
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json)
Hash identifier: 8sp7kS/Dh18eAEmuK+uEvV+QL4MHgNYMQQHYOw8iGi4=
Subject key identifier: E9:F8:38:8B:AD:EF:24:9F:DA:4E:C2:1E:6C:A9:BF:92:82:B3:F9:44
Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Certificate serial: 088C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
Manifest number: 0880
Signing time: Fri 12 Jun 2026 20:44:01 +0000
Manifest this update: Fri 12 Jun 2026 20:44:01 +0000
Manifest next update: Fri 19 Jun 2026 20:44:01 +0000
Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: Pw9g6Kf5Xo60jRIB4PxBLj1LeyY8FxsuK0pOuPcxvjw=)
2: 2CE5D6DA527411F19E183CEDC1833773.roa (hash: v8aPN7aZx1B/f/SeiWc7NRBxQCYRHSn4bV/mKW1KuUY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl
rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00
Validity
Not Before: Jun 12 20:44:01 2026 GMT
Not After : Jun 19 20:44:01 2026 GMT
Subject: CN=6a2c6f91-a284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:1c:e5:59:07:e8:7f:ec:c1:5e:4f:7a:91:
d8:c5:9d:93:b3:36:75:f9:03:bb:0a:a7:13:47:0f:
e3:85:78:69:e7:e1:69:32:2a:ec:2a:68:25:52:02:
95:da:03:c1:97:c6:10:c8:e8:26:ef:2f:28:ce:56:
f5:d6:cb:87:9f:d6:c5:d2:75:e3:5f:7d:2f:1b:ea:
81:13:17:60:bd:50:62:44:36:81:31:e5:c0:38:d6:
55:79:4c:3d:5f:45:72:45:86:3b:9b:9a:2b:48:6e:
99:4d:2b:48:e4:0a:b5:93:9f:8d:bf:9d:ce:9f:a7:
bf:6a:95:ff:38:51:d4:99:29:2b:8f:9a:dd:38:67:
06:41:54:41:23:e7:9b:dc:dd:c6:ff:3d:aa:40:c3:
e5:2b:a5:93:2e:2f:3c:c0:aa:73:49:ff:13:10:f2:
ed:3b:0d:d9:b9:76:6f:8a:d1:74:90:2e:dc:11:21:
15:49:52:e3:ce:43:d3:8a:73:73:04:ee:b7:53:17:
0d:55:7c:a1:10:75:c0:0a:47:43:87:01:a6:f5:6c:
3e:7f:e5:96:0f:c9:a9:82:cf:ed:9e:f7:9a:ed:73:
c5:84:48:e3:b9:96:92:b1:d4:e0:16:7b:1b:49:fe:
33:3f:fd:ea:62:22:26:6f:3d:a6:d2:8a:ab:92:72:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F8:38:8B:AD:EF:24:9F:DA:4E:C2:1E:6C:A9:BF:92:82:B3:F9:44
X509v3 Authority Key Identifier:
keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:8a:8b:d2:f9:47:50:36:12:5f:32:d2:53:c5:a0:54:f2:17:
34:47:48:3f:70:62:3d:43:06:24:ea:bc:13:5a:d6:9f:a5:f8:
6c:ed:0b:65:94:5b:80:43:2c:4d:df:0a:1d:9f:c7:4a:bc:fa:
c3:df:c0:3d:6b:a0:57:ee:2f:a9:a7:6d:77:79:39:e4:81:02:
f6:67:9f:ce:15:e3:f1:66:76:4d:bc:df:db:c6:3d:30:7c:38:
27:4d:4b:34:30:32:20:d5:ee:57:65:0e:84:de:ab:5d:b5:52:
f3:d3:21:22:d5:4c:2c:2f:a2:99:96:43:8c:9a:46:83:50:af:
ac:59:62:ab:29:d0:f4:9b:cb:5b:e2:86:00:53:86:0a:05:f6:
d3:77:f9:8a:27:e9:f1:aa:70:a3:43:4b:ff:fb:dc:76:98:b0:
ae:fa:bb:07:5a:92:fa:88:93:4e:92:7d:37:65:c7:80:c9:d9:
18:a2:0a:a2:e2:cb:2c:f6:9a:6c:e7:86:6d:dc:7e:fb:e9:d9:
ed:f5:47:b6:11:1b:16:47:89:42:39:fb:3f:1b:b8:a7:e6:c5:
c1:50:03:c1:3e:ba:06:19:9d:5b:f6:c1:da:8a:87:f0:f5:d9:
3f:22:42:62:ed:38:f8:d4:35:71:f0:e3:77:45:23:6e:8c:fd:
03:2d:3a:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB
RjYzMzNGMDAwHhcNMjYwNjEyMjA0NDAxWhcNMjYwNjE5MjA0NDAxWjAYMRYwFAYD
VQQDEw02YTJjNmY5MS1hMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyksc5VkH6H/swV5PepHYxZ2TszZ1+QO7CqcTRw/jhXhp5+FpMirsKmglUgKV
2gPBl8YQyOgm7y8ozlb11suHn9bF0nXjX30vG+qBExdgvVBiRDaBMeXAONZVeUw9
X0VyRYY7m5orSG6ZTStI5Aq1k5+Nv53On6e/apX/OFHUmSkrj5rdOGcGQVRBI+eb
3N3G/z2qQMPlK6WTLi88wKpzSf8TEPLtOw3ZuXZvitF0kC7cESEVSVLjzkPTinNz
BO63UxcNVXyhEHXACkdDhwGm9Ww+f+WWD8mpgs/tnvea7XPFhEjjuZaSsdTgFnsb
Sf4zP/3qYiImbz2m0oqrknIhewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOn4OIut
7ySf2k7CHmypv5KCs/lEMB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE
RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw
UDJCMk1OM18xTEd2WXpQd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlYqL0vlHUDYSXzLSU8WgVPIXNEdIP3BiPUMGJOq8E1rWn6X4bO0LZZRbgEMs
Td8KHZ/HSrz6w9/APWugV+4vqadtd3k55IEC9mefzhXj8WZ2Tbzf28Y9MHw4J01L
NDAyINXuV2UOhN6rXbVS89MhItVMLC+imZZDjJpGg1CvrFliqynQ9JvLW+KGAFOG
CgX203f5iifp8apwo0NL//vcdpiwrvq7B1qS+oiTTpJ9N2XHgMnZGKIKouLLLPaa
bOeGbdx+++nZ7fVHthEbFkeJQjn7Pxu4p+bFwVADwT66BhmdW/bB2oqH8PXZPyJC
Yu04+NQ1cfDjd0Ujboz9Ay06PA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:32 2026 by rpki-client