
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json)
Hash identifier: 4aWMT/1uoPvrlRgTYKCJjzNBbpWKDws0wOfwuymtoYk=
Subject key identifier: D0:84:C0:51:93:DF:D9:7F:A2:30:74:57:CD:74:83:52:F6:B2:2A:0E
Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
Manifest number: 02F6
Signing time: Sun 01 Mar 2026 02:07:02 +0000
Manifest this update: Sun 01 Mar 2026 02:07:02 +0000
Manifest next update: Sun 08 Mar 2026 02:07:02 +0000
Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: OE1aRA2LD7JGtNwYTp3ygDq8IOthKZ1sNdCdFSy9xmc=)
2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: JWAO5OM1htkOqA8zsEncfXnArds8hOb3Z7zkeDNiSm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Validity
Not Before: Mar 1 02:07:02 2026 GMT
Not After : Mar 8 02:07:02 2026 GMT
Subject: CN=69a39f46-dca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:a0:4c:8d:95:bc:9c:8b:e8:7e:4b:e7:6f:
49:87:be:65:86:93:e8:e2:73:28:bd:77:8f:b1:ec:
50:3b:cf:9d:da:4e:bb:aa:56:cc:c9:fe:16:75:ce:
10:5c:64:38:ab:cb:8b:a5:52:76:7b:8c:6d:86:d6:
53:d7:2b:8c:28:c0:31:f0:6b:9f:2f:09:30:fe:05:
38:a6:3a:44:69:34:e3:ae:78:23:8a:85:e1:c9:6a:
e9:ed:f4:49:a7:25:4f:00:ec:b9:68:d3:fa:46:d8:
44:7e:61:73:5d:38:5e:4e:67:64:dc:f5:14:c2:b4:
39:3f:66:12:35:04:14:91:67:50:df:18:97:55:66:
5c:29:fd:dd:76:d1:e9:5a:d7:0b:d4:6a:d7:cc:56:
9a:81:57:47:b0:83:09:03:bd:fc:68:e2:72:bd:f8:
02:ce:3d:15:d5:be:da:a8:08:32:d5:7f:7f:01:28:
ea:cd:ec:75:60:b7:4c:60:1d:61:ee:24:b4:06:b9:
97:24:bd:d8:ca:26:6e:5e:4f:8d:ec:93:35:f0:28:
0d:20:a5:92:98:a5:f8:38:1c:99:e1:e2:5d:fb:86:
86:14:87:9a:fa:57:c8:6b:12:b3:68:97:f8:c7:5d:
40:8a:0d:6f:05:ee:c2:a7:4c:52:dd:b0:64:a4:0b:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:84:C0:51:93:DF:D9:7F:A2:30:74:57:CD:74:83:52:F6:B2:2A:0E
X509v3 Authority Key Identifier:
keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:ff:c0:d5:22:b4:63:78:30:9c:1b:0c:a7:e7:5a:68:11:82:
42:06:6a:2c:98:08:b5:b6:d6:fb:43:d6:31:1d:7b:7a:58:df:
a6:6f:93:49:6a:74:7f:18:05:49:94:db:32:13:7b:48:8d:0b:
0f:92:0d:a1:99:8a:61:f1:57:d4:46:e7:2d:ac:8b:72:23:76:
32:5d:c5:c7:60:67:bb:6a:79:35:e8:87:b9:c5:13:61:f0:60:
22:4b:51:30:f5:1f:d5:40:5e:47:ef:0c:55:2c:36:b7:f3:db:
4f:22:99:3f:50:f3:14:31:3a:f0:c5:9c:1f:49:29:6c:b0:a0:
a5:15:3a:52:37:a7:9a:70:f9:3e:97:49:e9:8f:9b:19:d4:4f:
bd:46:25:b5:25:3a:44:5f:61:36:e8:6e:15:b1:c9:24:5d:68:
6b:e8:63:8d:7d:12:45:e1:9e:6c:69:97:d3:a2:fe:34:d3:5f:
4c:dc:ca:df:6d:5a:7a:a2:27:45:cb:4a:da:a5:76:42:20:9c:
2c:ac:ae:84:9c:6e:b0:d0:fe:da:22:2f:19:92:2c:a2:96:a1:
d1:3d:d2:d7:eb:3a:90:2c:6d:af:55:d0:19:f1:5e:f6:aa:13:
8e:7a:bb:37:36:d7:38:6e:f6:d7:12:5a:fe:81:e8:b4:89:6f:
94:6b:25:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3
N0NGNkFGMDAwHhcNMjYwMzAxMDIwNzAyWhcNMjYwMzA4MDIwNzAyWjAYMRYwFAYD
VQQDDA02OWEzOWY0Ni1kY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2EWgTI2VvJyL6H5L529Jh75lhpPo4nMovXePsexQO8+d2k67qlbMyf4Wdc4Q
XGQ4q8uLpVJ2e4xthtZT1yuMKMAx8GufLwkw/gU4pjpEaTTjrngjioXhyWrp7fRJ
pyVPAOy5aNP6RthEfmFzXTheTmdk3PUUwrQ5P2YSNQQUkWdQ3xiXVWZcKf3ddtHp
WtcL1GrXzFaagVdHsIMJA738aOJyvfgCzj0V1b7aqAgy1X9/ASjqzex1YLdMYB1h
7iS0BrmXJL3YyiZuXk+N7JM18CgNIKWSmKX4OByZ4eJd+4aGFIea+lfIaxKzaJf4
x11Aig1vBe7Cp0xS3bBkpAtYmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCEwFGT
39l/ojB0V810g1L2sioOMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy
RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ
LWxWTktFTDFoQmgzejJyd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVv/A1SK0Y3gwnBsMp+daaBGCQgZqLJgItbbW+0PWMR17eljfpm+TSWp0fxgF
SZTbMhN7SI0LD5INoZmKYfFX1EbnLayLciN2Ml3Fx2Bnu2p5NeiHucUTYfBgIktR
MPUf1UBeR+8MVSw2t/PbTyKZP1DzFDE68MWcH0kpbLCgpRU6UjenmnD5PpdJ6Y+b
GdRPvUYltSU6RF9hNuhuFbHJJF1oa+hjjX0SReGebGmX06L+NNNfTNzK321aeqIn
RctK2qV2QiCcLKyuhJxusND+2iIvGZIsopah0T3S1+s6kCxtr1XQGfFe9qoTjnq7
NzbXOG721xJa/oHotIlvlGsltw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:03 2026 by rpki-client