
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json)
Hash identifier: 3BjrmoNcxh1VtKOYWTADwI5ii3hTf5TeGLKalgJYZNY=
Subject key identifier: 61:13:F7:44:45:79:8A:3E:0C:DA:E3:63:2B:D9:9B:27:81:C3:8C:0E
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial: 324D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
Manifest number: 3224
Signing time: Fri 12 Jun 2026 15:24:14 +0000
Manifest this update: Fri 12 Jun 2026 15:24:13 +0000
Manifest next update: Fri 19 Jun 2026 15:24:13 +0000
Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: gsgnFzTKuqWFyyJ8i8rMPsbeBtvx6DXNfjw/ku++YGU=)
2: 8114E7825FE911F191A047CF7947A888.roa (hash: Gni6cz7amnYCQMsrNAKYs/EoGduCypBTZLbYZs8lgnU=)
3: 858F2428399511F18707CD8AA2833773.roa (hash: cUr0clqCyCkiUIq/VycqLhOHK0HYu8G+EZ7N59Y9lRQ=)
4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: l4FF/86A72/pQWVDtqFOaJrDc/AFvwdU+PSOUvI8AEQ=)
5: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: zAJ8EflHvlk8cQS30bxOAjOnY5H30jOLYKCISbgWDzQ=)
6: 4B019258F78411F08F54609B4C6F56BC.roa (hash: CpOzi8FiEufrBV1/AwwSQPXIljCTOvAWGD5jCmfLyKE=)
7: 4BEF9ED0F78411F08F54609B4C6F56BC.roa (hash: yPWBySfPVekzCZl7CkHBPHrMQBoFazZW/jnbhHVrf34=)
8: 4B7CAC36F78411F08F54609B4C6F56BC.roa (hash: WmsDBlyhST/b5bX+D6J5AC3D6tVJPhXha9WGq62ba4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12877 (0x324d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Validity
Not Before: Jun 12 15:24:13 2026 GMT
Not After : Jun 19 15:24:13 2026 GMT
Subject: CN=6a2c249d-c1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:46:5f:70:77:fa:5b:39:d8:2f:5a:40:0c:
ef:35:66:74:3e:42:1f:9b:ec:01:a2:c2:56:18:58:
2f:09:a9:59:fd:8d:73:2b:ea:dc:54:8f:fa:d6:ea:
78:5d:d0:21:75:6b:6e:fa:28:2f:d9:60:02:63:e6:
ab:28:a6:66:24:ba:d4:e4:b2:4d:95:37:31:60:41:
22:4a:63:b2:3a:49:c3:a8:14:eb:c7:97:1b:99:df:
6f:aa:40:28:2c:15:8d:1a:7a:d4:64:02:b3:83:44:
80:13:53:7a:47:30:f8:37:0e:60:e5:cf:eb:ca:be:
f4:15:60:d6:b4:fe:ed:a5:07:67:0f:25:fe:cb:28:
ea:0d:c2:1f:0f:15:ef:7d:97:a3:b3:1f:08:b2:26:
4b:ec:43:28:13:2c:f6:22:cc:81:00:ae:00:ea:2e:
06:17:6c:c4:2d:09:df:fd:03:1d:1c:e7:c8:2c:f6:
b1:2c:ef:8b:a6:86:78:ec:1d:c4:df:d3:6e:f2:5e:
00:b1:20:c6:e6:74:68:29:4a:c0:7c:40:8f:d9:7c:
8c:62:bb:98:90:0a:c9:29:15:c4:76:23:3a:6b:8b:
a9:51:a4:04:ea:09:d5:9e:90:95:c4:6d:ad:b0:8e:
76:e8:20:a9:86:2e:51:7d:fb:e2:58:7c:6d:eb:0e:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:13:F7:44:45:79:8A:3E:0C:DA:E3:63:2B:D9:9B:27:81:C3:8C:0E
X509v3 Authority Key Identifier:
keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:f7:e8:3b:15:fd:a9:e4:77:87:eb:d7:5e:3f:8e:03:4e:9f:
ef:b1:1b:87:00:49:63:47:eb:13:25:8e:de:73:b9:b1:1c:e5:
72:d9:2b:bb:26:10:63:db:e9:f7:26:44:6e:8e:6c:f6:4e:d9:
d9:bb:86:6b:21:ee:3b:b4:19:4a:ff:75:b6:9e:9b:4e:57:93:
14:25:ae:25:6b:a6:50:e2:0e:5a:e9:cb:13:da:a6:69:8e:b1:
53:03:e0:76:93:56:9d:94:e9:32:8e:a8:6d:f5:35:bc:74:73:
87:9e:11:09:24:ea:26:06:9e:0d:f9:bb:c0:dc:5b:d6:54:43:
b9:49:1e:a5:e6:96:c0:ce:c8:aa:bc:4e:64:85:68:ae:0d:3b:
dc:79:a8:62:b5:db:d3:be:2c:10:88:34:a3:55:20:c9:e8:9a:
2e:01:52:5b:2c:71:0c:bf:f8:65:00:c6:6a:80:44:dc:b9:2b:
9a:77:79:29:a0:ef:34:19:5a:8e:d4:4a:ea:12:0b:ed:2f:eb:
04:7a:57:84:e1:4c:21:3a:9e:9d:7c:45:09:e8:b9:6e:c0:2f:
60:30:aa:19:43:8b:11:27:5a:8d:6b:85:3a:cb:12:a5:4e:ba:
80:c1:14:ad:72:c8:3a:dc:49:d1:a1:d1:dc:08:8f:20:6a:5d:
b1:ea:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:46 2026 by rpki-client