
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json)
Hash identifier: nydFukGXrZjwoc4pn9yegjnJxUakr6ooEC4whOsmiOE=
Subject key identifier: E8:3F:5B:98:AE:E5:5E:97:EF:B2:A2:DE:3F:67:28:D5:6A:A2:C4:03
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
Manifest number: 5D
Signing time: Mon 02 Mar 2026 00:29:06 +0000
Manifest this update: Mon 02 Mar 2026 00:29:04 +0000
Manifest next update: Mon 09 Mar 2026 00:29:04 +0000
Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: lAXVtOj8Gsu8fWC17jpURq7pmJmCWgwO4dDfdRTl4N0=)
2: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: Cadr/xUb1+0gVtL0k3xW6zkBh+JLJ5ZTxdWq64WB59k=)
3: 11CCFCD8DB0B11F0BC36350982D3641D.roa (hash: iqoDOOCu/fngDkkSni/oqHyjislrgnbGvgYBpgWoetA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Validity
Not Before: Mar 2 00:29:04 2026 GMT
Not After : Mar 9 00:29:04 2026 GMT
Subject: CN=69a4d9d1-6cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:21:1e:8e:fd:be:22:70:d4:17:76:f2:dc:
24:bf:cd:64:92:a6:db:b7:4a:cd:1f:31:92:29:fc:
b3:a8:74:7c:fa:01:0a:39:62:0e:87:7d:58:e7:13:
3e:78:10:14:43:58:d2:b0:53:22:89:92:07:34:b5:
30:75:04:36:bf:f6:e1:06:99:c9:25:12:57:ab:9a:
3f:cc:a8:27:46:16:f1:91:71:40:70:e0:f8:6e:e4:
ac:5b:fb:b4:20:75:e3:96:b8:74:a4:70:74:b5:e9:
e5:3f:3d:e5:80:e4:67:a0:17:f7:a3:f0:40:2f:b7:
e8:78:14:1f:c8:6c:6a:7d:b0:5f:d1:3a:bf:80:0e:
bb:99:e7:13:8e:66:fd:8a:93:61:8d:f1:e0:b1:b5:
82:5c:26:5f:7f:ca:7f:9b:09:86:dc:16:9b:d1:f6:
20:fe:b1:f3:ad:af:24:c7:14:c0:07:43:9a:3b:92:
40:8a:bc:1b:93:ea:fd:cb:2d:00:35:81:e2:9b:2e:
6f:2c:a4:b5:9b:fc:7d:ed:4e:40:af:c0:34:8f:8a:
41:c0:15:46:a4:07:ff:7a:5f:6f:ca:bf:77:24:fc:
a4:2f:a6:22:c7:1a:9a:5c:4f:93:2b:40:4d:26:9f:
2b:0d:e2:55:1f:8a:0e:eb:23:c2:d1:88:03:30:0a:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:5B:98:AE:E5:5E:97:EF:B2:A2:DE:3F:67:28:D5:6A:A2:C4:03
X509v3 Authority Key Identifier:
keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:33:9e:4e:e6:34:ce:e6:c2:90:e9:04:c0:a3:85:7f:3c:fb:
f0:50:f9:c4:0d:bc:91:f9:b3:2a:d2:08:e5:87:e0:6a:ee:c3:
ba:42:47:22:29:42:42:6e:31:53:06:a2:9f:01:29:48:34:5e:
06:6c:c0:1f:46:13:75:53:9f:e5:d2:e3:41:50:29:ad:24:d1:
90:74:b6:a4:80:ec:21:74:b6:c5:ff:2b:78:e4:c3:61:4e:40:
e5:77:80:0f:c2:c3:9c:ed:a4:04:fb:e0:cf:0e:16:b6:41:3c:
2d:87:ae:68:ce:01:11:74:75:ce:ec:9f:a4:5e:5d:0e:13:c3:
1f:11:ac:f4:a6:7a:2d:68:63:d1:04:b0:70:89:71:e8:15:36:
a1:17:e6:41:08:2b:7e:f6:7f:05:01:5d:9c:ca:fc:6f:9d:51:
da:56:03:56:d9:a7:cc:8e:8f:1f:ab:1d:da:5c:10:9d:39:91:
3b:d1:e7:5f:65:11:cd:6f:74:6f:49:6b:38:a6:e7:d4:dc:cf:
42:6f:cf:45:59:6e:88:5e:87:cf:22:5b:05:9e:1e:6f:51:42:
7d:78:1c:55:dc:98:c5:b4:e6:fe:4d:8e:91:c7:17:c7:1b:1c:
5c:65:c5:76:ed:57:ab:9b:83:a6:6a:48:2d:7a:b0:3b:0c:e0:
b9:e3:b9:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RjE5NTExMC8GA1UEBRMoNjE1Nzc1QTRERTIzRTQ2QThCNTdDOEY3QjlDOUUxRTg4
NkU1RDhENTAeFw0yNjAzMDIwMDI5MDRaFw0yNjAzMDkwMDI5MDRaMBgxFjAUBgNV
BAMTDTY5YTRkOWQxLTZjZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCQriEejv2+InDUF3by3CS/zWSSptu3Ss0fMZIp/LOodHz6AQo5Yg6HfVjnEz54
EBRDWNKwUyKJkgc0tTB1BDa/9uEGmcklElermj/MqCdGFvGRcUBw4Phu5Kxb+7Qg
deOWuHSkcHS16eU/PeWA5GegF/ej8EAvt+h4FB/IbGp9sF/ROr+ADruZ5xOOZv2K
k2GN8eCxtYJcJl9/yn+bCYbcFpvR9iD+sfOtryTHFMAHQ5o7kkCKvBuT6v3LLQA1
geKbLm8spLWb/H3tTkCvwDSPikHAFUakB/96X2/Kv3ck/KQvpiLHGppcT5MrQE0m
nysN4lUfig7rI8LRiAMwCtRvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6D9bmK7l
XpfvsqLeP2co1WqixAMwHwYDVR0jBBgwFoAUYVd1pN4j5GqLV8j3ucnh6Ibl2NUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1Lzc0QzE4RjcwOTM4
QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJO
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWVZkMXBONGo1R3FMVjhqM3Vjbmg2SWJsMk5VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG
MTk1Lzc0QzE4RjcwOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdx
TFY4ajN1Y25oNklibDJOVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA2M55O5jTO5sKQ6QTAo4V/PPvwUPnEDbyR+bMq0gjlh+Bq7sO6QkciKUJCbjFT
BqKfASlINF4GbMAfRhN1U5/l0uNBUCmtJNGQdLakgOwhdLbF/yt45MNhTkDld4AP
wsOc7aQE++DPDha2QTwth65ozgERdHXO7J+kXl0OE8MfEaz0pnotaGPRBLBwiXHo
FTahF+ZBCCt+9n8FAV2cyvxvnVHaVgNW2afMjo8fqx3aXBCdOZE70edfZRHNb3Rv
SWs4pufU3M9Cb89FWW6IXofPIlsFnh5vUUJ9eBxV3JjFtOb+TY6RxxfHGxxcZcV2
7Verm4OmakgterA7DOC547k2
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:58 2026 by rpki-client