
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json)
Hash identifier: GxwA2RKwC0RNCfO8WF1YsEiHIB5Kc9EaVzKkqRNLKNc=
Subject key identifier: 40:68:B8:63:79:FD:BC:8E:09:50:2B:94:2E:DF:67:85:08:C1:1E:F1
Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
Manifest number: 0103
Signing time: Fri 17 Apr 2026 05:52:01 +0000
Manifest this update: Fri 17 Apr 2026 05:52:00 +0000
Manifest next update: Fri 24 Apr 2026 05:52:00 +0000
Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: VS0MxwSwdU8EcWHoC3lClTCwOJFP7FJ378G8TN9V0bM=)
2: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: 6KLtFcE2fvWR+tw55m57pBI0diDqJjyzD/r4YO1tgys=)
3: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: zNFgnvoA/0CMs26VKwtX8JS10QHmGc04Gpc4vtJA0LQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Validity
Not Before: Apr 17 05:52:00 2026 GMT
Not After : Apr 24 05:52:00 2026 GMT
Subject: CN=69e1ca81-a9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:95:c0:98:ee:32:ac:85:3f:04:5a:77:fa:
ed:da:66:fc:04:74:8f:47:f8:3c:f7:58:8e:0c:42:
69:5a:77:bf:a8:51:b2:c2:22:ca:fd:64:fb:bd:be:
6e:07:3c:a9:dc:ec:44:7b:03:38:66:9a:2d:e0:fe:
39:7c:74:4c:3f:1e:99:98:9e:40:27:97:4b:60:2e:
0e:d2:b0:f1:a1:89:0f:3e:f4:28:fe:24:b1:c5:d8:
7a:58:75:36:2e:27:3d:44:2b:23:a5:1f:f0:36:43:
b6:e6:20:3f:c1:cb:53:3d:e7:ff:03:23:36:f1:02:
6f:4b:f5:f2:7a:b3:7b:da:1f:f1:15:6c:03:d2:98:
26:0a:aa:0d:b3:72:14:d4:44:19:ea:30:1a:df:50:
3d:48:23:0c:2e:f6:0f:e9:0b:72:1d:e8:4e:4b:e0:
36:69:81:4f:0f:c7:8a:c8:65:87:6e:17:ce:26:95:
4f:5d:7d:32:3b:97:2e:ce:cc:3e:7c:fb:b9:bd:f3:
3a:09:e8:c7:e1:d4:ec:ac:62:0e:cd:1c:d2:a7:a1:
ab:50:68:c2:bc:71:cb:cf:48:3f:be:64:9c:49:06:
22:de:90:63:2e:b8:4b:08:3f:17:ca:4b:97:55:8d:
80:43:30:75:83:36:98:8a:48:f9:79:e1:f6:38:72:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:68:B8:63:79:FD:BC:8E:09:50:2B:94:2E:DF:67:85:08:C1:1E:F1
X509v3 Authority Key Identifier:
keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:29:a4:c3:2b:ac:0c:88:3d:0f:05:33:c6:22:1d:8a:24:
52:5e:36:98:75:9f:78:ce:e3:7b:34:be:82:45:1b:38:50:99:
73:11:54:54:63:6a:8d:b8:5e:5d:28:9e:53:04:a1:ee:ae:46:
26:8c:06:6a:d1:81:f1:ab:0c:2c:d8:b2:fb:13:b9:a5:d8:8a:
02:c1:3b:ef:21:02:3d:74:4c:68:19:0e:3e:69:70:e1:d0:65:
6f:7d:0a:9e:6a:be:ce:0a:0f:10:aa:71:f7:d3:91:ef:4c:7f:
2a:9d:49:f2:11:66:e3:35:87:1f:de:7f:09:ab:bb:a8:c5:a1:
8a:20:f3:e8:72:b2:90:4a:8b:e9:bc:e6:5d:b1:6c:72:1f:ff:
05:c1:bc:ca:ae:de:ed:15:4c:ef:95:54:ab:73:53:71:8e:26:
90:eb:e7:18:9a:3f:dd:0a:a6:e9:ed:f8:e5:2e:a5:7c:4a:2f:
4d:7e:01:74:7e:ff:dc:eb:e9:71:7c:81:d2:f5:85:ff:63:88:
5d:32:18:66:12:61:29:11:3a:8b:05:e2:7d:b4:45:ef:67:b2:
11:b6:c9:41:f4:90:bc:7f:e6:9a:8e:e9:9b:f7:9f:8e:a5:c9:
86:63:23:2b:85:e4:a2:57:a2:6d:8a:d1:65:82:23:00:d0:59:
88:dc:ac:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2
MEVFNkVBNkQwHhcNMjYwNDE3MDU1MjAwWhcNMjYwNDI0MDU1MjAwWjAYMRYwFAYD
VQQDEw02OWUxY2E4MS1hOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/OVwJjuMqyFPwRad/rt2mb8BHSPR/g891iODEJpWne/qFGywiLK/WT7vb5u
Bzyp3OxEewM4Zpot4P45fHRMPx6ZmJ5AJ5dLYC4O0rDxoYkPPvQo/iSxxdh6WHU2
Lic9RCsjpR/wNkO25iA/wctTPef/AyM28QJvS/XyerN72h/xFWwD0pgmCqoNs3IU
1EQZ6jAa31A9SCMMLvYP6QtyHehOS+A2aYFPD8eKyGWHbhfOJpVPXX0yO5cuzsw+
fPu5vfM6CejH4dTsrGIOzRzSp6GrUGjCvHHLz0g/vmScSQYi3pBjLrhLCD8XykuX
VY2AQzB1gzaYikj5eeH2OHLn/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBouGN5
/byOCVArlC7fZ4UIwR7xMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0
MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ
cXZVNnFpbHNOa1JnN202bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPfAppMMrrAyIPQ8FM8YiHYokUl42mHWfeM7jezS+gkUbOFCZcxFUVGNqjbhe
XSieUwSh7q5GJowGatGB8asMLNiy+xO5pdiKAsE77yECPXRMaBkOPmlw4dBlb30K
nmq+zgoPEKpx99OR70x/Kp1J8hFm4zWHH95/Cau7qMWhiiDz6HKykEqL6bzmXbFs
ch//BcG8yq7e7RVM75VUq3NTcY4mkOvnGJo/3Qqm6e345S6lfEovTX4BdH7/3Ovp
cXyB0vWF/2OIXTIYZhJhKRE6iwXifbRF72eyEbbJQfSQvH/mmo7pm/efjqXJhmMj
K4XkoleibYrRZYIjANBZiNysbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:29 2026 by rpki-client