
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier: T1qq2ItLY5JCW2l2d3Kvpz+pyP/n64PZmoVvDEsS+NM=
Subject key identifier: 32:9E:35:CD:0D:4C:7D:E0:61:C9:F5:6C:56:19:74:0E:91:D4:45:9D
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number: 0163
Signing time: Fri 17 Apr 2026 04:40:19 +0000
Manifest this update: Fri 17 Apr 2026 04:40:18 +0000
Manifest next update: Fri 24 Apr 2026 04:40:18 +0000
Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: IOOHQQzazu3qJ0XbVXgwtejGbLdLK0Czkw3Hsaya8ZY=)
2: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: dvMAmyh/hxtc1oBr5SYuyecDOjC5pr35ilz+dVjcw8U=)
3: A12190D8109411F1899116B2353D8C67.roa (hash: QIM5OQhz8QrW/58S7ybtOUdL75BxjSCO7dYUN29W8QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Validity
Not Before: Apr 17 04:40:18 2026 GMT
Not After : Apr 24 04:40:18 2026 GMT
Subject: CN=69e1b9b3-c840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:20:ae:0f:c5:2c:93:55:b6:44:2f:be:9d:
b8:8f:a7:21:70:93:3c:dc:b2:bc:44:0e:8d:25:d2:
1e:aa:84:46:e8:80:40:b5:c1:73:15:4c:e9:bb:d0:
64:1a:8d:f5:4c:fe:44:06:b9:e3:93:af:69:cc:81:
e9:e4:d6:86:a2:fe:96:15:b0:52:31:16:4c:cb:7e:
8c:07:e4:23:9c:56:46:05:df:01:1e:2e:a5:3c:b4:
1b:58:1e:55:18:4e:ed:63:fc:d5:be:bc:38:51:65:
ef:a1:8b:4a:6a:27:1c:5b:60:1f:c0:cb:3e:ac:53:
52:4a:cf:20:fe:00:f4:2a:56:a5:9b:c9:0c:57:87:
71:fb:b9:51:2c:57:14:cd:1e:ef:33:8b:4c:54:0f:
70:d4:aa:71:fc:eb:af:f0:8c:71:b6:17:f1:db:6b:
af:f2:7f:ce:e0:db:3c:e2:05:e8:6b:9c:e9:91:a7:
b6:c8:af:c3:4f:24:87:f9:15:cc:77:df:14:87:d9:
70:49:f3:f9:cf:ec:86:8b:5e:fc:89:6b:12:5b:81:
6d:60:51:e6:65:86:e6:18:98:6c:62:a3:df:3c:f9:
74:33:c0:a4:0d:ee:48:c1:8a:ef:ab:59:e6:54:a3:
32:21:b9:4e:3b:e7:1c:fd:1c:c3:3b:aa:d8:2d:c5:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9E:35:CD:0D:4C:7D:E0:61:C9:F5:6C:56:19:74:0E:91:D4:45:9D
X509v3 Authority Key Identifier:
keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:f4:16:da:8b:d6:dc:25:39:42:56:f8:e4:7d:d9:62:e2:8f:
58:1a:9d:b5:3a:a1:81:fa:dc:a0:99:61:ed:73:ea:6b:13:45:
aa:02:d5:2c:60:1c:b8:34:15:d4:93:bc:c6:ad:6c:f7:07:5b:
da:0c:13:09:19:f8:d3:00:cd:7e:b1:c7:a8:6f:ae:c0:33:4d:
21:cf:1b:bc:c9:72:fa:ca:04:da:8c:54:ff:61:1c:3b:56:e7:
a5:9d:64:f1:1a:2c:c8:b4:41:b6:d6:49:3a:a1:ce:9a:99:48:
41:2b:4f:8e:c7:f7:d6:42:b8:66:f6:4b:07:e0:a7:88:f4:4d:
14:90:71:b6:10:d1:31:00:84:c3:4c:15:56:d7:ac:e8:dc:96:
99:40:ad:26:18:d9:fd:29:42:cd:1b:c6:5a:a4:d5:c3:3d:04:
f0:6e:17:55:7f:a3:7a:ad:83:c7:ba:fa:a5:58:a9:68:13:62:
15:7b:e6:ed:96:0e:ae:ff:ea:7a:68:45:28:1e:10:ba:45:d9:
92:1d:89:41:1d:0b:f8:cb:4a:44:55:20:ab:14:af:77:51:b5:
2e:c0:c7:a3:ee:1b:d2:4d:6e:53:45:20:78:38:35:32:93:75:
53:68:56:4a:60:42:36:55:72:6c:aa:fe:76:5f:8c:dc:49:ed:
17:34:f3:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0
ODNBQTI3OUEwHhcNMjYwNDE3MDQ0MDE4WhcNMjYwNDI0MDQ0MDE4WjAYMRYwFAYD
VQQDEw02OWUxYjliMy1jODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp88grg/FLJNVtkQvvp24j6chcJM83LK8RA6NJdIeqoRG6IBAtcFzFUzpu9Bk
Go31TP5EBrnjk69pzIHp5NaGov6WFbBSMRZMy36MB+QjnFZGBd8BHi6lPLQbWB5V
GE7tY/zVvrw4UWXvoYtKaiccW2AfwMs+rFNSSs8g/gD0Klalm8kMV4dx+7lRLFcU
zR7vM4tMVA9w1Kpx/Ouv8Ixxthfx22uv8n/O4Ns84gXoa5zpkae2yK/DTySH+RXM
d98Uh9lwSfP5z+yGi178iWsSW4FtYFHmZYbmGJhsYqPfPPl0M8CkDe5IwYrvq1nm
VKMyIblOO+cc/RzDO6rYLcXuzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKeNc0N
TH3gYcn1bFYZdA6R1EWdMB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB
MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTkwOS8xNjZFNzQ3QzJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1Nw
NkNwTlJRQW5OdlpJT3FKNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlfQW2ovW3CU5Qlb45H3ZYuKPWBqdtTqhgfrcoJlh7XPqaxNFqgLVLGAcuDQV
1JO8xq1s9wdb2gwTCRn40wDNfrHHqG+uwDNNIc8bvMly+soE2oxU/2EcO1bnpZ1k
8RosyLRBttZJOqHOmplIQStPjsf31kK4ZvZLB+CniPRNFJBxthDRMQCEw0wVVtes
6NyWmUCtJhjZ/SlCzRvGWqTVwz0E8G4XVX+jeq2Dx7r6pVipaBNiFXvm7ZYOrv/q
emhFKB4QukXZkh2JQR0L+MtKRFUgqxSvd1G1LsDHo+4b0k1uU0UgeDg1MpN1U2hW
SmBCNlVybKr+dl+M3EntFzTzLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:21 2026 by rpki-client