
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier: ZUdbk1GYvnlVT1wBNFEXeFZV7cGIUiUXS6RQFamVeIc=
Subject key identifier: C9:28:6B:50:DC:7C:16:D0:70:3B:D7:37:E9:5A:62:BA:8D:99:39:B4
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number: 0129
Signing time: Mon 11 May 2026 05:53:36 +0000
Manifest this update: Mon 11 May 2026 05:53:36 +0000
Manifest next update: Mon 18 May 2026 05:53:36 +0000
Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: nrHoifUwyiIUWc6yh7UpqiBzLK/3px3JmNcQeqM1PfI=)
2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: GShmLLZyIO7t2gH3mgsqYTIagHhCJ4qJGdBs3grosz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Validity
Not Before: May 11 05:53:36 2026 GMT
Not After : May 18 05:53:36 2026 GMT
Subject: CN=6a016ee0-c730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:62:a1:45:06:1e:78:e2:04:f2:a5:12:c9:
08:84:c5:0c:5b:40:62:eb:52:3b:f2:f5:04:ac:2b:
1f:77:68:42:78:49:9c:20:e3:5c:ea:80:1d:51:b1:
9f:a3:ea:55:ea:b6:8b:eb:7f:98:28:59:73:3f:16:
72:01:b5:3c:33:96:f9:2b:77:e4:d6:fa:6a:93:ab:
26:ea:1d:0b:0f:16:bd:ca:d1:76:74:24:d3:70:7d:
b0:60:19:43:98:f4:b6:7b:51:fd:45:fa:60:75:10:
a7:14:c4:ea:0d:bd:5c:1d:7d:8c:9f:67:c5:cc:81:
f6:06:85:53:b1:20:47:a6:c4:2a:ac:ae:f1:88:3e:
cf:f9:6a:c8:96:f2:35:43:2b:fc:af:6e:46:b4:f4:
8c:ed:29:a7:9c:1e:22:93:fd:68:ef:20:be:4a:6a:
25:bd:8a:36:44:fe:66:3c:bc:f9:5b:12:01:05:b5:
c5:3c:a0:06:a4:d5:69:b3:cb:d9:e2:cb:8d:17:88:
b1:25:54:64:3a:23:da:f2:74:11:6c:bd:11:b1:d5:
ac:5a:ac:26:ad:47:71:c4:d1:f0:e4:19:aa:3f:6e:
fe:64:3a:7d:2b:74:8e:87:3c:e5:ac:a5:af:03:97:
b8:97:e8:0d:d6:36:6e:91:fb:cd:bc:4e:58:65:4c:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:28:6B:50:DC:7C:16:D0:70:3B:D7:37:E9:5A:62:BA:8D:99:39:B4
X509v3 Authority Key Identifier:
keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:ea:65:f7:08:f2:2d:3d:3d:0f:fc:c4:7b:f4:bf:0b:bb:06:
ef:68:8d:87:6f:24:ed:11:b2:2c:0a:e3:de:af:dd:7a:86:e5:
18:21:f4:b9:dc:f3:cb:f0:82:c5:c4:38:1b:6f:9c:7c:13:75:
7f:b2:b9:88:d8:30:3a:8b:02:aa:7b:23:63:e1:f0:8a:34:5f:
4f:d6:ea:60:35:fe:83:71:98:5f:a4:df:41:c0:8d:63:7d:d2:
e6:3f:73:46:06:de:21:d6:09:92:d4:d1:e7:bd:3b:e9:a6:17:
5e:be:43:32:dd:c1:42:c4:dd:19:e2:c1:a6:54:c2:a8:48:dc:
a4:9f:4f:da:a9:ab:3e:01:88:d0:a9:93:93:3c:1f:28:64:06:
ff:e6:04:7a:36:ad:67:e6:52:45:2b:d6:ad:87:76:6e:a1:09:
8b:49:a7:a6:e0:b3:29:79:8a:e7:be:78:26:5e:19:f0:c3:11:
4e:1e:89:88:b5:9f:f9:fb:5e:d5:d8:7d:12:b6:4f:df:4d:7c:
2c:80:e7:e9:10:25:81:52:3c:59:40:7b:b5:3e:4f:31:5e:7d:
8b:4f:b2:b6:68:dc:f6:39:81:cc:58:1c:7f:74:44:d7:1d:26:
5d:17:63:7e:a9:41:8d:8a:ed:14:ec:8b:45:e0:ef:39:ef:39:
cb:4f:93:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy
NENERjVFNkIwHhcNMjYwNTExMDU1MzM2WhcNMjYwNTE4MDU1MzM2WjAYMRYwFAYD
VQQDEw02YTAxNmVlMC1jNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzDBioUUGHnjiBPKlEskIhMUMW0Bi61I78vUErCsfd2hCeEmcIONc6oAdUbGf
o+pV6raL63+YKFlzPxZyAbU8M5b5K3fk1vpqk6sm6h0LDxa9ytF2dCTTcH2wYBlD
mPS2e1H9RfpgdRCnFMTqDb1cHX2Mn2fFzIH2BoVTsSBHpsQqrK7xiD7P+WrIlvI1
Qyv8r25GtPSM7SmnnB4ik/1o7yC+SmolvYo2RP5mPLz5WxIBBbXFPKAGpNVps8vZ
4suNF4ixJVRkOiPa8nQRbL0RsdWsWqwmrUdxxNHw5BmqP27+ZDp9K3SOhzzlrKWv
A5e4l+gN1jZukfvNvE5YZUx9twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkoa1Dc
fBbQcDvXN+laYrqNmTm0MB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD
RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5
QlJzb2FYS2JSbUVremZYbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANepl9wjyLT09D/zEe/S/C7sG72iNh28k7RGyLArj3q/deoblGCH0udzzy/CC
xcQ4G2+cfBN1f7K5iNgwOosCqnsjY+HwijRfT9bqYDX+g3GYX6TfQcCNY33S5j9z
RgbeIdYJktTR57076aYXXr5DMt3BQsTdGeLBplTCqEjcpJ9P2qmrPgGI0KmTkzwf
KGQG/+YEejatZ+ZSRSvWrYd2bqEJi0mnpuCzKXmK5754Jl4Z8MMRTh6JiLWf+fte
1dh9ErZP3018LIDn6RAlgVI8WUB7tT5PMV59i0+ytmjc9jmBzFgcf3RE1x0mXRdj
fqlBjYrtFOyLReDvOe85y0+THQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:36:48 2026 by rpki-client