
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json)
Hash identifier: FKNQH8AYkJxUAmy8Mmdn7WtSWPgn1Lq1+Dxp39EQ/20=
Subject key identifier: D7:32:AF:5A:85:79:7E:CB:0A:58:E2:E0:03:9C:08:AD:86:F0:2F:86
Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57
Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457
Certificate serial: 0415
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
Manifest number: 0409
Signing time: Mon 27 Jul 2026 01:27:30 +0000
Manifest this update: Mon 27 Jul 2026 01:27:30 +0000
Manifest next update: Mon 03 Aug 2026 01:27:30 +0000
Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: IXvqiMiCLHbFI2z+cYyjAbHrBwlkYCQfRfFbBGepFVE=)
2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: WqjKBxQe2fFRZs4kqddr9GvMdc6frPevC+o56pVgm04=)
3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: v/YstiUDt5AHMIY3l8QrkWhxof9v0AFEbtY42FYgngA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl
rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1045 (0x415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457
Validity
Not Before: Jul 27 01:27:30 2026 GMT
Not After : Aug 3 01:27:30 2026 GMT
Subject: CN=6a66b402-89e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:2c:0c:73:1e:fd:eb:68:59:69:6f:d7:b8:
ac:91:0d:a3:1f:3d:db:04:36:39:47:85:0c:54:34:
c0:6d:bf:77:de:de:33:5b:83:9a:ff:a2:56:e1:c0:
1e:72:b5:45:ae:24:32:36:93:d4:52:3e:2f:0e:1d:
83:49:10:45:f7:c2:08:ac:c9:04:12:d1:57:07:7c:
e8:21:75:0d:2b:2b:f1:93:ee:09:2c:c5:38:5c:55:
07:73:31:8f:d9:73:fd:7c:61:a2:89:29:74:1b:d5:
1a:52:d3:6e:51:c7:58:d6:4e:c6:a4:f2:31:48:9c:
66:a1:49:09:44:ba:3d:20:c5:fc:11:c4:03:41:fa:
e6:34:e7:ea:8c:50:b1:1b:d1:3f:b5:b7:d4:09:b4:
76:a2:2f:32:d2:4e:ca:1e:0d:fd:6a:37:77:88:50:
18:4e:b5:cd:8c:20:51:9a:9f:89:2f:40:d3:df:ff:
58:45:0f:a3:74:9e:83:6b:b5:88:0e:db:a2:25:86:
14:29:b5:ba:2f:18:0a:55:82:74:5c:87:8f:43:8a:
f1:c4:54:8e:2f:20:a9:08:3c:26:a8:2b:80:12:5d:
3b:02:53:d3:04:81:ff:bd:b5:0e:21:96:64:bb:33:
64:a7:a6:28:c9:80:2c:e1:ca:4d:76:04:de:e4:8c:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:AF:5A:85:79:7E:CB:0A:58:E2:E0:03:9C:08:AD:86:F0:2F:86
X509v3 Authority Key Identifier:
keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a5:0a:2b:91:ac:d1:db:bc:28:a1:43:44:c6:45:fe:5a:92:
44:a9:67:a1:bf:49:47:93:8d:22:23:06:72:a5:b6:d2:5a:e8:
7b:39:89:ff:9d:72:c3:5a:97:15:3b:33:1e:43:59:39:89:6d:
4c:27:3d:5e:91:0c:9e:68:30:84:24:28:ee:26:1a:47:bb:0e:
a6:12:10:b0:ca:e1:16:49:09:52:56:25:f9:91:c7:28:58:8a:
a9:b2:a8:f8:70:ce:9a:f3:7d:ea:aa:c7:4d:3d:b0:85:a3:69:
e6:20:18:88:7f:db:0d:70:a9:58:64:19:75:37:fd:be:a2:e6:
fb:90:9e:8e:5b:17:c7:2e:d6:77:79:18:4b:91:64:98:5a:bb:
3a:b0:f7:5b:5d:63:34:ec:d5:6e:c1:ff:00:82:56:69:9c:3e:
3c:03:86:c3:a9:b6:81:9f:58:37:d7:f9:15:30:d2:93:51:94:
79:c8:d2:a6:01:5d:ea:a6:73:8e:f7:99:5b:24:fc:7a:0e:fd:
43:37:a9:19:06:ac:e1:f8:d2:67:a4:7b:d8:8d:db:8d:20:9c:
aa:19:25:eb:a4:ca:6a:7a:23:44:5b:65:6c:03:ed:80:ed:02:
81:c3:ba:9d:f8:cb:40:29:6a:98:4b:5e:24:cb:8c:95:8c:d0:
6f:46:10:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG
QzAyMzU0NTcwHhcNMjYwNzI3MDEyNzMwWhcNMjYwODAzMDEyNzMwWjAYMRYwFAYD
VQQDEw02YTY2YjQwMi04OWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtyMsDHMe/etoWWlv17iskQ2jHz3bBDY5R4UMVDTAbb933t4zW4Oa/6JW4cAe
crVFriQyNpPUUj4vDh2DSRBF98IIrMkEEtFXB3zoIXUNKyvxk+4JLMU4XFUHczGP
2XP9fGGiiSl0G9UaUtNuUcdY1k7GpPIxSJxmoUkJRLo9IMX8EcQDQfrmNOfqjFCx
G9E/tbfUCbR2oi8y0k7KHg39ajd3iFAYTrXNjCBRmp+JL0DT3/9YRQ+jdJ6Da7WI
DtuiJYYUKbW6LxgKVYJ0XIePQ4rxxFSOLyCpCDwmqCuAEl07AlPTBIH/vbUOIZZk
uzNkp6YoyYAs4cpNdgTe5Iz8hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcyr1qF
eX7LClji4AOcCK2G8C+GMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2
MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky
cFA4RmhyWG9xSW44QWpWRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv6UKK5Gs0du8KKFDRMZF/lqSRKlnob9JR5ONIiMGcqW20lroezmJ/51yw1qX
FTszHkNZOYltTCc9XpEMnmgwhCQo7iYaR7sOphIQsMrhFkkJUlYl+ZHHKFiKqbKo
+HDOmvN96qrHTT2whaNp5iAYiH/bDXCpWGQZdTf9vqLm+5CejlsXxy7Wd3kYS5Fk
mFq7OrD3W11jNOzVbsH/AIJWaZw+PAOGw6m2gZ9YN9f5FTDSk1GUecjSpgFd6qZz
jveZWyT8eg79QzepGQas4fjSZ6R72I3bjSCcqhkl66TKanojRFtlbAPtgO0CgcO6
nfjLQClqmEteJMuMlYzQb0YQTw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:22 2026 by rpki-client