
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json)
Hash identifier: m8B385iB1uOBU+qPdyFrllGQ0Zj8K1CHxP50OH6Hnq8=
Subject key identifier: DA:2F:40:DD:84:84:39:4D:4B:7F:B5:55:E1:54:70:94:54:02:3A:D8
Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
Manifest number: 0204
Signing time: Wed 25 Mar 2026 02:27:49 +0000
Manifest this update: Wed 25 Mar 2026 02:27:48 +0000
Manifest next update: Wed 01 Apr 2026 02:27:48 +0000
Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: bIw8RSPSCw1B/9EnojERNRX3e+zFiYiUHv1fFcydToY=)
2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: tV7zN4p6YBZjKHrlAaXgAexa7jVk375T1BwHlahtKKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Validity
Not Before: Mar 25 02:27:48 2026 GMT
Not After : Apr 1 02:27:48 2026 GMT
Subject: CN=69c34825-0225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:16:b6:97:10:c3:99:4b:f2:d5:35:9a:6b:
75:1e:f0:e1:38:1f:a4:3a:10:e6:18:cd:3c:24:69:
1d:16:aa:d7:b5:7d:61:97:21:bc:fd:17:90:86:19:
1c:bc:8b:e0:49:aa:ff:00:2c:92:49:eb:be:6f:6e:
07:8d:72:c5:56:12:13:b9:21:85:2e:a1:43:ea:a9:
62:27:5b:9f:6a:db:80:93:c6:82:0c:bc:d0:6c:b6:
f4:1d:22:66:f4:8b:80:97:06:f7:f4:57:6c:46:4c:
26:5d:ee:77:84:1d:17:83:98:91:db:df:c6:31:34:
a9:ff:7d:15:14:66:d3:b6:c7:ba:64:5e:f0:d2:77:
92:c5:b8:3e:33:49:f0:46:33:6f:55:63:b7:45:16:
95:8c:99:d4:3a:57:7d:c6:e5:ec:38:72:be:35:16:
43:e0:8a:6b:b0:c8:c5:fd:80:55:a7:dd:21:99:34:
68:94:34:fd:2f:b6:52:f3:48:58:fb:33:fe:10:21:
d8:ef:c7:db:e2:47:56:e4:69:bf:0a:1c:30:d3:f7:
e1:9d:41:bf:59:29:c9:23:f0:0e:9a:6c:95:4b:ce:
91:75:f1:5b:29:77:05:25:34:ce:a6:bb:55:52:5f:
8a:ba:e9:59:8e:ea:7d:e9:e9:59:49:de:96:c5:89:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:40:DD:84:84:39:4D:4B:7F:B5:55:E1:54:70:94:54:02:3A:D8
X509v3 Authority Key Identifier:
keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:97:06:a6:4d:6d:5b:94:fd:92:0b:20:91:85:6e:16:15:44:
62:e6:76:cc:ee:05:a2:a0:e2:60:22:8b:9f:7f:77:4d:f6:26:
ec:33:b6:df:30:92:90:8c:64:55:b2:7f:d9:ed:77:02:2d:e8:
8d:96:cc:37:e2:00:51:39:88:f5:b4:7a:3a:9f:34:29:4d:15:
2a:e4:4b:45:d6:4a:d3:1c:c5:07:f3:f3:b8:f4:28:df:bc:22:
d1:26:7d:1b:d2:20:ac:74:68:af:81:c6:9f:43:94:7a:e7:fd:
98:02:83:79:69:d9:37:9a:b4:1c:e6:c3:34:75:b1:5e:f2:a6:
c7:a6:48:9b:34:13:53:69:4d:1a:89:c9:40:c4:42:3f:c0:0a:
a2:85:a2:95:be:b1:3f:57:7d:76:11:ef:5c:45:0a:85:7f:b2:
fd:de:49:e7:7d:a7:f1:50:49:e2:86:2e:e3:b1:ef:d9:f5:b5:
76:f4:14:ff:0b:4e:93:b2:33:bf:5e:b0:65:7f:16:66:a7:ab:
80:b2:8f:d2:56:1e:d3:ce:ca:88:c0:be:4b:61:0d:e2:3f:1f:
30:a1:a1:93:aa:30:ce:73:fe:12:f8:05:93:e7:66:2c:27:f5:
c5:79:cf:4f:23:d4:a1:52:0f:db:19:81:1c:c4:98:dc:ab:81:
0d:84:ae:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx
MDNERkQ1RTMwHhcNMjYwMzI1MDIyNzQ4WhcNMjYwNDAxMDIyNzQ4WjAYMRYwFAYD
VQQDEw02OWMzNDgyNS0wMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0WcWtpcQw5lL8tU1mmt1HvDhOB+kOhDmGM08JGkdFqrXtX1hlyG8/ReQhhkc
vIvgSar/ACySSeu+b24HjXLFVhITuSGFLqFD6qliJ1ufatuAk8aCDLzQbLb0HSJm
9IuAlwb39FdsRkwmXe53hB0Xg5iR29/GMTSp/30VFGbTtse6ZF7w0neSxbg+M0nw
RjNvVWO3RRaVjJnUOld9xuXsOHK+NRZD4IprsMjF/YBVp90hmTRolDT9L7ZS80hY
+zP+ECHY78fb4kdW5Gm/Chww0/fhnUG/WSnJI/AOmmyVS86RdfFbKXcFJTTOprtV
Ul+KuulZjup96elZSd6WxYm2eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNovQN2E
hDlNS3+1VeFUcJRUAjrYMB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC
RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTgzQi81QUYwNDE5QzFCRTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZt
Y2JGaVRtT3JiMmdRUGYxZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnpcGpk1tW5T9kgsgkYVuFhVEYuZ2zO4FoqDiYCKLn393TfYm7DO23zCSkIxk
VbJ/2e13Ai3ojZbMN+IAUTmI9bR6Op80KU0VKuRLRdZK0xzFB/PzuPQo37wi0SZ9
G9IgrHRor4HGn0OUeuf9mAKDeWnZN5q0HObDNHWxXvKmx6ZImzQTU2lNGonJQMRC
P8AKooWilb6xP1d9dhHvXEUKhX+y/d5J532n8VBJ4oYu47Hv2fW1dvQU/wtOk7Iz
v16wZX8WZqergLKP0lYe087KiMC+S2EN4j8fMKGhk6owznP+EvgFk+dmLCf1xXnP
TyPUoVIP2xmBHMSY3KuBDYSuCw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:44:03 2026 by rpki-client