
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier: J0VGHG87K/5rRhpX3bhHH1bNXZf4HerPSQ5jnT5tHVQ=
Subject key identifier: F9:F0:A9:E8:BA:32:A8:F3:17:34:2F:CE:3A:75:6E:7C:1D:1E:F7:9B
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number: 01B6
Signing time: Mon 02 Mar 2026 01:34:27 +0000
Manifest this update: Mon 02 Mar 2026 01:34:25 +0000
Manifest next update: Mon 09 Mar 2026 01:34:25 +0000
Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: Eq91EpcWXoC12dQuiSsAkHPLp9TrdT0XuNiwZExr0sM=)
2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: fG2F07ozyOAGX3OfyVFC/xUJQ5PUexYp8MQrIGuykkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Validity
Not Before: Mar 2 01:34:25 2026 GMT
Not After : Mar 9 01:34:25 2026 GMT
Subject: CN=69a4e922-4203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:20:32:52:21:e7:ca:97:ec:6c:85:0c:ae:
6a:5c:46:52:fa:17:26:be:f0:7f:87:6c:32:ad:0a:
f8:d2:93:77:2f:2d:e1:2a:c0:84:e0:4a:4b:10:10:
e5:21:9a:fa:c1:10:be:db:ee:44:bd:de:16:98:fa:
56:dc:0c:a4:d3:bd:ff:20:84:3d:12:5c:0f:4c:ff:
c6:ff:e0:d2:5a:05:6a:22:94:f8:a3:ea:8b:2f:5c:
b7:12:1b:d3:52:ea:e7:1c:10:17:41:9b:66:a4:aa:
40:73:3a:a9:dd:3b:89:83:cd:68:b8:5c:37:60:a1:
59:c3:4c:11:d3:88:4d:2e:8e:21:85:19:97:1f:9b:
0f:01:2a:6d:53:13:f5:9f:bf:85:89:6d:77:bf:a2:
ab:78:5a:70:a0:be:e7:38:ca:50:ee:3c:6a:b6:8c:
dc:17:b4:c2:1e:fa:0e:45:a3:d3:b5:c8:7c:66:64:
c7:e8:28:66:3c:1e:a8:83:43:ef:32:b5:8a:95:fb:
eb:94:1f:04:fa:30:f0:0b:77:dd:27:c2:7b:41:4e:
2f:29:41:f1:36:a6:41:b1:24:7b:f2:35:43:b7:c8:
d5:b7:19:5b:03:ae:bb:4c:46:0e:29:94:87:92:35:
c4:4b:e0:9a:55:66:a2:d9:0b:7c:46:35:6b:be:e4:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:A9:E8:BA:32:A8:F3:17:34:2F:CE:3A:75:6E:7C:1D:1E:F7:9B
X509v3 Authority Key Identifier:
keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ff:e8:81:8b:91:17:c4:2c:1f:58:e7:40:f0:c5:0e:17:b8:
24:57:d9:38:05:0e:5a:74:00:79:ad:3a:8a:ff:bb:81:f4:d1:
11:ac:06:5a:5d:5a:0e:cf:f5:18:17:1b:a7:1d:e2:51:7b:7a:
0a:3a:1c:12:09:31:2d:96:6e:49:cc:fe:81:c9:66:b2:67:63:
80:63:aa:48:d9:96:45:80:f8:40:b2:d1:e7:7a:d2:dd:cc:8f:
c5:07:f8:b0:fa:e0:60:62:34:ff:33:1e:00:bb:35:88:c4:bb:
d8:80:77:f2:d5:81:76:be:ad:53:27:69:1c:47:ce:7c:ed:2f:
9d:0c:94:4c:72:1d:43:14:42:0a:8a:6a:0a:e1:ba:55:8b:b7:
9c:fc:2f:cb:50:44:b8:e5:9a:0b:6f:89:64:d9:17:42:b7:e6:
8b:02:c3:18:f9:58:6b:ed:4f:05:86:b2:14:62:45:1a:ac:a9:
3b:a5:ce:87:48:d5:1a:22:26:b7:67:a6:a9:a1:c2:b3:dd:d0:
e0:da:e4:0a:0b:45:03:bc:3c:0e:80:75:af:ec:be:36:86:47:
1b:fd:0c:e2:db:1e:90:79:76:90:83:5e:b6:70:2a:9e:d6:c2:
0a:e5:f6:d0:78:67:91:3a:3a:6f:13:60:cb:53:a0:90:6f:94:
67:0b:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:51 2026 by rpki-client