
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json)
Hash identifier: LU9StzSHtLzk/JWLnycL8s4t1Z2P4OXkB2hIG389U54=
Subject key identifier: B4:4F:A8:1B:42:EE:E2:7D:45:77:41:E5:69:75:10:B5:22:B9:22:57
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 1104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
Manifest number: 10EC
Signing time: Sun 01 Mar 2026 22:43:52 +0000
Manifest this update: Sun 01 Mar 2026 22:43:52 +0000
Manifest next update: Sun 08 Mar 2026 22:43:52 +0000
Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: wCEcxmriS4nwy0/t31xvyxIvxekVDB7JG5MIiXcc91w=)
2: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: 8JBwnhOY779AA3x2T0DvQ6HeyAwp0GHyzlG+8kDJam0=)
3: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: SrXwDLxWzlD5Tzz3fVP3ku5wxDt5i+weeTQipTZ19xg=)
4: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: GFfQB2074BBNk/2VX1/DPCUmtW00d52BCbE3F4d9xDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4356 (0x1104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: Mar 1 22:43:52 2026 GMT
Not After : Mar 8 22:43:52 2026 GMT
Subject: CN=69a4c128-2c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:69:9c:a7:97:6f:83:67:1b:e5:28:77:c5:
50:99:4d:13:e0:60:4e:4e:94:b5:4a:85:bb:f3:a1:
71:3b:69:71:d1:c5:ac:4f:a1:30:ca:53:19:66:67:
5f:22:b4:27:c7:1b:07:df:0c:a5:8e:8e:bd:36:bc:
e7:d0:8d:ef:b0:ee:54:ae:44:08:44:3a:f7:5c:24:
7c:aa:84:fb:84:5c:f9:6c:26:c3:99:95:99:22:c1:
08:78:79:19:eb:46:79:a1:1b:bf:9d:f0:7e:ac:d2:
97:2b:fc:10:53:8d:5a:08:dd:d8:b5:e1:ca:91:19:
26:9a:7c:26:90:2e:5a:7e:0b:17:a8:b6:48:29:07:
dd:51:a9:90:11:1e:6f:29:89:67:6d:70:1c:d9:25:
5a:1a:6a:26:11:75:dd:1e:f1:2a:5c:8b:ef:c6:b1:
06:a4:d7:e5:c3:24:6d:01:96:47:db:b6:8c:bc:7c:
b2:26:d4:02:52:81:fb:f1:0c:a8:1d:68:ab:07:71:
a5:a6:56:03:a1:20:84:60:0f:97:0d:d9:09:bf:59:
31:f0:ea:bd:7d:d0:aa:a5:ee:98:a7:45:48:3e:c4:
b8:80:bc:56:4e:b9:f2:e7:19:56:ed:63:fa:8e:ab:
55:93:a6:22:63:f8:c7:58:fb:cf:8c:0f:62:20:22:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4F:A8:1B:42:EE:E2:7D:45:77:41:E5:69:75:10:B5:22:B9:22:57
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:82:2b:20:36:95:a3:bf:12:7d:06:ed:6c:25:ff:52:41:40:
fc:d0:a3:e0:77:23:fe:ff:e7:c9:5b:79:36:12:96:c4:53:b6:
da:f3:f6:6f:61:54:ca:36:df:a2:a6:23:60:73:50:b6:4d:85:
df:3b:27:ed:ee:7f:02:5f:10:6b:be:91:23:66:5b:b8:a3:e4:
17:e9:e9:b1:1c:96:3e:71:11:ab:1b:e6:08:a8:03:44:6f:40:
b5:c9:ad:85:09:f2:07:22:e8:bf:11:ba:06:84:00:ea:7e:70:
5d:98:68:fa:2d:0f:92:fc:8d:d8:9b:84:3d:41:40:18:9c:f5:
92:73:c7:bb:26:3d:29:db:4e:df:df:6d:17:f7:44:33:be:43:
a8:1f:ef:6a:38:c5:35:99:92:c3:fe:7b:d2:54:9f:e3:25:58:
57:74:5b:b5:80:23:7d:3b:72:48:d7:6c:7c:24:61:04:6a:c5:
13:d8:33:82:65:fa:73:0d:30:23:dd:18:1e:85:35:e8:6c:36:
ad:82:ab:aa:d0:c2:b7:7c:77:c8:02:57:15:5c:cd:8c:39:58:
d6:07:01:8d:7e:a2:ad:12:c7:c8:df:ed:e6:f1:eb:75:45:3b:
1d:31:70:3c:32:8a:38:13:0b:93:8f:59:3a:6b:92:9b:8b:49:
b0:9a:39:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx
RkI5QTVGMkEwHhcNMjYwMzAxMjI0MzUyWhcNMjYwMzA4MjI0MzUyWjAYMRYwFAYD
VQQDEw02OWE0YzEyOC0yYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqk9pnKeXb4NnG+Uod8VQmU0T4GBOTpS1SoW786FxO2lx0cWsT6EwylMZZmdf
IrQnxxsH3wyljo69Nrzn0I3vsO5UrkQIRDr3XCR8qoT7hFz5bCbDmZWZIsEIeHkZ
60Z5oRu/nfB+rNKXK/wQU41aCN3YteHKkRkmmnwmkC5afgsXqLZIKQfdUamQER5v
KYlnbXAc2SVaGmomEXXdHvEqXIvvxrEGpNflwyRtAZZH27aMvHyyJtQCUoH78Qyo
HWirB3GlplYDoSCEYA+XDdkJv1kx8Oq9fdCqpe6Yp0VIPsS4gLxWTrny5xlW7WP6
jqtVk6YiY/jHWPvPjA9iICLitQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLRPqBtC
7uJ9RXdB5Wl1ELUiuSJXMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5
MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzU1OC8wRjIxMjE0RTM5MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0
V0Y0eENzMk5feXNmdWFYeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ4IrIDaVo78SfQbtbCX/UkFA/NCj4Hcj/v/nyVt5NhKWxFO22vP2b2FUyjbf
oqYjYHNQtk2F3zsn7e5/Al8Qa76RI2ZbuKPkF+npsRyWPnERqxvmCKgDRG9Atcmt
hQnyByLovxG6BoQA6n5wXZho+i0PkvyN2JuEPUFAGJz1knPHuyY9KdtO399tF/dE
M75DqB/vajjFNZmSw/570lSf4yVYV3RbtYAjfTtySNdsfCRhBGrFE9gzgmX6cw0w
I90YHoU16Gw2rYKrqtDCt3x3yAJXFVzNjDlY1gcBjX6irRLHyN/t5vHrdUU7HTFw
PDKKOBMLk49ZOmuSm4tJsJo5gg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:05 2026 by rpki-client