
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json)
Hash identifier: 0WqYaO4imS/0IDU1fepq/TPR2fnXbi9e90DLOZYsKWs=
Subject key identifier: 52:E4:8B:E1:F7:25:66:1F:F2:52:C1:64:6F:7A:25:D9:2C:F5:FA:9E
Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Certificate serial: 0580
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
Manifest number: 0577
Signing time: Thu 16 Apr 2026 23:13:41 +0000
Manifest this update: Thu 16 Apr 2026 23:13:41 +0000
Manifest next update: Thu 23 Apr 2026 23:13:41 +0000
Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: f8TA+vu4LAFegNMWJbE8vj0tGDvwCbLwwOKBoQLopFQ=)
2: 004A745EDBB011F0904A453A4D641951.roa (hash: 0TWkmfJVbCOLiU1v9M8I2M82G17YACYNARPjaSNnjI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Validity
Not Before: Apr 16 23:13:41 2026 GMT
Not After : Apr 23 23:13:41 2026 GMT
Subject: CN=69e16d25-9650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:86:ae:4a:b4:27:f6:cd:86:3e:dd:68:34:
68:0f:39:19:87:00:de:8b:42:f3:0e:3a:59:fc:0e:
9d:d8:e2:2a:68:73:40:9e:0c:7e:22:a1:4a:98:ed:
88:bc:12:c2:ac:70:58:ce:c3:57:54:7d:ee:44:b5:
4f:2b:2c:77:6c:1f:6d:66:21:07:99:66:ca:30:7c:
45:15:2a:c6:e2:af:f0:d7:0d:d5:0d:85:b7:b8:46:
3c:de:28:f2:bd:c6:6e:66:28:83:de:d7:35:90:08:
f3:bf:bc:d5:a4:82:31:46:c8:45:64:d5:1d:c3:d2:
12:99:a7:79:0f:8c:c9:cb:79:9a:2b:82:f5:a8:fd:
cd:31:02:22:d6:41:94:73:d2:e6:97:e3:b9:06:8f:
ab:16:e9:ae:6a:de:85:ee:21:3e:79:0e:42:f5:8d:
3a:56:f1:7f:e3:6b:8d:5e:0c:a9:31:0b:01:49:7d:
f5:d7:b5:b7:05:d9:d3:69:bb:f7:5d:f0:73:8a:57:
b0:96:30:f6:0d:d1:ea:00:40:58:8b:ae:41:75:07:
37:71:28:7d:da:cc:5f:e4:9a:e7:30:d7:d9:9f:13:
44:72:75:4d:43:3b:31:18:41:5a:f4:aa:56:af:4d:
16:3c:3a:22:a2:61:2c:d1:7e:48:06:92:09:7c:93:
2f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:8B:E1:F7:25:66:1F:F2:52:C1:64:6F:7A:25:D9:2C:F5:FA:9E
X509v3 Authority Key Identifier:
keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:be:1c:6a:72:b1:ea:aa:e7:d0:e1:d1:df:ae:29:b4:9e:fb:
09:0c:cd:5a:a6:2a:9b:cc:ed:56:7f:ce:ce:5d:1a:fa:8e:07:
96:b4:3c:25:6a:04:0f:e5:28:89:77:ce:11:5f:8d:c5:9e:8d:
4f:c2:bd:fb:39:ca:20:7c:cd:d2:c5:89:d8:f1:76:18:10:1a:
5b:5c:fe:3d:c6:4a:99:1c:b7:22:80:a1:c7:9d:1b:1e:74:4b:
79:98:cf:38:ce:5b:a8:96:83:eb:ea:f8:37:78:90:26:9f:74:
73:32:13:86:d9:a2:e8:fa:6c:85:31:5f:75:73:5a:2e:6e:82:
70:f7:d8:72:27:21:b5:4a:a9:ff:67:83:71:ad:88:71:6d:b8:
66:78:67:9a:62:7b:52:0b:35:00:df:20:e0:4e:53:08:b4:02:
63:b1:23:b2:fb:87:52:5c:f2:78:eb:c1:c1:e7:ab:35:22:ca:
27:ef:a1:06:93:2a:bb:2e:45:5e:72:4d:12:05:ba:43:99:88:
68:9e:a1:fa:74:1b:7f:1a:11:03:5a:a4:e9:93:66:c1:f5:ba:
ed:60:c3:b0:a9:ac:1d:dd:ab:29:10:73:3e:da:49:1b:82:a9:
bf:d1:14:f4:d5:ea:17:21:26:8b:ea:f7:64:5b:30:0d:95:99:
2e:46:a6:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF
NDgzRUY1RjIwHhcNMjYwNDE2MjMxMzQxWhcNMjYwNDIzMjMxMzQxWjAYMRYwFAYD
VQQDEw02OWUxNmQyNS05NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHyGrkq0J/bNhj7daDRoDzkZhwDei0LzDjpZ/A6d2OIqaHNAngx+IqFKmO2I
vBLCrHBYzsNXVH3uRLVPKyx3bB9tZiEHmWbKMHxFFSrG4q/w1w3VDYW3uEY83ijy
vcZuZiiD3tc1kAjzv7zVpIIxRshFZNUdw9ISmad5D4zJy3maK4L1qP3NMQIi1kGU
c9Lml+O5Bo+rFumuat6F7iE+eQ5C9Y06VvF/42uNXgypMQsBSX3117W3BdnTabv3
XfBzilewljD2DdHqAEBYi65BdQc3cSh92sxf5JrnMNfZnxNEcnVNQzsxGEFa9KpW
r00WPDoiomEs0X5IBpIJfJMvjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLki+H3
JWYf8lLBZG96Jdks9fqeMB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1
QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzAzOS9CQjUzMjNFODI1QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFk
X1BIZWtFeWN2bkhrZy05ZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGL4canKx6qrn0OHR364ptJ77CQzNWqYqm8ztVn/Ozl0a+o4HlrQ8JWoED+Uo
iXfOEV+NxZ6NT8K9+znKIHzN0sWJ2PF2GBAaW1z+PcZKmRy3IoChx50bHnRLeZjP
OM5bqJaD6+r4N3iQJp90czIThtmi6PpshTFfdXNaLm6CcPfYcichtUqp/2eDca2I
cW24ZnhnmmJ7Ugs1AN8g4E5TCLQCY7EjsvuHUlzyeOvBweerNSLKJ++hBpMquy5F
XnJNEgW6Q5mIaJ6h+nQbfxoRA1qk6ZNmwfW67WDDsKmsHd2rKRBzPtpJG4Kpv9EU
9NXqFyEmi+r3ZFswDZWZLkamYg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:38 2026 by rpki-client