
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json)
Hash identifier: MiFTkE2cY2ncGlr3A5qeZ1Bf2uuqDETpBS/6xC0z9QI=
Subject key identifier: A4:C1:A8:E1:44:1C:CF:AF:EA:E2:A0:C1:D1:77:80:7F:E9:C0:A0:9D
Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Certificate serial: 08A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
Manifest number: 0897
Signing time: Tue 28 Jul 2026 21:02:50 +0000
Manifest this update: Tue 28 Jul 2026 21:02:50 +0000
Manifest next update: Tue 04 Aug 2026 21:02:50 +0000
Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: 0XSEEcm1m0G9RrFoRxLHfrlswhMgCX12VD2CPuq1B34=)
2: 2CE5D6DA527411F19E183CEDC1833773.roa (hash: v8aPN7aZx1B/f/SeiWc7NRBxQCYRHSn4bV/mKW1KuUY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl
rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Validity
Not Before: Jul 28 21:02:50 2026 GMT
Not After : Aug 4 21:02:50 2026 GMT
Subject: CN=6a6918fa-fe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:ba:0f:a5:f4:ff:7a:5e:c3:a6:cc:21:8f:
45:52:43:8b:16:16:29:c5:94:79:0e:05:09:bd:c1:
fd:eb:ee:7b:29:79:12:b5:75:65:66:f3:c5:e8:78:
fa:da:7e:97:a1:5e:3a:af:fe:94:92:b1:80:c1:f9:
b1:76:d3:77:05:0b:93:7f:cd:16:33:74:21:43:ae:
7a:13:47:19:48:09:eb:1d:f3:65:5c:5c:a4:7d:d6:
c1:39:b3:1d:5b:c8:79:09:c6:7b:14:9e:28:07:db:
39:ae:81:cd:f3:61:62:86:ce:d6:d5:b2:8d:eb:48:
c3:0b:ff:73:25:dd:c0:f9:1d:70:03:69:65:ae:33:
a2:8e:cb:6b:3c:07:65:c5:10:2a:98:79:f1:0b:4b:
01:4c:fc:ad:77:e8:12:4f:8e:39:75:c0:87:a7:71:
28:1a:b7:63:d3:f9:79:5f:79:ff:6e:35:ec:75:8a:
02:01:e7:0d:c4:17:4a:c6:c3:6e:fa:12:e6:54:08:
ed:88:5d:f2:4b:93:8d:8c:0d:76:36:81:46:c9:8a:
8c:9c:53:e2:98:be:c5:b9:b6:54:c0:bc:76:ec:f5:
a3:75:f3:41:ae:2c:ae:7c:04:64:be:00:12:41:11:
8f:d5:46:06:c4:7d:59:12:91:36:78:dc:a1:32:ef:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:A8:E1:44:1C:CF:AF:EA:E2:A0:C1:D1:77:80:7F:E9:C0:A0:9D
X509v3 Authority Key Identifier:
keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:02:58:bc:cf:63:c4:e3:d4:a7:15:86:3d:c0:b4:f5:1e:
8f:6c:3f:09:ea:fb:2e:26:b1:07:63:3a:b8:a3:9b:ac:7d:00:
3a:25:1b:35:34:dd:f1:77:e4:71:78:e7:db:64:b1:e0:ea:43:
49:68:4d:c1:66:e9:f1:39:ac:9a:b4:2e:5b:43:c8:65:45:3b:
ca:41:09:93:0e:4c:cf:a4:dc:db:de:be:82:bd:b4:63:7a:cc:
74:76:f7:46:1d:4b:21:16:5b:d6:49:05:bc:ee:c6:9a:30:5f:
1b:ae:65:19:39:c5:2c:73:20:88:76:3a:6f:ae:64:bd:18:3b:
07:9e:5e:58:20:9c:5a:7b:95:41:22:d9:80:67:13:9a:2e:0d:
e9:2b:d0:43:96:41:4f:21:17:b1:54:b6:7d:21:d2:2b:32:6a:
6b:26:20:ae:c0:5f:fd:31:ca:42:bc:e8:c4:b1:cd:a2:3a:17:
33:79:9d:c6:05:39:bf:47:71:19:2d:64:c1:71:b9:9b:a9:f8:
c5:1a:fa:a4:f0:bd:3e:7e:10:a1:c9:0c:f5:c3:5b:89:9a:c4:
5d:cd:b6:d5:28:21:45:e2:96:e9:7b:b3:78:cd:bf:92:9d:6f:
8e:ec:30:76:23:e8:19:f0:c1:35:ec:39:2d:b7:92:24:00:5d:
e1:98:b1:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB
RjYzMzNGMDAwHhcNMjYwNzI4MjEwMjUwWhcNMjYwODA0MjEwMjUwWjAYMRYwFAYD
VQQDEw02YTY5MThmYS1mZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuMq6D6X0/3pew6bMIY9FUkOLFhYpxZR5DgUJvcH96+57KXkStXVlZvPF6Hj6
2n6XoV46r/6UkrGAwfmxdtN3BQuTf80WM3QhQ656E0cZSAnrHfNlXFykfdbBObMd
W8h5CcZ7FJ4oB9s5roHN82Fihs7W1bKN60jDC/9zJd3A+R1wA2llrjOijstrPAdl
xRAqmHnxC0sBTPytd+gST445dcCHp3EoGrdj0/l5X3n/bjXsdYoCAecNxBdKxsNu
+hLmVAjtiF3yS5ONjA12NoFGyYqMnFPimL7FubZUwLx27PWjdfNBriyufARkvgAS
QRGP1UYGxH1ZEpE2eNyhMu9XcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTBqOFE
HM+v6uKgwdF3gH/pwKCdMB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE
RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw
UDJCMk1OM18xTEd2WXpQd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiVcCWLzPY8Tj1KcVhj3AtPUej2w/Cer7LiaxB2M6uKObrH0AOiUbNTTd8Xfk
cXjn22Sx4OpDSWhNwWbp8TmsmrQuW0PIZUU7ykEJkw5Mz6Tc296+gr20Y3rMdHb3
Rh1LIRZb1kkFvO7GmjBfG65lGTnFLHMgiHY6b65kvRg7B55eWCCcWnuVQSLZgGcT
mi4N6SvQQ5ZBTyEXsVS2fSHSKzJqayYgrsBf/THKQrzoxLHNojoXM3mdxgU5v0dx
GS1kwXG5m6n4xRr6pPC9Pn4QockM9cNbiZrEXc221SghReKW6XuzeM2/kp1vjuww
diPoGfDBNew5LbeSJABd4ZixXA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:52 2026 by rpki-client