
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json)
Hash identifier: VcY4gCaY2DZ7s0wyELfwdfhJHMb9l8chP1dWISMSxis=
Subject key identifier: 62:A4:5E:5E:1E:A9:AE:7C:40:A6:81:D8:A0:7C:A3:9A:CC:48:E2:35
Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
Certificate serial: 0C69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
Manifest number: 0C5E
Signing time: Mon 02 Mar 2026 03:07:45 +0000
Manifest this update: Mon 02 Mar 2026 03:07:43 +0000
Manifest next update: Mon 09 Mar 2026 03:07:43 +0000
Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: 4MyLMrPrE6+HI4ejP3Ivs5dB7vbLFNLEaMOC8AqiJnw=)
2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: 4ablXLJzigDQjMav8RJlsCl5xohBbLZT5yMn2LFHDVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl
rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3177 (0xc69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
Validity
Not Before: Mar 2 03:07:43 2026 GMT
Not After : Mar 9 03:07:43 2026 GMT
Subject: CN=69a4ff01-7f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:b4:4c:ca:17:8a:b2:3a:78:b6:bb:10:c2:
9e:d0:e6:5f:d4:52:7a:fa:cd:71:c8:87:00:c7:30:
df:9a:a5:19:6a:94:84:f8:1a:df:e0:a9:82:1b:7d:
d3:58:e1:fe:05:16:7f:c5:d4:fc:fb:e0:57:e3:22:
ad:20:72:25:5e:7a:1b:71:bd:3d:5f:b4:38:f1:0e:
36:4a:71:0c:8f:93:2b:d5:ec:79:1e:7e:1f:e5:05:
93:09:21:a0:02:1e:c9:60:bc:c0:7e:3a:19:4a:b4:
6d:50:90:79:bc:6e:2b:80:c2:43:79:d8:64:91:eb:
a9:3b:62:db:60:2b:aa:ef:43:fe:b2:1b:87:99:19:
cb:c2:30:d0:8c:f8:a9:05:2c:22:6a:b3:00:ea:e4:
c4:c2:cf:c7:2d:4e:bf:6d:e8:23:a6:71:47:cf:56:
82:d4:03:a2:9c:53:2d:0f:cc:32:36:38:d7:29:b1:
bb:7e:d6:b9:f3:20:85:e9:89:10:b2:9d:6d:e4:0b:
4c:dd:54:4d:8c:cb:81:1e:93:a2:0c:48:9e:1d:fd:
8d:c3:4c:12:0f:18:34:a3:50:26:f8:19:ba:de:29:
e3:4d:d2:b2:f5:11:b1:4f:fb:cc:e6:26:0e:d3:f2:
90:a3:2a:73:25:d6:e3:6c:57:a5:cf:16:c6:a2:d5:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A4:5E:5E:1E:A9:AE:7C:40:A6:81:D8:A0:7C:A3:9A:CC:48:E2:35
X509v3 Authority Key Identifier:
keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2f:da:60:b7:95:57:d2:c2:36:b2:e3:bf:e4:71:ca:72:b5:
36:9b:04:e8:f9:fd:be:5a:69:4b:0f:50:74:db:48:f1:77:09:
bc:b5:06:7f:35:d2:c2:f0:a4:c0:c8:dc:59:a1:f7:8b:03:29:
7f:bc:46:ae:99:8b:85:03:a8:82:93:fb:c3:80:80:22:60:c1:
b6:1a:85:96:09:a2:9b:b2:c0:48:98:0a:35:39:80:76:47:38:
94:7b:63:ca:93:4a:95:3d:ee:10:dc:4d:3a:15:ad:94:43:84:
23:df:86:f9:1c:c2:b4:aa:8e:0b:62:9c:5a:be:07:30:e5:4d:
2e:24:2c:a9:9d:85:06:9e:80:04:7b:a9:9b:24:0f:06:ad:8f:
e0:18:5f:05:47:b4:f6:f9:8f:58:3e:13:be:c3:af:51:71:c6:
87:0d:8c:aa:e7:1d:a0:83:17:dc:8b:ca:90:73:a7:47:84:d1:
9d:d4:4c:6e:b6:37:8f:78:f7:76:87:b6:13:0a:8d:31:54:66:
55:cb:8f:36:b2:e1:e9:ae:39:5b:bd:f2:ca:99:22:6d:71:53:
c6:ba:12:aa:f7:d8:12:e8:70:6f:49:15:44:53:db:69:90:81:
61:94:6b:de:28:42:3e:4f:fe:5e:be:3c:d4:cc:c1:c6:ff:21:
44:9d:50:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE
NjlCQzJGMzQwHhcNMjYwMzAyMDMwNzQzWhcNMjYwMzA5MDMwNzQzWjAYMRYwFAYD
VQQDEw02OWE0ZmYwMS03Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArxa0TMoXirI6eLa7EMKe0OZf1FJ6+s1xyIcAxzDfmqUZapSE+Brf4KmCG33T
WOH+BRZ/xdT8++BX4yKtIHIlXnobcb09X7Q48Q42SnEMj5Mr1ex5Hn4f5QWTCSGg
Ah7JYLzAfjoZSrRtUJB5vG4rgMJDedhkkeupO2LbYCuq70P+shuHmRnLwjDQjPip
BSwiarMA6uTEws/HLU6/begjpnFHz1aC1AOinFMtD8wyNjjXKbG7fta58yCF6YkQ
sp1t5AtM3VRNjMuBHpOiDEieHf2Nw0wSDxg0o1Am+Bm63injTdKy9RGxT/vM5iYO
0/KQoypzJdbjbFelzxbGotXAEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKkXl4e
qa58QKaB2KB8o5rMSOI1MB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD
OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2
dWFXbnhPU2FPTW5XbThMelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApi/aYLeVV9LCNrLjv+RxynK1NpsE6Pn9vlppSw9QdNtI8XcJvLUGfzXSwvCk
wMjcWaH3iwMpf7xGrpmLhQOogpP7w4CAImDBthqFlgmim7LASJgKNTmAdkc4lHtj
ypNKlT3uENxNOhWtlEOEI9+G+RzCtKqOC2KcWr4HMOVNLiQsqZ2FBp6ABHupmyQP
Bq2P4BhfBUe09vmPWD4TvsOvUXHGhw2MqucdoIMX3IvKkHOnR4TRndRMbrY3j3j3
doe2EwqNMVRmVcuPNrLh6a45W73yypkibXFTxroSqvfYEuhwb0kVRFPbaZCBYZRr
3ihCPk/+Xr481MzBxv8hRJ1Qpw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:20 2026 by rpki-client