
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json)
Hash identifier: kaLzqsuwXidaNiJdnUiL1s3NA75MOyMFzsON3bqd5/4=
Subject key identifier: D7:63:99:08:D2:59:F1:A9:50:5B:3A:7D:D5:0F:5F:0F:49:84:E7:76
Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Certificate serial: 0C00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
Manifest number: 0BE1
Signing time: Sun 01 Mar 2026 22:25:54 +0000
Manifest this update: Sun 01 Mar 2026 22:25:53 +0000
Manifest next update: Sun 08 Mar 2026 22:25:53 +0000
Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: mEKbov/1uldDuHk6Htc9B5Xna8cMEoVnr+9VfCau7y8=)
2: 6AC5AB5CEAB811F088FEC0005D6F56BC.roa (hash: GCpn4gmc0QpPSz7cXybRJq63rDVbixPSMbZl0hH07Xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3072 (0xc00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Validity
Not Before: Mar 1 22:25:53 2026 GMT
Not After : Mar 8 22:25:53 2026 GMT
Subject: CN=69a4bcf1-edb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:14:ab:ee:08:6a:1e:1a:6f:34:71:40:14:
50:56:8c:c3:8b:9d:ea:95:85:48:49:4e:b0:74:17:
73:d1:df:c9:b7:27:9c:31:ce:9f:bd:d5:90:3a:04:
76:5d:7b:4a:c4:28:94:15:a3:ea:c7:3f:db:d9:76:
d4:48:be:8e:6f:6b:d6:8c:21:b1:84:b9:3d:fc:f9:
b5:98:ab:2a:b3:73:29:4a:f0:eb:00:1f:79:33:92:
eb:d7:31:50:f2:28:17:d4:44:60:1d:f1:1f:82:69:
54:b5:22:fb:98:73:d5:d9:85:73:0d:18:97:49:80:
a2:e2:4f:b1:db:2b:17:80:cd:d0:42:7b:dc:f9:ac:
89:d1:64:56:0a:9d:b2:5f:e9:ac:54:13:00:84:6a:
a8:7e:c8:f7:24:f0:8d:9b:a4:2b:dc:ab:9f:70:3a:
f4:06:c6:27:56:be:60:40:79:24:44:bc:7d:49:94:
1d:29:25:93:0f:27:72:7c:2f:77:1c:50:c6:19:52:
50:63:ce:4d:d1:24:af:45:1a:4c:3d:9a:96:c7:9a:
27:89:42:da:a4:37:af:0e:f7:87:24:f9:ba:98:2d:
af:da:b2:05:e3:e9:76:ac:8b:35:be:ff:ae:84:41:
1a:ae:6c:0d:b0:a4:47:47:d5:ac:97:7c:6b:7a:69:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:63:99:08:D2:59:F1:A9:50:5B:3A:7D:D5:0F:5F:0F:49:84:E7:76
X509v3 Authority Key Identifier:
keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:fd:00:87:a4:fe:9d:22:f2:59:ca:89:e5:58:3c:bb:63:7b:
9a:75:f2:d0:42:cb:d9:61:73:26:b7:b0:57:b7:4f:90:1f:8a:
63:67:9b:51:96:67:c2:73:88:bd:a7:00:16:b1:50:24:88:04:
0e:c9:f3:75:8a:6a:dd:41:46:d1:ad:41:c0:b2:61:95:08:7b:
4b:5a:1e:ae:27:ab:d9:c8:a9:18:47:28:99:4e:7b:b4:5b:e5:
3c:7f:da:90:60:57:29:67:ee:68:09:39:95:e2:48:d0:3e:50:
a7:eb:3b:5d:56:b9:95:5e:60:10:f9:16:07:5b:44:bd:8b:5f:
b4:9b:66:12:62:71:82:2c:d5:c3:cc:b2:13:f6:63:9c:a9:c5:
b9:b5:50:3d:d4:ed:5c:85:7f:aa:d9:c8:de:14:b9:b6:a9:68:
2e:43:81:f0:60:61:a0:ee:93:2f:dc:1f:3e:9b:9e:7c:0f:4c:
e6:cb:83:74:30:a3:be:9a:e5:13:a5:d0:36:58:d1:9e:7a:80:
79:c3:ac:37:26:33:92:73:ee:ca:2d:06:e1:61:0f:fb:c3:1d:
64:0f:a3:56:42:7e:eb:59:53:5d:68:da:c1:3a:74:e1:c7:7d:
b0:62:82:70:96:37:09:b0:44:18:19:4e:3b:9b:01:ed:30:93:
73:d3:15:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5
MTNENDE5RTMwHhcNMjYwMzAxMjIyNTUzWhcNMjYwMzA4MjIyNTUzWjAYMRYwFAYD
VQQDEw02OWE0YmNmMS1lZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/4Uq+4Iah4abzRxQBRQVozDi53qlYVISU6wdBdz0d/JtyecMc6fvdWQOgR2
XXtKxCiUFaPqxz/b2XbUSL6Ob2vWjCGxhLk9/Pm1mKsqs3MpSvDrAB95M5Lr1zFQ
8igX1ERgHfEfgmlUtSL7mHPV2YVzDRiXSYCi4k+x2ysXgM3QQnvc+ayJ0WRWCp2y
X+msVBMAhGqofsj3JPCNm6Qr3KufcDr0BsYnVr5gQHkkRLx9SZQdKSWTDydyfC93
HFDGGVJQY85N0SSvRRpMPZqWx5oniULapDevDveHJPm6mC2v2rIF4+l2rIs1vv+u
hEEarmwNsKRHR9Wsl3xremlivQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdjmQjS
WfGpUFs6fdUPXw9JhOd2MB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5
RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn
MlFKX3praGs4bXlSUFVHZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFv0Ah6T+nSLyWcqJ5Vg8u2N7mnXy0ELL2WFzJrewV7dPkB+KY2ebUZZnwnOI
vacAFrFQJIgEDsnzdYpq3UFG0a1BwLJhlQh7S1oerier2cipGEcomU57tFvlPH/a
kGBXKWfuaAk5leJI0D5Qp+s7XVa5lV5gEPkWB1tEvYtftJtmEmJxgizVw8yyE/Zj
nKnFubVQPdTtXIV/qtnI3hS5tqloLkOB8GBhoO6TL9wfPpuefA9M5suDdDCjvprl
E6XQNljRnnqAecOsNyYzknPuyi0G4WEP+8MdZA+jVkJ+61lTXWjawTp04cd9sGKC
cJY3CbBEGBlOO5sB7TCTc9MVNA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:23 2026 by rpki-client