
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
File: YGHkRpDveLCtqNg1DRHKngGUnBQ.mft (raw, json)
Hash identifier: /c5iJdvmTqZuNTdIEpLxmvgY84AXU3Hnd2xuJDSj1+c=
Subject key identifier: D4:55:54:9F:56:69:90:5C:2B:F9:E5:39:20:3F:B2:AC:96:A6:ED:9B
Authority key identifier: 60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14
Certificate issuer: /CN=A91BFE76/serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
Manifest number: 3F
Signing time: Sun 01 Mar 2026 09:51:03 +0000
Manifest this update: Sun 01 Mar 2026 09:51:02 +0000
Manifest next update: Sun 08 Mar 2026 09:51:02 +0000
Files and hashes: 1: YGHkRpDveLCtqNg1DRHKngGUnBQ.crl (hash: GBlae5k4kj+LghVweJGepBPJVvEPV8nlBGmSUBUh4NI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl
rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE76, serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14
Validity
Not Before: Mar 1 09:51:02 2026 GMT
Not After : Mar 8 09:51:02 2026 GMT
Subject: CN=69a40c07-0d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:eb:b1:8a:62:dd:ae:56:7d:5d:54:67:53:
4b:9f:bd:5d:16:1e:52:86:c3:05:14:9f:48:9f:0e:
41:da:0d:d5:0c:34:4a:36:09:00:33:01:04:75:31:
e6:4c:05:ad:35:a7:a3:67:62:db:54:80:1a:95:c0:
fd:c1:a8:55:77:cd:be:dd:d9:46:06:77:1e:cd:0a:
16:b2:5c:4e:89:11:0d:af:fc:ce:87:0a:be:f1:99:
80:63:fa:ea:9e:f6:a0:2d:e0:80:38:8a:c1:cc:1b:
bc:4f:d5:62:77:f4:f2:f1:74:af:2c:c0:53:e1:5b:
57:b3:76:d3:a9:fd:bb:16:d9:2d:5d:e2:2a:1d:8c:
63:cc:77:20:d8:89:82:9a:c4:8a:88:e7:23:9b:31:
05:a3:a1:35:68:df:03:f5:49:8a:76:ce:35:dc:7f:
2b:63:50:11:06:aa:d9:ba:0a:a7:30:44:27:8c:e3:
dd:43:74:32:08:0c:04:04:cc:97:0e:9b:6c:14:f0:
62:c9:54:e9:e1:68:1e:c5:44:7b:43:90:23:de:7e:
37:b7:11:6b:91:4c:18:74:ad:2a:cb:7e:c8:5f:fc:
e8:22:2e:96:54:2b:a5:69:a4:3d:e3:b8:12:e1:14:
95:e3:f6:65:d4:8f:37:8e:89:25:52:aa:4d:16:ed:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:54:9F:56:69:90:5C:2B:F9:E5:39:20:3F:B2:AC:96:A6:ED:9B
X509v3 Authority Key Identifier:
keyid:60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b3:27:41:e1:b7:c1:d9:b8:fe:07:03:0f:29:c8:2b:70:bf:
16:cb:5c:0e:2b:53:4f:0e:71:eb:80:c1:d5:84:61:5e:88:50:
15:04:75:8f:5f:20:f6:65:0d:ec:72:6c:fa:d4:d7:a7:48:7d:
03:73:29:c4:73:1c:d7:c3:5a:cf:0c:2a:f5:76:13:db:63:af:
fa:eb:b9:f6:ea:e6:aa:a5:e8:41:b1:31:8d:36:26:9f:32:04:
5e:07:ad:e3:da:f2:1f:f5:54:ef:4a:1b:1f:10:77:5b:eb:1f:
cb:80:c7:55:85:21:72:f9:dc:87:d7:c4:ec:95:2c:e9:26:c4:
c1:c5:23:90:2f:34:9f:19:58:fc:90:e0:9a:1a:85:7e:9e:19:
84:8f:3f:81:ea:7d:37:b7:51:92:65:b5:57:1b:5b:86:78:71:
78:1e:9d:9e:78:5f:f1:7d:0d:51:2f:8d:27:a4:de:21:d6:fb:
5b:a6:e1:14:f9:f9:c6:0b:e5:cf:25:50:ca:d3:6d:61:56:40:
f1:1c:65:f1:e2:67:8c:e8:6b:4c:0c:ea:e7:15:d6:4a:38:1c:
7c:8a:5f:8b:a7:82:b1:d9:16:5e:7e:a9:61:24:00:cd:17:a6:
c0:c5:02:87:4d:d3:38:8b:c5:da:f5:62:a4:25:76:8d:45:e7:
9f:87:55:7e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RkU3NjExMC8GA1UEBRMoNjA2MUU0NDY5MEVGNzhCMEFEQThEODM1MEQxMUNBOUUw
MTk0OUMxNDAeFw0yNjAzMDEwOTUxMDJaFw0yNjAzMDgwOTUxMDJaMBgxFjAUBgNV
BAMTDTY5YTQwYzA3LTBkNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDaCeuximLdrlZ9XVRnU0ufvV0WHlKGwwUUn0ifDkHaDdUMNEo2CQAzAQR1MeZM
Ba01p6NnYttUgBqVwP3BqFV3zb7d2UYGdx7NChayXE6JEQ2v/M6HCr7xmYBj+uqe
9qAt4IA4isHMG7xP1WJ39PLxdK8swFPhW1ezdtOp/bsW2S1d4iodjGPMdyDYiYKa
xIqI5yObMQWjoTVo3wP1SYp2zjXcfytjUBEGqtm6CqcwRCeM491DdDIIDAQEzJcO
m2wU8GLJVOnhaB7FRHtDkCPefje3EWuRTBh0rSrLfshf/OgiLpZUK6VppD3juBLh
FJXj9mXUjzeOiSVSqk0W7VYvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1FVUn1Zp
kFwr+eU5ID+yrJam7ZswHwYDVR0jBBgwFoAUYGHkRpDveLCtqNg1DRHKngGUnBQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0UzMzNFQzJFQjky
NzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxDdHFOZzFEUkhLbmdHVW5C
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWUdIa1JwRHZlTEN0cU5nMURSSEtuZ0dVbkJRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG
RTc2L0UzMzNFQzJFQjkyNzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxD
dHFOZzFEUkhLbmdHVW5CUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAqsydB4bfB2bj+BwMPKcgrcL8Wy1wOK1NPDnHrgMHVhGFeiFAVBHWPXyD2ZQ3s
cmz61NenSH0DcynEcxzXw1rPDCr1dhPbY6/667n26uaqpehBsTGNNiafMgReB63j
2vIf9VTvShsfEHdb6x/LgMdVhSFy+dyH18TslSzpJsTBxSOQLzSfGVj8kOCaGoV+
nhmEjz+B6n03t1GSZbVXG1uGeHF4Hp2eeF/xfQ1RL40npN4h1vtbpuEU+fnGC+XP
JVDK021hVkDxHGXx4meM6GtMDOrnFdZKOBx8il+Lp4Kx2RZefqlhJADNF6bAxQKH
TdM4i8Xa9WKkJXaNReefh1V+
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:45 2026 by rpki-client