:
06:c3:7d:cd:f1:31:7f:9f:33:04:d1:8c:38:e9:fa:
bf:02:51:71:c6:8f:60:6e:d8:6e:62:b8:79:04:3c:
38:4f:96:17:78:39:7d:ea:e3:13:93:fb:45:bb:1d:
7f:a1:17:aa:d8:4e:48:24:1e:c7:70:cd:f2:f0:8e:
ca:2e:54:08:90:17:b8:82:c6:eb:e5:7e:53:8b:d2:
c9:88:16:f2:f5:a2:6c:9d:8b:3e:88:19:ea:cc:51:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:04:EB:CF:DF:1F:5B:DF:95:E1:69:A0:08:53:5F:8E:1D:38:54
X509v3 Authority Key Identifier:
keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:6a:6d:1f:2e:58:9e:0c:4e:bd:b3:ea:0e:b9:ce:39:6a:d9:
b7:85:83:f7:e2:e8:4e:6f:01:70:97:18:84:7b:66:26:b3:dc:
00:7c:51:9f:b2:6a:f7:f6:b8:e3:18:38:79:88:0c:ba:3a:5e:
2c:e2:3e:1a:b4:23:39:b2:83:e6:d8:44:e5:e8:31:da:95:aa:
5c:a8:3b:0d:75:bb:87:25:db:df:39:02:47:22:f2:06:e7:79:
62:52:f9:b8:6a:b4:1e:ea:4c:29:23:aa:b6:86:21:bf:db:e0:
f5:04:59:45:2b:1a:90:a0:5b:f7:0f:87:67:2a:c6:97:95:16:
54:1d:a9:d5:8d:b0:bb:e1:96:d8:9a:20:a7:b5:72:0c:2b:d8:
ec:63:f1:63:66:cf:48:8f:3f:b4:ad:98:d0:a3:f3:f6:75:5f:
8d:e0:bc:6e:30:56:45:40:42:69:ce:c1:dd:61:a1:d1:28:93:
f1:6c:20:11:6f:c6:76:ad:52:1d:0c:60:d5:f2:40:4e:f1:02:
e6:87:32:94:25:23:2a:7a:9c:a2:61:63:54:b0:8d:28:43:ee:
1b:82:ac:74:ad:b1:fb:94:d2:ed:ff:8a:87:04:88:d9:7f:7b:
e6:97:26:68:f9:96:32:9e:96:81:96:c1:7c:10:04:d6:dd:2e:
7b:37:b3:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy
NENERjVFNkIwHhcNMjYwMzI1MDUxODE5WhcNMjYwNDAxMDUxODE5WjAYMRYwFAYD
VQQDEw02OWMzNzAxYi1kMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxoOPunJZTMeYyO9Sk22ltGfNCtNPLh0QghfqYdZHLTUem10hvWPqQfk6pY47
ij91pcfZLYmFLTzPG1oevx7U48S5ImgvjSMz5aUCyGapOmNe8HjfF9u1tJJ9qIS5
BPDWD6cjQr5GX1dz5yp8VVfq61SMFGYtRXWiIzDOIgRxioJzHwRXskAgcSPatKFK
RAS9SgCSGoa3FyoT5iGamODKoJxwlFMGw33N8TF/nzME0Yw46fq/AlFxxo9gbthu
Yrh5BDw4T5YXeDl96uMTk/tFux1/oReq2E5IJB7HcM3y8I7KLlQIkBe4gsbr5X5T
i9LJiBby9aJsnYs+iBnqzFFAkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrgBOvP
3x9b35XhaaAIU1+OHThUMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD
RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5
QlJzb2FYS2JSbUVremZYbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlmptHy5YngxOvbPqDrnOOWrZt4WD9+LoTm8BcJcYhHtmJrPcAHxRn7Jq9/a4
4xg4eYgMujpeLOI+GrQjObKD5thE5egx2pWqXKg7DXW7hyXb3zkCRyLyBud5YlL5
uGq0HupMKSOqtoYhv9vg9QRZRSsakKBb9w+HZyrGl5UWVB2p1Y2wu+GW2Jogp7Vy
DCvY7GPxY2bPSI8/tK2Y0KPz9nVfjeC8bjBWRUBCac7B3WGh0SiT8WwgEW/Gdq1S
HQxg1fJATvEC5ocylCUjKnqcomFjVLCNKEPuG4KsdK2x+5TS7f+KhwSI2X975pcm
aPmWMp6WgZbBfBAE1t0uezez6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:43 2026 by rpki-client