
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json)
Hash identifier: O13BNc+QlFJryILXZrs9hNP+mP531znXM/tDuRHHCIg=
Subject key identifier: B4:94:E2:8C:C4:67:D4:76:4A:F1:D5:23:AB:87:8E:4E:95:4D:48:3C
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial: 06E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
Manifest number: 06DB
Signing time: Sun 01 Mar 2026 23:47:15 +0000
Manifest this update: Sun 01 Mar 2026 23:47:13 +0000
Manifest next update: Sun 08 Mar 2026 23:47:13 +0000
Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: YmOCVAvmvgPwkxjEIWgi2IvmwdxLR7LCtnw3Z/quKho=)
2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: GddQF0kXZAYcATo7qq+gH7xwi2gME5La/lz+podnzrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Validity
Not Before: Mar 1 23:47:13 2026 GMT
Not After : Mar 8 23:47:13 2026 GMT
Subject: CN=69a4d003-9324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:13:b8:26:d0:84:cd:ba:24:1a:50:b2:e2:
49:b3:d1:50:a8:f4:84:2a:e6:f2:6b:54:49:2c:4a:
9d:c7:0f:c6:45:8c:1e:43:5b:0d:79:e5:3d:d3:2a:
1e:26:76:22:53:17:11:03:a7:2b:59:62:27:e0:d4:
ea:cd:db:5b:c3:d0:ff:cc:32:50:fa:a3:f1:93:ea:
09:f8:85:c4:c9:2f:b9:a5:e9:b7:3c:b3:8a:c0:9a:
45:7f:6d:f6:27:7d:c6:2e:3f:7a:fb:3e:b4:85:3b:
03:de:90:6b:89:c1:5f:68:5a:61:d8:07:c4:29:d6:
9a:76:d7:1b:fe:4d:90:b4:71:7e:dc:53:e3:52:56:
51:07:e3:64:e2:94:51:0c:20:bc:9c:bc:c0:44:7a:
2f:4b:a9:6b:59:4e:c5:e0:67:25:a3:13:b2:90:74:
2b:c5:b3:13:97:bc:8b:bc:36:1b:01:ab:ef:bf:52:
82:8c:cb:8d:ce:46:40:d5:67:ad:fb:48:b4:62:7a:
4d:08:30:de:aa:15:a0:16:28:db:7e:07:17:eb:82:
26:d4:ee:a6:a6:7d:d6:4e:80:7e:4e:07:b2:83:be:
fc:17:5b:9b:af:ca:05:e4:f9:a2:12:be:bd:c4:3b:
65:62:de:66:af:60:c5:fd:c9:08:fe:01:9f:cf:7e:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:E2:8C:C4:67:D4:76:4A:F1:D5:23:AB:87:8E:4E:95:4D:48:3C
X509v3 Authority Key Identifier:
keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9c:12:48:2a:ca:46:e3:f7:08:93:a4:b5:05:98:4d:d4:f6:
71:a6:64:fa:0a:62:e4:16:77:08:a3:b9:36:b7:13:82:6e:f0:
f1:b6:29:6f:70:09:73:45:60:d6:ac:4f:f5:00:65:2a:9c:29:
22:d4:e9:64:d5:04:73:7b:ce:ba:d3:d6:db:c0:63:f3:47:d5:
2e:c3:c3:e7:73:70:96:a8:53:3d:f3:b9:d2:35:c9:45:dd:38:
bc:2b:74:da:36:cd:b1:77:df:d6:49:b7:af:37:a4:5a:b1:ee:
db:18:79:1f:88:9f:32:92:af:17:88:7d:20:78:81:e8:94:d0:
7e:80:86:a7:aa:02:9e:38:56:4f:01:a0:52:da:d9:14:9b:18:
c9:00:94:88:b2:d1:72:ab:8a:44:31:e8:f6:88:39:15:76:bb:
3b:a1:65:04:f4:28:d7:c6:d8:0a:48:3c:52:4c:8c:58:5c:b8:
df:8b:44:36:d6:b7:54:86:b4:b1:94:e3:3f:2a:81:a4:86:e0:
89:aa:49:a7:64:90:e3:e8:24:60:6d:fb:65:27:06:86:c2:62:
3e:c5:73:eb:da:56:ba:60:ae:e3:7a:8a:80:e6:c9:9b:b5:d1:
79:39:17:2f:ed:09:77:6e:e6:c9:bc:68:fc:d0:fe:26:ec:77:
cb:2f:38:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1
QzZFRkMzN0IwHhcNMjYwMzAxMjM0NzEzWhcNMjYwMzA4MjM0NzEzWjAYMRYwFAYD
VQQDEw02OWE0ZDAwMy05MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDETuCbQhM26JBpQsuJJs9FQqPSEKubya1RJLEqdxw/GRYweQ1sNeeU90yoe
JnYiUxcRA6crWWIn4NTqzdtbw9D/zDJQ+qPxk+oJ+IXEyS+5pem3PLOKwJpFf232
J33GLj96+z60hTsD3pBricFfaFph2AfEKdaadtcb/k2QtHF+3FPjUlZRB+Nk4pRR
DCC8nLzARHovS6lrWU7F4GcloxOykHQrxbMTl7yLvDYbAavvv1KCjMuNzkZA1Wet
+0i0YnpNCDDeqhWgFijbfgcX64Im1O6mpn3WToB+Tgeyg778F1ubr8oF5PmiEr69
xDtlYt5mr2DF/ckI/gGfz34AUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSU4ozE
Z9R2SvHVI6uHjk6VTUg8MB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB
QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG
OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK5wSSCrKRuP3CJOktQWYTdT2caZk+gpi5BZ3CKO5NrcTgm7w8bYpb3AJc0Vg
1qxP9QBlKpwpItTpZNUEc3vOutPW28Bj80fVLsPD53NwlqhTPfO50jXJRd04vCt0
2jbNsXff1km3rzekWrHu2xh5H4ifMpKvF4h9IHiB6JTQfoCGp6oCnjhWTwGgUtrZ
FJsYyQCUiLLRcquKRDHo9og5FXa7O6FlBPQo18bYCkg8UkyMWFy434tENta3VIa0
sZTjPyqBpIbgiapJp2SQ4+gkYG37ZScGhsJiPsVz69pWumCu43qKgObJm7XReTkX
L+0Jd27mybxo/ND+Jux3yy84QQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:55 2026 by rpki-client