
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json)
Hash identifier: cxItiK6gIpwiJnx/xbv2iZ1xX7nN1IEDWfFw9S8/Bd4=
Subject key identifier: 1C:D7:43:C8:22:02:D5:D2:76:A3:87:B5:D1:DE:2E:31:B9:C3:04:E9
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial: 06FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
Manifest number: 06F3
Signing time: Thu 16 Apr 2026 21:59:46 +0000
Manifest this update: Thu 16 Apr 2026 21:59:46 +0000
Manifest next update: Thu 23 Apr 2026 21:59:46 +0000
Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: l+hcriS574FqOfpOZ1n1lPdoWvhs8UpCsQRXaxlGb7g=)
2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: GddQF0kXZAYcATo7qq+gH7xwi2gME5La/lz+podnzrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789 (0x6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Validity
Not Before: Apr 16 21:59:46 2026 GMT
Not After : Apr 23 21:59:46 2026 GMT
Subject: CN=69e15bd2-65a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:e4:4e:6d:b9:f8:fa:aa:69:9a:21:d6:f0:
0a:06:49:ed:5d:2e:c8:fc:ea:f6:8b:c8:a5:ac:4e:
c8:03:3e:12:40:d0:59:f7:e8:09:55:c3:dc:1f:d8:
e0:d3:29:7c:4b:94:e5:55:45:42:aa:e6:d8:33:a5:
e1:f0:57:3c:a1:26:57:13:03:c9:ef:e9:0d:6f:5f:
ff:d2:9b:a1:53:b5:06:67:da:13:46:90:ea:96:97:
bc:ec:ce:70:37:6d:80:ed:e3:28:1f:37:cf:65:d8:
23:eb:ab:00:0b:0a:a1:bb:d7:c9:6d:53:1e:e6:97:
d2:22:52:0b:a3:7d:b3:56:4d:e4:97:88:a7:9c:45:
26:e7:82:bf:a9:81:c9:d4:49:59:39:12:fa:3a:2b:
ed:cf:06:85:4f:01:fb:73:c3:0b:f9:b8:f5:ca:91:
8a:82:3c:fb:9d:b7:4e:19:b8:6e:d4:fa:ec:ea:fa:
1b:f2:0a:d9:e9:61:0c:5b:02:09:b8:71:98:93:c1:
51:3a:10:90:67:07:7f:3a:54:ea:14:db:9c:3a:2f:
8d:18:68:7d:22:39:65:a3:8e:77:7f:ca:e0:b6:94:
38:f4:1b:95:bc:78:97:46:ff:1f:46:63:38:8e:de:
57:d3:b2:70:51:e5:98:13:44:fe:5e:11:81:d5:6f:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:43:C8:22:02:D5:D2:76:A3:87:B5:D1:DE:2E:31:B9:C3:04:E9
X509v3 Authority Key Identifier:
keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:f1:6a:20:90:9e:db:de:3a:31:aa:30:08:0e:9a:d7:e8:4f:
99:cb:19:eb:8b:bf:7d:ed:aa:3e:8b:bb:7f:7f:7e:07:4f:33:
69:3b:48:a8:c7:6c:49:b2:df:bb:49:03:14:01:ac:06:0c:54:
bc:63:59:76:ae:7d:67:d8:7f:f7:73:e6:4d:44:af:02:d5:21:
5f:0f:af:aa:af:6d:cd:0a:11:14:ca:02:ca:85:d9:8b:8d:23:
18:45:c3:41:2f:78:fd:97:b7:47:88:b5:d2:12:f0:da:f0:fc:
87:90:48:36:b6:06:b2:5a:7e:99:01:fc:cf:85:77:20:83:c2:
09:df:72:34:81:9e:fb:4f:2e:52:c0:37:0d:80:61:79:71:dd:
5b:ac:e2:2a:70:e3:3c:fb:6d:2d:b5:bb:f2:c4:64:21:99:a5:
de:11:22:e2:a5:4d:88:29:3c:d8:6c:b1:61:dd:33:25:33:e2:
3e:ab:33:a8:01:0c:cb:86:4e:59:0f:20:7e:4c:56:87:22:8a:
7b:1f:14:bf:9b:e3:e9:99:5d:ad:bc:d1:97:ec:73:59:5a:1f:
93:e9:c1:0a:a6:2e:da:50:b3:f8:8d:7b:ba:66:c9:54:1a:af:
99:de:42:e7:44:5c:de:15:1d:dd:3d:6d:21:ea:d6:cc:b7:41:
2e:f7:28:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1
QzZFRkMzN0IwHhcNMjYwNDE2MjE1OTQ2WhcNMjYwNDIzMjE1OTQ2WjAYMRYwFAYD
VQQDEw02OWUxNWJkMi02NWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsaLkTm25+PqqaZoh1vAKBkntXS7I/Or2i8ilrE7IAz4SQNBZ9+gJVcPcH9jg
0yl8S5TlVUVCqubYM6Xh8Fc8oSZXEwPJ7+kNb1//0puhU7UGZ9oTRpDqlpe87M5w
N22A7eMoHzfPZdgj66sACwqhu9fJbVMe5pfSIlILo32zVk3kl4innEUm54K/qYHJ
1ElZORL6OivtzwaFTwH7c8ML+bj1ypGKgjz7nbdOGbhu1Prs6vob8grZ6WEMWwIJ
uHGYk8FROhCQZwd/OlTqFNucOi+NGGh9Ijllo453f8rgtpQ49BuVvHiXRv8fRmM4
jt5X07JwUeWYE0T+XhGB1W9+xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzXQ8gi
AtXSdqOHtdHeLjG5wwTpMB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB
QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG
OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJPFqIJCe2946MaowCA6a1+hPmcsZ64u/fe2qPou7f39+B08zaTtIqMdsSbLf
u0kDFAGsBgxUvGNZdq59Z9h/93PmTUSvAtUhXw+vqq9tzQoRFMoCyoXZi40jGEXD
QS94/Ze3R4i10hLw2vD8h5BINrYGslp+mQH8z4V3IIPCCd9yNIGe+08uUsA3DYBh
eXHdW6ziKnDjPPttLbW78sRkIZml3hEi4qVNiCk82GyxYd0zJTPiPqszqAEMy4ZO
WQ8gfkxWhyKKex8Uv5vj6ZldrbzRl+xzWVofk+nBCqYu2lCz+I17umbJVBqvmd5C
50Rc3hUd3T1tIerWzLdBLvcoeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:20 2026 by rpki-client