
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
File: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json)
Hash identifier: 44bcED4evXV8YZxReqTu6hNzqdAaMJJqYxbXTVjXTdc=
Subject key identifier: 2D:92:18:B4:00:1B:87:A8:AB:3E:21:64:65:F2:53:48:C0:6C:9F:97
Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13
Certificate issuer: /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
Manifest number: 0E
Signing time: Sat 13 Jun 2026 09:12:45 +0000
Manifest this update: Sat 13 Jun 2026 09:12:45 +0000
Manifest next update: Sat 20 Jun 2026 09:12:45 +0000
Files and hashes: 1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: hT2bWpLXY9IBy2HVuqxVOjeDWCyiWEDxcocrSwwiRWc=)
2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl
rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
Validity
Not Before: Jun 13 09:12:45 2026 GMT
Not After : Jun 20 09:12:45 2026 GMT
Subject: CN=6a2d1f0d-c1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:74:f5:f9:4e:10:79:fb:e9:01:b4:e8:86:
5a:e8:d4:e9:c0:72:9f:19:9f:6d:ef:6c:6d:af:28:
e1:2a:cb:da:bf:23:f7:eb:9f:ee:12:52:ec:85:7f:
d1:a6:6d:a4:a5:67:8a:d9:39:55:32:58:87:7b:3d:
2f:fd:f9:14:e8:c8:97:ae:cb:e2:cd:cc:ec:12:7c:
51:1b:36:cd:dc:13:0e:4b:4f:b9:88:f7:93:95:c3:
63:41:bd:45:fb:c6:fd:09:04:62:12:c4:78:65:10:
c5:b9:fa:48:49:16:12:0f:40:8f:b5:46:1a:a3:8f:
91:65:c7:27:49:23:f7:1e:64:27:9e:99:65:ce:9f:
b9:9b:c5:30:b0:9f:1d:86:a6:95:b5:20:8f:e7:15:
ca:ab:30:d8:d1:66:7a:bd:88:d6:73:f0:38:58:a2:
4d:eb:88:ca:c4:12:75:a4:90:97:16:b1:af:59:b1:
7c:8b:b5:2c:e5:04:f7:3e:b1:57:a8:5b:8f:72:aa:
e8:e0:63:50:df:7b:ff:0b:16:61:a3:4d:3f:0d:56:
51:46:99:3c:07:0b:a4:68:67:f1:ec:62:68:35:84:
13:e7:aa:10:74:ce:ae:13:c8:f9:43:3d:02:69:d5:
38:1b:a8:4c:cc:9d:10:3d:95:31:55:76:0f:44:b6:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:92:18:B4:00:1B:87:A8:AB:3E:21:64:65:F2:53:48:C0:6C:9F:97
X509v3 Authority Key Identifier:
keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9e:2b:0d:f2:ca:a6:84:4f:b4:6d:1b:7b:cc:81:eb:06:f8:
da:47:41:f8:cb:ca:78:fb:75:09:58:11:f8:c3:a2:0d:3d:b3:
e6:4f:c1:7b:9a:59:79:73:38:ba:1e:d5:04:c8:ae:81:9e:d8:
6b:ba:9f:08:aa:ee:8e:cb:c9:5a:11:56:26:7b:21:b7:46:55:
1a:68:35:dc:f7:60:51:ad:1c:16:60:f8:1a:80:4f:ee:4f:08:
31:d9:5f:44:ef:f1:91:9b:df:c7:2e:34:61:c7:a5:f1:55:f2:
95:47:cc:e3:08:a9:ac:73:5b:52:e8:3c:43:19:39:40:a1:62:
45:e4:92:02:f0:8f:24:d9:85:81:00:17:fe:70:18:ac:91:e7:
5f:fb:2c:33:77:96:09:b1:0e:ae:94:d2:32:d7:f3:83:b5:34:
9c:2b:e1:2d:96:08:b1:ec:6a:b9:0f:89:25:49:e3:a0:d3:3d:
d1:e8:a9:0d:35:8c:9c:bf:a6:44:e2:ec:eb:3f:d2:e2:0a:04:
a3:8e:fa:e2:77:2f:e5:4d:7e:c5:f3:47:2e:18:83:b0:d9:25:
28:ab:cb:d1:1a:93:5e:94:6c:c0:01:39:0e:65:72:9e:a3:28:
db:e6:09:19:5c:df:ef:d2:35:eb:29:ea:1e:2a:3b:69:88:54:
b6:6a:53:01
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDEzQTExMC8GA1UEBRMoQUYyRDkwNkUyNjREMkE4NjBCMDQ5MjAxRDUwRTE4NUVG
MkFEQzExMzAeFw0yNjA2MTMwOTEyNDVaFw0yNjA2MjAwOTEyNDVaMBgxFjAUBgNV
BAMTDTZhMmQxZjBkLWMxYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCX93T1+U4QefvpAbTohlro1OnAcp8Zn23vbG2vKOEqy9q/I/frn+4SUuyFf9Gm
baSlZ4rZOVUyWId7PS/9+RToyJeuy+LNzOwSfFEbNs3cEw5LT7mI95OVw2NBvUX7
xv0JBGISxHhlEMW5+khJFhIPQI+1Rhqjj5FlxydJI/ceZCeemWXOn7mbxTCwnx2G
ppW1II/nFcqrMNjRZnq9iNZz8DhYok3riMrEEnWkkJcWsa9ZsXyLtSzlBPc+sVeo
W49yqujgY1Dfe/8LFmGjTT8NVlFGmTwHC6RoZ/HsYmg1hBPnqhB0zq4TyPlDPQJp
1TgbqEzMnRA9lTFVdg9EtvuDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULZIYtAAb
h6irPiFkZfJTSMBsn5cwHwYDVR0jBBgwFoAUry2QbiZNKoYLBJIB1Q4YXvKtwRMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMTNBLzg0NzUyRkQyNTgx
ODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29ZTEJKSUIxUTRZWHZLdHdS
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcnkyUWJpWk5Lb1lMQkpJQjFRNFlYdkt0d1JNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw
MTNBLzg0NzUyRkQyNTgxODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29Z
TEJKSUIxUTRZWHZLdHdSTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBOnisN8sqmhE+0bRt7zIHrBvjaR0H4y8p4+3UJWBH4w6INPbPmT8F7mll5czi6
HtUEyK6Bnthrup8Iqu6Oy8laEVYmeyG3RlUaaDXc92BRrRwWYPgagE/uTwgx2V9E
7/GRm9/HLjRhx6XxVfKVR8zjCKmsc1tS6DxDGTlAoWJF5JIC8I8k2YWBABf+cBis
kedf+ywzd5YJsQ6ulNIy1/ODtTScK+Etlgix7Gq5D4klSeOg0z3R6KkNNYycv6ZE
4uzrP9LiCgSjjvridy/lTX7F80cuGIOw2SUoq8vRGpNelGzAATkOZXKeoyjb5gkZ
XN/v0jXrKeoeKjtpiFS2alMB
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:06:34 2026 by rpki-client