
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier: Xf/6ildhFmqlRwvGlO1XLYR5j4TiejBqQeLKA1lPH0U=
Subject key identifier: A3:E8:05:A4:8E:39:D5:4F:5F:40:68:AE:E2:33:7E:E5:98:C2:57:CD
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial: 1AF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number: 1AE5
Signing time: Sat 28 Feb 2026 16:21:01 +0000
Manifest this update: Sat 28 Feb 2026 16:21:00 +0000
Manifest next update: Sat 07 Mar 2026 16:21:00 +0000
Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: cfqkcm+W4ZmmS0oCbP4Pj8DYaHb68M5ZbhJ3UQCAIaQ=)
2: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: Wesd0InqJ/VHy6+SYHu7ABNFnSg/btyWb+0cbj+CPEk=)
3: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: rSf0co4QElknqmx/HUwcUze0T308M2kPbS2aUDzOJyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6900 (0x1af4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Validity
Not Before: Feb 28 16:21:00 2026 GMT
Not After : Mar 7 16:21:00 2026 GMT
Subject: CN=69a315ed-da22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:70:29:ff:65:bd:36:9e:df:6c:a7:72:84:
fe:9f:81:1e:f9:41:10:6b:62:29:2f:76:ea:db:5d:
f3:43:7c:fa:f4:97:c5:2d:a2:86:71:08:99:3f:43:
c1:3d:3f:93:8c:42:53:fd:f5:b8:b0:68:d0:b3:87:
01:63:e2:ea:0d:ae:3a:57:12:a4:da:87:e4:cd:ff:
2a:1c:f1:e6:d1:69:85:ac:42:d4:38:4e:47:22:84:
c3:af:4c:66:a3:ec:02:1c:7c:c4:38:0f:47:30:71:
53:f8:8c:27:06:7c:67:7e:30:aa:23:6b:5c:37:b2:
6d:a1:0c:5c:22:e3:f5:fb:d9:f3:67:51:a9:b9:bc:
fd:93:05:83:b3:61:0b:fd:c0:55:c2:e7:79:72:bc:
10:5a:85:03:b6:47:3b:17:2f:4f:ad:85:79:62:9e:
c2:43:7b:ac:32:fa:6d:12:38:63:50:5f:9b:f4:2c:
7f:0d:fb:1f:bd:30:35:cd:d5:1a:09:cc:0e:74:f6:
7d:8d:27:8d:0b:28:4e:16:5f:08:07:95:6a:ca:57:
1f:53:b3:80:3e:00:4a:e2:9b:1d:25:44:8c:24:ed:
8c:7c:f9:91:31:59:8c:08:ad:6c:08:ea:6f:bd:05:
bc:5c:17:c8:51:7e:81:4e:ed:79:d6:50:72:b2:ed:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:05:A4:8E:39:D5:4F:5F:40:68:AE:E2:33:7E:E5:98:C2:57:CD
X509v3 Authority Key Identifier:
keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:12:8d:f9:7b:5d:91:40:9a:9c:ff:25:18:39:1c:66:5a:80:
aa:01:47:35:47:12:e5:de:5d:42:e6:8c:70:37:4b:1b:5b:4d:
4e:08:4b:e3:1f:9e:01:80:9c:a0:e4:ab:64:c0:90:42:42:87:
82:c8:ca:3e:39:9f:bc:b9:7b:e9:04:78:43:d6:5f:78:51:70:
6a:71:29:df:33:77:01:d7:ca:e3:bf:29:40:47:18:90:31:63:
4a:70:d1:1f:8a:0b:a3:47:4d:6b:23:6a:4e:c7:5d:ef:1a:1c:
72:5a:d7:46:bf:17:25:57:47:43:d7:48:a5:38:7e:1a:dd:4d:
68:11:3b:b1:f1:31:48:41:a5:4e:e5:e6:db:88:1f:b4:11:9a:
cf:1e:9d:4f:20:05:5a:27:3d:cd:24:fc:9d:5b:ad:6d:2b:2a:
e6:7e:83:e9:e7:21:ff:cc:1e:aa:bb:66:81:ee:a1:9d:b0:28:
b7:02:99:db:fb:de:8d:5f:ab:41:1e:fd:fd:88:fd:9b:18:4b:
9d:92:b7:70:27:17:ff:4b:2f:6c:eb:a4:d2:57:34:38:d5:44:
d8:1d:83:93:df:28:bf:df:0d:00:34:64:1a:34:08:4e:31:58:
bb:32:5f:1e:28:f1:a6:a1:55:d8:cf:aa:a4:09:0a:bc:ef:12:
ce:05:35:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:21 2026 by rpki-client