
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json)
Hash identifier: +9fNSiwL4DjXXlsBfleTGdi1GglEwvckSE5kOJF07Sg=
Subject key identifier: 3C:C8:04:F6:D8:7F:EC:C8:64:2B:7D:13:57:D6:8E:56:54:B5:C8:89
Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Certificate serial: 0816
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
Manifest number: 0816
Signing time: Mon 02 Mar 2026 02:19:40 +0000
Manifest this update: Mon 02 Mar 2026 02:19:38 +0000
Manifest next update: Mon 09 Mar 2026 02:19:38 +0000
Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: yWqmF2q4P7beXY2oQ4cXXpvHzF4JKrFZ+PZ8dWUXe2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Validity
Not Before: Mar 2 02:19:38 2026 GMT
Not After : Mar 9 02:19:38 2026 GMT
Subject: CN=69a4f3bb-673f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:f8:8b:ba:a2:b1:50:b5:c1:06:6b:d3:a2:
7e:8d:66:b8:82:f0:51:c1:05:a9:a3:a7:f4:08:f7:
e7:ff:8b:03:a7:a8:d4:01:71:f4:5e:6b:75:aa:ab:
82:ad:6f:b5:84:85:47:5a:0c:08:80:5e:98:b2:e8:
8a:28:46:7e:3b:54:61:dc:8b:00:bb:2e:c9:46:41:
1a:9e:ff:a8:3b:f9:7a:95:b5:95:d2:6f:e2:b6:8a:
d3:eb:3d:72:68:bb:f6:5a:23:ca:07:64:69:94:9d:
10:6d:0d:00:2d:5e:bf:2e:c9:72:e6:13:0c:b6:a4:
e2:2d:e6:fe:33:f2:66:4c:cd:cd:d2:97:2a:7f:96:
0c:9f:eb:50:6b:73:0a:13:22:5a:4f:51:8e:a7:d6:
d9:c9:6f:b6:ba:ae:fa:ae:e2:8f:9b:54:0b:1f:10:
52:63:6f:e5:65:ba:0c:0c:93:7f:0b:91:0c:4a:9e:
c1:73:d2:9c:7b:57:96:c7:0e:43:a5:85:5f:f5:04:
3f:b2:66:8a:56:bd:00:42:fe:37:6c:c5:f8:51:d7:
02:c5:06:76:2e:93:fa:bb:07:ce:0f:7e:96:3d:fc:
9c:60:2b:8b:a9:55:9b:0a:ed:09:c0:53:ad:8e:af:
68:d9:65:b1:38:28:4e:2a:24:11:1b:15:93:a5:6b:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C8:04:F6:D8:7F:EC:C8:64:2B:7D:13:57:D6:8E:56:54:B5:C8:89
X509v3 Authority Key Identifier:
keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:00:0a:f1:63:0a:c2:aa:8a:53:59:90:08:04:1f:c9:0a:fc:
fa:56:cb:81:97:71:11:b5:84:bb:bf:56:c5:96:00:d2:9f:1b:
1b:53:7b:bf:72:5a:9f:d8:bb:73:3a:ba:38:ef:c9:92:61:71:
70:54:7d:56:d7:e6:a4:59:93:e6:bd:2f:47:19:e8:46:87:90:
28:ac:ae:60:13:b0:59:1d:1f:57:f5:7c:97:be:6f:68:52:36:
d1:1b:b8:c8:43:77:05:24:a5:bc:4f:c7:55:9c:f7:74:11:4f:
df:ce:4e:75:cd:33:d2:98:09:06:09:a6:05:aa:c1:60:f5:45:
bc:09:2f:91:96:68:d1:8a:71:28:39:a5:99:14:6a:46:70:0c:
11:ec:60:48:1b:9f:35:f7:a6:e8:fa:0e:ac:b5:07:80:4a:49:
05:fe:f3:48:a8:49:07:af:67:2d:9b:71:d7:a9:27:9c:77:eb:
e5:f0:a5:be:69:02:bd:41:75:a5:a5:2d:55:3a:ad:2a:fb:a4:
97:69:0a:e6:e3:29:ae:03:65:cc:6a:b2:25:eb:e5:7d:88:ca:
f4:55:80:d8:55:6e:63:78:f2:e9:5b:9a:e1:47:c4:dd:48:d0:
00:83:7f:e5:9f:56:57:0a:54:cd:54:f4:f7:a4:a9:35:e8:b5:
75:fc:26:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF
OUYzODFGMTIwHhcNMjYwMzAyMDIxOTM4WhcNMjYwMzA5MDIxOTM4WjAYMRYwFAYD
VQQDEw02OWE0ZjNiYi02NzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYn4i7qisVC1wQZr06J+jWa4gvBRwQWpo6f0CPfn/4sDp6jUAXH0Xmt1qquC
rW+1hIVHWgwIgF6YsuiKKEZ+O1Rh3IsAuy7JRkEanv+oO/l6lbWV0m/itorT6z1y
aLv2WiPKB2RplJ0QbQ0ALV6/Lsly5hMMtqTiLeb+M/JmTM3N0pcqf5YMn+tQa3MK
EyJaT1GOp9bZyW+2uq76ruKPm1QLHxBSY2/lZboMDJN/C5EMSp7Bc9Kce1eWxw5D
pYVf9QQ/smaKVr0AQv43bMX4UdcCxQZ2LpP6uwfOD36WPfycYCuLqVWbCu0JwFOt
jq9o2WWxOChOKiQRGxWTpWvI0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzIBPbY
f+zIZCt9E1fWjlZUtciJMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE
NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt
NmU1SHEyLXViZkRwODRIeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIwAK8WMKwqqKU1mQCAQfyQr8+lbLgZdxEbWEu79WxZYA0p8bG1N7v3Jan9i7
czq6OO/JkmFxcFR9VtfmpFmT5r0vRxnoRoeQKKyuYBOwWR0fV/V8l75vaFI20Ru4
yEN3BSSlvE/HVZz3dBFP385Odc0z0pgJBgmmBarBYPVFvAkvkZZo0YpxKDmlmRRq
RnAMEexgSBufNfem6PoOrLUHgEpJBf7zSKhJB69nLZtx16knnHfr5fClvmkCvUF1
paUtVTqtKvukl2kK5uMprgNlzGqyJevlfYjK9FWA2FVuY3jy6Vua4UfE3UjQAIN/
5Z9WVwpUzVT096SpNei1dfwm/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:42 2026 by rpki-client