
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File: yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier: 41oN49gcBEBVQcZ8iUUbSf7I5yj9eowLj2OWIxZhnpA=
Subject key identifier: A7:56:57:EE:B7:37:5A:8E:FC:F6:7B:CA:77:0D:84:05:2D:EE:2D:36
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number: 014D
Signing time: Thu 16 Apr 2026 21:15:46 +0000
Manifest this update: Thu 16 Apr 2026 21:15:46 +0000
Manifest next update: Thu 23 Apr 2026 21:15:46 +0000
Files and hashes: 1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: eQCp24wyXlVV0nm/Gj5BChov1K0RlqoJcYVwKAloeVY=)
2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: OPdh+VvdJ8rvY5Hnhte8AjyqGibUOoE1fm+ikF6YCWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Validity
Not Before: Apr 16 21:15:46 2026 GMT
Not After : Apr 23 21:15:46 2026 GMT
Subject: CN=69e15182-c6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:b1:71:71:ce:d3:68:9c:18:8c:76:52:49:
eb:76:37:28:ca:88:20:27:59:aa:0d:8b:dc:15:9c:
04:9a:dd:49:a5:03:07:16:ac:4d:7a:63:02:d1:29:
b2:b4:07:d7:47:18:83:81:f3:ee:ef:24:a6:24:09:
67:e6:16:f3:46:d2:ff:8c:24:2e:7d:be:0f:22:d4:
5f:40:e6:91:08:b9:35:62:bb:48:99:4a:32:a8:41:
55:51:12:d2:16:4b:e9:de:36:d0:2b:c8:6a:44:86:
89:3e:4b:21:7d:f5:a9:1d:6a:9a:bc:63:59:89:b1:
53:19:57:7b:6e:fd:59:3e:74:9e:36:5f:c5:06:a8:
2f:c5:04:25:88:7d:cf:50:f8:17:66:8a:19:5a:68:
a2:13:5f:c3:fc:ea:c2:fc:a8:a8:ef:3a:7c:e3:93:
ca:26:06:43:a6:47:cf:73:5d:a1:35:4c:a1:96:17:
7b:6b:6e:52:be:c7:db:23:ff:f0:69:ff:5f:89:22:
0e:92:c6:b8:a1:a4:d6:54:56:08:bb:95:e6:6e:82:
cd:2a:9b:07:56:b6:a3:61:ea:26:a3:79:cf:42:cc:
dd:6c:b3:c8:3f:1f:c4:f6:07:e0:bd:93:8c:78:54:
15:64:c9:5e:e3:b8:6f:6c:93:91:8a:e6:0a:b6:88:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:57:EE:B7:37:5A:8E:FC:F6:7B:CA:77:0D:84:05:2D:EE:2D:36
X509v3 Authority Key Identifier:
keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:47:26:b7:54:16:e9:e8:b6:53:dc:fe:40:64:e4:dd:40:17:
a6:c8:4f:f2:f5:95:8d:a7:f2:06:c4:bd:78:29:31:cc:cf:8c:
b5:2a:10:0d:74:ce:52:ae:d1:4c:e9:3f:f2:f8:9a:73:74:05:
ee:ae:21:a9:06:c0:68:13:92:c2:57:e5:80:55:fb:63:ba:5c:
c7:ad:58:3b:f4:99:c2:a9:e0:07:72:37:de:29:92:6a:22:b9:
d5:7e:56:95:37:1a:ec:73:bd:f4:cd:4b:47:a7:77:e9:92:77:
dd:86:1c:ce:1f:be:52:13:6d:91:af:4f:55:04:ed:e6:05:57:
1f:28:dc:7c:ee:c1:44:50:60:be:94:9e:28:07:ec:c6:71:95:
ee:16:9a:22:4b:5b:eb:87:c1:cb:ed:a0:02:e2:31:35:45:00:
b0:dc:3d:da:fc:03:6f:e6:f2:77:44:a1:da:a6:a5:cf:c1:90:
19:03:70:1b:38:bc:4c:49:e6:a3:25:16:6a:37:9f:27:ae:51:
b7:0a:87:d3:cd:50:3b:3d:c5:90:f8:0d:aa:d9:49:1c:78:f1:
78:99:ce:51:c0:bc:e5:be:65:24:ba:70:6e:3f:bd:92:e9:91:
58:9a:35:21:21:40:07:a8:45:51:9b:71:21:7a:58:27:08:4c:
8b:57:9b:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUEwNTMxMTAvBgNVBAUTKENBODc3QTdBRUYxREJCMDQ1NjQ4N0Y2MUZFRTY5OTM2
Mzc1NDFFNUQwHhcNMjYwNDE2MjExNTQ2WhcNMjYwNDIzMjExNTQ2WjAYMRYwFAYD
VQQDEw02OWUxNTE4Mi1jNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp/yxcXHO02icGIx2UknrdjcoyoggJ1mqDYvcFZwEmt1JpQMHFqxNemMC0Smy
tAfXRxiDgfPu7ySmJAln5hbzRtL/jCQufb4PItRfQOaRCLk1YrtImUoyqEFVURLS
Fkvp3jbQK8hqRIaJPkshffWpHWqavGNZibFTGVd7bv1ZPnSeNl/FBqgvxQQliH3P
UPgXZooZWmiiE1/D/OrC/Kio7zp845PKJgZDpkfPc12hNUyhlhd7a25SvsfbI//w
af9fiSIOksa4oaTWVFYIu5XmboLNKpsHVrajYeomo3nPQszdbLPIPx/E9gfgvZOM
eFQVZMle47hvbJORiuYKtog3CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdWV+63
N1qO/PZ7yncNhAUt7i02MB8GA1UdIwQYMBaAFMqHenrvHbsEVkh/Yf7mmTY3VB5d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My84NzIwMzA1RTQ0
OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3UldTSDloX3VhWk5qZFVI
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lvZDZldThkdXdSV1NIOWhfdWFaTmpkVUhsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTA1My84NzIwMzA1RTQ0OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3
UldTSDloX3VhWk5qZFVIbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr0cmt1QW6ei2U9z+QGTk3UAXpshP8vWVjafyBsS9eCkxzM+MtSoQDXTOUq7R
TOk/8viac3QF7q4hqQbAaBOSwlflgFX7Y7pcx61YO/SZwqngB3I33imSaiK51X5W
lTca7HO99M1LR6d36ZJ33YYczh++UhNtka9PVQTt5gVXHyjcfO7BRFBgvpSeKAfs
xnGV7haaIktb64fBy+2gAuIxNUUAsNw92vwDb+byd0Sh2qalz8GQGQNwGzi8TEnm
oyUWajefJ65RtwqH081QOz3FkPgNqtlJHHjxeJnOUcC85b5lJLpwbj+9kumRWJo1
ISFAB6hFUZtxIXpYJwhMi1ebLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:50:18 2026 by rpki-client