
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json)
Hash identifier: iuoQ5sLJBPy0QHxRwrhwbapwkkAGMT5oIvL5JC5gI9Q=
Subject key identifier: C1:2B:69:53:F7:78:60:B2:C9:11:D6:B6:17:1D:58:CB:DA:64:7B:B3
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
Manifest number: 0242
Signing time: Wed 25 Mar 2026 01:52:27 +0000
Manifest this update: Wed 25 Mar 2026 01:52:27 +0000
Manifest next update: Wed 01 Apr 2026 01:52:27 +0000
Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: 9G4f5t/hED+2uqcXXY2uT1W4yjNKr/o9bWo/qNV6tiA=)
2: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: /BZUmLi+tmRANpipkr295WYxkHJvgSpDNND0oQHBar8=)
3: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: BSVTwwRbq3VYo1MDzrnaZmnq1w5wQREhmFrVERfDa/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:52:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Validity
Not Before: Mar 25 01:52:27 2026 GMT
Not After : Apr 1 01:52:27 2026 GMT
Subject: CN=69c33fdb-4c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:b6:d1:1d:6c:b2:4b:50:05:7c:2b:eb:ed:
f0:1b:44:e7:00:8d:d7:e2:bf:fb:0e:69:6c:3f:4f:
5e:a1:3a:6a:4b:34:62:8e:37:ee:ee:a3:be:dc:b7:
3a:4b:0c:72:19:81:ce:84:fd:47:19:2e:f0:34:81:
05:f2:bf:42:9b:24:43:9f:4a:60:cf:8c:a0:1c:63:
09:6e:4d:f8:42:7c:24:96:58:a7:d5:05:d9:85:e8:
f0:5d:f7:e5:d7:a1:c4:79:59:20:7b:5f:35:1d:bb:
89:fd:c3:4c:4e:ed:9f:42:30:e5:2d:9d:da:6a:0d:
e7:93:44:e6:0b:27:e4:7e:98:52:e8:63:ca:7b:25:
00:fc:67:87:9d:f8:41:d1:76:22:f3:76:f5:1e:09:
e5:fd:a8:ee:17:dc:0a:f2:8b:e4:e7:fd:84:29:d4:
c9:87:7f:a7:04:77:0e:3a:2a:38:8b:aa:81:27:82:
9a:f7:06:fa:c5:94:f4:1f:72:56:a6:2e:34:d9:10:
35:e7:57:c0:34:b3:fe:2d:a1:b9:a6:c1:c6:08:e4:
13:82:84:11:32:bd:9f:4e:d5:af:07:08:f7:ad:cf:
1b:25:3e:5f:88:45:da:c5:b7:b1:ee:82:8f:80:1e:
40:09:31:90:41:62:54:de:c7:21:c0:90:eb:93:1e:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2B:69:53:F7:78:60:B2:C9:11:D6:B6:17:1D:58:CB:DA:64:7B:B3
X509v3 Authority Key Identifier:
keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2b:e8:1b:94:2a:bc:fa:db:09:9e:fb:c7:a0:89:68:f6:c2:
02:3e:df:92:78:6a:fc:14:95:16:97:aa:ba:4f:d0:f3:0d:b8:
47:8a:8b:86:13:57:b4:42:b0:35:f6:1e:b8:5d:9e:a6:b3:35:
99:cc:31:46:27:5c:4d:1c:17:ab:6f:48:3b:5f:18:be:7c:95:
c4:63:c2:c4:6d:71:12:49:ae:6b:19:ee:2e:1b:10:e4:95:08:
30:cf:29:67:75:94:4d:4f:1e:99:db:74:10:c5:80:fe:1a:4b:
f4:79:3f:1e:0b:1c:b1:f6:82:14:38:51:31:b4:91:69:00:6a:
3a:94:72:ab:17:86:53:d8:29:c2:e3:78:11:7f:04:b2:85:96:
be:40:b1:cc:a0:f4:da:61:65:db:29:f9:71:85:4d:8d:5d:38:
bf:c0:ad:e2:46:14:cf:7b:c4:f6:7e:69:d9:57:7a:dd:5b:b4:
78:c7:56:c8:d9:6a:f7:ae:5b:a2:db:62:1b:e0:e2:ec:c9:a5:
4d:64:3b:14:f6:e3:01:7f:dc:e1:20:38:0b:d9:a1:7d:f4:0e:
1d:f4:9f:9a:10:c9:ff:96:eb:f0:13:d6:0a:1b:2f:5e:72:dd:
66:0a:cf:8d:98:38:a7:5e:46:fe:b6:84:a7:58:83:4f:33:2d:
b7:41:a6:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRBNDAxMTAvBgNVBAUTKDM3QjYyQTc3MjUxQzUyQTA0QjMzQjgyRDJFRDAyMDRD
OTI3QTQyOUEwHhcNMjYwMzI1MDE1MjI3WhcNMjYwNDAxMDE1MjI3WjAYMRYwFAYD
VQQDEw02OWMzM2ZkYi00YzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmRK20R1ssktQBXwr6+3wG0TnAI3X4r/7DmlsP09eoTpqSzRijjfu7qO+3Lc6
SwxyGYHOhP1HGS7wNIEF8r9CmyRDn0pgz4ygHGMJbk34Qnwkllin1QXZhejwXffl
16HEeVkge181HbuJ/cNMTu2fQjDlLZ3aag3nk0TmCyfkfphS6GPKeyUA/GeHnfhB
0XYi83b1Hgnl/ajuF9wK8ovk5/2EKdTJh3+nBHcOOio4i6qBJ4Ka9wb6xZT0H3JW
pi402RA151fANLP+LaG5psHGCOQTgoQRMr2fTtWvBwj3rc8bJT5fiEXaxbex7oKP
gB5ACTGQQWJU3schwJDrkx57xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEraVP3
eGCyyRHWthcdWMvaZHuzMB8GA1UdIwQYMBaAFDe2KnclHFKgSzO4LS7QIEySekKa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREE0MC85NkYwRDcwQ0JC
REExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1VxQkxNN2d0THRBZ1RKSjZR
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL043WXFkeVVjVXFCTE03Z3RMdEFnVEpKNlFwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REE0MC85NkYwRDcwQ0JCREExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1Vx
QkxNN2d0THRBZ1RKSjZRcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmyvoG5QqvPrbCZ77x6CJaPbCAj7fknhq/BSVFpequk/Q8w24R4qLhhNXtEKw
NfYeuF2eprM1mcwxRidcTRwXq29IO18YvnyVxGPCxG1xEkmuaxnuLhsQ5JUIMM8p
Z3WUTU8emdt0EMWA/hpL9Hk/HgscsfaCFDhRMbSRaQBqOpRyqxeGU9gpwuN4EX8E
soWWvkCxzKD02mFl2yn5cYVNjV04v8Ct4kYUz3vE9n5p2Vd63Vu0eMdWyNlq965b
ottiG+Di7MmlTWQ7FPbjAX/c4SA4C9mhffQOHfSfmhDJ/5br8BPWChsvXnLdZgrP
jZg4p15G/raEp1iDTzMtt0Gmlw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:56 2026 by rpki-client