
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json)
Hash identifier: Bve4ivm7jxF0LrPf76CzL91+ehVlZgQtdZSPgbGPxy4=
Subject key identifier: 61:7B:CD:DF:75:0F:41:40:48:79:29:63:E2:07:DE:1B:E0:DC:F7:FA
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial: 047F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
Manifest number: 046C
Signing time: Mon 02 Mar 2026 02:46:25 +0000
Manifest this update: Mon 02 Mar 2026 02:46:23 +0000
Manifest next update: Mon 09 Mar 2026 02:46:23 +0000
Files and hashes: 1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: uGcxjCQDnHlUModFDzsZ7i/v3O2J8h5lD0MGW5opDyk=)
2: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: xAxqo/39ROKd3bFPPtYVdYrT8F7pY6ozf1j+GuGsqZc=)
3: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: HVGi2lUwCQZWcIQSfZT0TZMTdiphqEIo5eAKaq0V4N8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294
Validity
Not Before: Mar 2 02:46:23 2026 GMT
Not After : Mar 9 02:46:23 2026 GMT
Subject: CN=69a4fa01-d488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:fa:46:e3:af:02:43:09:cd:cc:aa:32:19:
b3:e8:f5:9a:7a:e3:a7:97:2c:09:c3:12:8f:4c:e5:
fc:e6:02:00:2f:1d:fc:16:53:11:e6:c5:ce:e9:35:
64:7d:b7:31:69:ff:eb:57:93:54:c9:68:8d:3f:89:
20:73:b9:84:8d:a8:6c:3a:aa:2f:b1:7e:56:7b:68:
14:7b:8e:80:ea:4c:f3:03:8e:aa:f1:6d:e6:01:b1:
45:67:ba:42:25:c2:99:03:57:c7:47:6b:91:61:fe:
32:e7:66:5a:8f:48:f2:4f:6c:a0:ec:79:71:5e:71:
d1:03:56:ed:61:8d:12:32:f3:ca:52:3a:0f:50:93:
65:85:35:ce:23:60:5b:59:fe:5e:4a:ed:01:2b:58:
57:ae:18:da:a2:98:e3:4f:26:44:d1:bd:0d:b9:d2:
d3:c2:79:16:49:5d:d7:4f:e4:da:38:ba:e8:a6:51:
94:95:19:79:db:d1:f5:af:66:c3:8e:1a:78:3a:ed:
14:f1:dc:bd:fa:e6:97:40:80:d1:34:5f:bb:52:99:
44:26:80:0e:69:20:aa:f9:c8:a8:85:2d:cc:c3:5a:
54:9c:23:7d:58:6c:27:ea:b3:cd:db:f4:54:84:eb:
45:c1:4a:80:36:4c:9d:f7:de:58:13:a2:65:8c:a3:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:CD:DF:75:0F:41:40:48:79:29:63:E2:07:DE:1B:E0:DC:F7:FA
X509v3 Authority Key Identifier:
keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:9d:08:a1:61:8c:15:6c:f4:eb:a0:d4:23:0c:00:7c:ee:f8:
2b:39:a6:8a:12:8a:39:d8:be:ff:61:53:4c:9d:30:f4:0e:f8:
91:df:a7:a1:54:bc:54:0d:c1:0e:d9:0b:dc:9f:81:43:0b:51:
03:f9:46:72:f6:ab:25:56:59:19:bd:42:cb:7b:7c:bd:b9:a1:
03:68:b1:45:54:5a:e2:4d:01:c2:68:7a:5e:8a:82:cb:a1:a2:
b5:fc:14:a9:e0:55:63:4c:55:15:de:13:fd:86:95:d6:2a:5e:
ec:f5:44:0e:48:78:fc:06:b2:a1:d0:ac:69:cb:11:56:99:a5:
5f:69:28:e6:2c:ae:8b:9c:b1:d1:6a:0d:c7:0d:6b:f3:af:ff:
82:dc:7a:e4:68:f6:ea:8b:c3:83:bf:b1:7d:95:06:4e:2a:8c:
4d:8a:8f:93:e2:6b:64:73:75:91:1d:11:a8:b4:db:5e:36:1d:
52:1c:ce:9c:76:4a:1e:4c:68:8b:50:ec:a6:a0:fe:da:86:cb:
b4:5c:90:50:01:26:e0:dc:99:f5:9e:87:05:12:2a:94:14:ac:
62:0d:71:1b:01:08:49:64:01:53:50:a3:3d:33:45:77:4e:db:
30:fa:02:9d:49:98:4a:eb:66:a2:2e:63:f9:e8:f5:22:8b:96:
cd:2f:55:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlCMDgxMTAvBgNVBAUTKDYxNENDRDI0Rjc4NUU5Mjk5MjE1OTE2NDA4Mjk0MDQy
RjE0NjMyOTQwHhcNMjYwMzAyMDI0NjIzWhcNMjYwMzA5MDI0NjIzWjAYMRYwFAYD
VQQDEw02OWE0ZmEwMS1kNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoyb6RuOvAkMJzcyqMhmz6PWaeuOnlywJwxKPTOX85gIALx38FlMR5sXO6TVk
fbcxaf/rV5NUyWiNP4kgc7mEjahsOqovsX5We2gUe46A6kzzA46q8W3mAbFFZ7pC
JcKZA1fHR2uRYf4y52Zaj0jyT2yg7HlxXnHRA1btYY0SMvPKUjoPUJNlhTXOI2Bb
Wf5eSu0BK1hXrhjaopjjTyZE0b0NudLTwnkWSV3XT+TaOLroplGUlRl529H1r2bD
jhp4Ou0U8dy9+uaXQIDRNF+7UplEJoAOaSCq+ciohS3Mw1pUnCN9WGwn6rPN2/RU
hOtFwUqANkyd995YE6JljKNj7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGF7zd91
D0FASHkpY+IH3hvg3Pf6MB8GA1UdIwQYMBaAFGFMzST3hekpkhWRZAgpQELxRjKU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIwOC8zNzU1M0E1Njg5
OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZTbVNGWkZrQ0NsQVF2RkdN
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lVek5KUGVGNlNtU0ZaRmtDQ2xBUXZGR01wUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUIwOC8zNzU1M0E1Njg5OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZT
bVNGWkZrQ0NsQVF2RkdNcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJJ0IoWGMFWz066DUIwwAfO74KzmmihKKOdi+/2FTTJ0w9A74kd+noVS8VA3B
DtkL3J+BQwtRA/lGcvarJVZZGb1Cy3t8vbmhA2ixRVRa4k0Bwmh6XoqCy6GitfwU
qeBVY0xVFd4T/YaV1ipe7PVEDkh4/AayodCsacsRVpmlX2ko5iyui5yx0WoNxw1r
86//gtx65Gj26ovDg7+xfZUGTiqMTYqPk+JrZHN1kR0RqLTbXjYdUhzOnHZKHkxo
i1DspqD+2obLtFyQUAEm4NyZ9Z6HBRIqlBSsYg1xGwEISWQBU1CjPTNFd07bMPoC
nUmYSutmoi5j+ej1IouWzS9VnQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:15 2026 by rpki-client