
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json)
Hash identifier: fmL5eEdZlaTtMTtoS+++ArjPPbwwsTbYI/CJNxrKrZ0=
Subject key identifier: 9A:AE:9C:BA:41:BF:37:B5:98:79:B2:F9:58:BE:99:34:AA:37:2D:2A
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
Manifest number: 028F
Signing time: Sat 13 Jun 2026 01:46:15 +0000
Manifest this update: Sat 13 Jun 2026 01:46:15 +0000
Manifest next update: Sat 20 Jun 2026 01:46:15 +0000
Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: xEGpwTVqmOpoxRbFMNLUrBJDEJw893VZ8t6RP65Mhr8=)
2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: R3KADOtwsyG/v2+mGTP92tv9io+mPYskKwwNor02wSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Validity
Not Before: Jun 13 01:46:15 2026 GMT
Not After : Jun 20 01:46:15 2026 GMT
Subject: CN=6a2cb667-684a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:5f:81:34:ac:e9:5e:35:39:41:a4:ec:1e:
5a:c9:96:03:99:5a:bb:87:67:7f:26:1a:09:23:83:
5d:db:10:db:e7:3f:ff:01:4f:e3:eb:cb:7f:f1:72:
db:09:c1:c5:21:47:78:64:cd:8c:94:37:75:23:14:
e6:3d:23:68:7f:9b:85:d1:ba:d1:ff:f3:67:cb:89:
c3:0a:ec:75:8e:fc:d6:a8:06:0d:ab:38:25:c2:2d:
d3:56:52:6f:e5:ef:8d:c5:01:96:b0:46:c6:33:e1:
51:1d:e3:9e:07:5a:de:01:ac:7e:ff:92:d4:c0:b1:
23:54:c1:9d:5c:ab:b4:55:a4:92:74:b7:8e:79:34:
eb:ad:93:54:f7:51:c2:a5:90:b1:e3:89:d2:c7:ce:
65:df:d5:b4:a5:5e:50:e0:cc:90:53:2d:6e:e4:3f:
c7:9c:49:41:d9:27:1f:f0:37:aa:7c:27:4c:63:d6:
9d:03:de:87:01:32:36:a0:db:69:00:58:03:fa:74:
c0:c6:6c:c5:c7:b3:4f:6a:b8:f5:4a:61:df:d4:12:
cf:1b:4b:bd:e5:f5:77:17:0c:8b:68:5d:bd:16:0e:
cb:36:d0:56:9c:d6:c8:dd:5a:52:39:03:22:47:66:
20:2f:6d:09:45:69:d6:52:73:51:07:57:8d:3b:b6:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:9C:BA:41:BF:37:B5:98:79:B2:F9:58:BE:99:34:AA:37:2D:2A
X509v3 Authority Key Identifier:
keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:d7:64:2f:73:63:e9:e7:75:56:78:a2:26:da:81:73:9a:d6:
82:c6:8f:fe:2e:56:61:61:f7:31:81:43:5e:ac:5c:91:50:62:
cb:ea:b4:42:bb:af:d0:e3:e4:68:37:e6:25:46:df:8d:c6:0e:
cb:6d:c5:05:be:81:d4:33:35:ad:c2:e1:b7:9c:fb:8e:f8:46:
c0:cd:7e:68:6a:5e:72:50:c7:13:d0:8c:b3:01:2e:9f:45:97:
23:9a:cb:65:24:38:71:e8:d7:ef:57:1b:d0:3c:6a:e9:16:bf:
f4:c8:99:9e:5b:9e:ac:c8:e6:ed:ff:e0:12:94:6a:02:9e:50:
57:e1:4c:b1:97:4f:9d:0e:34:f1:b6:07:ee:f9:e0:a9:2b:c1:
57:4f:08:29:28:8d:66:19:24:a3:fc:db:cb:dd:5c:1c:f5:aa:
a6:56:17:99:0b:36:25:1a:31:8e:6f:74:5a:80:33:4f:f0:41:
27:22:9c:e9:6c:f2:56:b5:d6:b1:57:13:cc:49:b2:67:b5:f6:
bc:fa:62:37:bc:09:54:53:17:37:85:cc:7a:91:74:57:c3:66:
51:43:59:4c:1b:bf:43:19:24:fa:d3:14:64:d8:d0:76:26:ec:
29:39:40:a7:88:c0:c5:57:e9:1a:4d:21:3c:18:e8:cc:1e:23:
96:99:e4:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG
NzYyNTBGQTgwHhcNMjYwNjEzMDE0NjE1WhcNMjYwNjIwMDE0NjE1WjAYMRYwFAYD
VQQDEw02YTJjYjY2Ny02ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkmBfgTSs6V41OUGk7B5ayZYDmVq7h2d/JhoJI4Nd2xDb5z//AU/j68t/8XLb
CcHFIUd4ZM2MlDd1IxTmPSNof5uF0brR//Nny4nDCux1jvzWqAYNqzglwi3TVlJv
5e+NxQGWsEbGM+FRHeOeB1reAax+/5LUwLEjVMGdXKu0VaSSdLeOeTTrrZNU91HC
pZCx44nSx85l39W0pV5Q4MyQUy1u5D/HnElB2Scf8DeqfCdMY9adA96HATI2oNtp
AFgD+nTAxmzFx7NParj1SmHf1BLPG0u95fV3FwyLaF29Fg7LNtBWnNbI3VpSOQMi
R2YgL20JRWnWUnNRB1eNO7a0JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqunLpB
vze1mHmy+Vi+mTSqNy0qMB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC
NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6
c1g3SFZjbGRSZEQzWWxENmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACddkL3Nj6ed1VniiJtqBc5rWgsaP/i5WYWH3MYFDXqxckVBiy+q0Qruv0OPk
aDfmJUbfjcYOy23FBb6B1DM1rcLht5z7jvhGwM1+aGpeclDHE9CMswEun0WXI5rL
ZSQ4cejX71cb0Dxq6Ra/9MiZnluerMjm7f/gEpRqAp5QV+FMsZdPnQ408bYH7vng
qSvBV08IKSiNZhkko/zby91cHPWqplYXmQs2JRoxjm90WoAzT/BBJyKc6WzyVrXW
sVcTzEmyZ7X2vPpiN7wJVFMXN4XMepF0V8NmUUNZTBu/Qxkk+tMUZNjQdibsKTlA
p4jAxVfpGk0hPBjozB4jlpnk/w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:53 2026 by rpki-client