
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier: Q0LRpHXVeJAIOVyHy7KEALw/T1PWu83RrCEjXxdoHP8=
Subject key identifier: 43:B3:94:B8:66:31:D3:7E:7F:AA:F8:75:3D:22:DC:EC:11:C0:41:35
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number: 012D
Signing time: Sun 01 Mar 2026 06:35:00 +0000
Manifest this update: Sun 01 Mar 2026 06:35:00 +0000
Manifest next update: Sun 08 Mar 2026 06:35:00 +0000
Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: vF41tAXE9/l4ocU7dcIDPILHmKRUyiEQVYejnmZUqKY=)
2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: p1Kd4l2BGto3TUE6P+Iwqb8Y4agcHwTbtFw10TWcSis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Validity
Not Before: Mar 1 06:35:00 2026 GMT
Not After : Mar 8 06:35:00 2026 GMT
Subject: CN=69a3de14-19fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:a4:16:78:7d:ab:b2:2a:0f:a4:c5:6c:a4:
23:67:1a:1f:4e:d6:c0:0b:da:ca:38:48:18:17:4a:
02:5b:3e:7f:50:e5:d9:00:ea:9a:54:f8:ea:b3:2d:
f5:c4:f7:e2:ef:00:48:42:44:2f:cf:bb:60:11:c7:
d4:d2:80:a2:32:c7:d2:83:19:67:0c:c3:44:0d:75:
12:aa:7b:96:f3:95:32:bb:ac:78:46:a0:03:27:da:
56:fa:df:d6:f9:6d:3b:45:f4:e4:ff:2d:95:d0:b5:
5e:1c:56:a0:11:f0:d5:58:5e:21:cd:af:2a:75:e4:
a7:c7:99:f7:71:00:d5:e3:e4:30:e4:60:89:2b:ab:
af:9b:6e:2b:95:9c:ed:fa:bc:48:f1:f3:97:d0:29:
f5:8a:59:1c:a7:f9:b2:0d:67:28:49:70:7a:ab:03:
0c:fd:fb:ec:d4:ed:62:45:af:92:58:e2:51:3a:d6:
b6:9d:0d:06:e9:2a:6b:ef:55:fa:aa:51:eb:e2:e9:
50:12:95:59:85:6a:f3:02:2d:90:f2:9c:ba:50:76:
f5:01:d1:07:cb:7e:53:95:41:7c:54:ff:32:2f:ee:
23:54:ed:79:03:a8:fc:16:2c:14:5f:14:d9:ca:44:
5a:3b:3b:28:23:65:87:d3:d8:41:b2:1b:62:18:c5:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B3:94:B8:66:31:D3:7E:7F:AA:F8:75:3D:22:DC:EC:11:C0:41:35
X509v3 Authority Key Identifier:
keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:61:83:0f:bd:fc:5d:0b:26:3c:b4:78:30:c9:9e:2f:2d:9a:
46:b4:d6:7e:2e:9d:92:7b:e2:61:e4:1d:34:e0:10:a3:f2:c7:
88:e0:ab:a0:a5:3a:e6:4d:46:ee:7e:e6:4a:70:9a:48:14:e2:
b9:77:c3:4b:2d:68:8d:95:cf:0a:ff:fb:a7:32:04:b5:f3:cf:
83:8d:6f:52:84:26:9c:68:98:d8:e0:d4:91:d5:de:47:7e:47:
ab:31:3d:7b:db:0f:56:68:e0:9a:80:6e:33:c8:04:b9:21:87:
46:98:e7:7b:3c:c3:24:3a:5d:94:7b:02:93:11:cc:71:0d:ad:
74:ff:c2:25:f8:08:cc:6d:a6:f4:21:78:3e:73:7a:0f:65:e6:
58:c2:9d:a0:e2:40:95:bf:4f:23:66:d9:89:0a:8f:74:1c:11:
63:87:be:5d:04:33:68:e5:a5:6e:86:48:0d:0a:1f:07:b8:0f:
44:a6:a5:49:e6:a2:e8:30:01:99:47:6a:e6:3c:d7:7d:81:ed:
ad:d5:55:12:b7:f6:2f:3f:9f:2a:86:93:15:54:5e:93:45:d2:
03:e7:a4:25:1f:34:e0:3d:8e:a1:d6:6d:d3:14:fa:12:76:f4:
f4:25:66:f7:b7:56:ab:d6:34:ac:90:75:e3:5f:ee:44:99:06:
a4:55:cb:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3
OUJFMDc5NkEwHhcNMjYwMzAxMDYzNTAwWhcNMjYwMzA4MDYzNTAwWjAYMRYwFAYD
VQQDEw02OWEzZGUxNC0xOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoZykFnh9q7IqD6TFbKQjZxofTtbAC9rKOEgYF0oCWz5/UOXZAOqaVPjqsy31
xPfi7wBIQkQvz7tgEcfU0oCiMsfSgxlnDMNEDXUSqnuW85Uyu6x4RqADJ9pW+t/W
+W07RfTk/y2V0LVeHFagEfDVWF4hza8qdeSnx5n3cQDV4+Qw5GCJK6uvm24rlZzt
+rxI8fOX0Cn1ilkcp/myDWcoSXB6qwMM/fvs1O1iRa+SWOJROta2nQ0G6Spr71X6
qlHr4ulQEpVZhWrzAi2Q8py6UHb1AdEHy35TlUF8VP8yL+4jVO15A6j8FiwUXxTZ
ykRaOzsoI2WH09hBshtiGMXsIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOzlLhm
MdN+f6r4dT0i3OwRwEE1MB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5
MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl
V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx
MGNwSk9wMWozS2Q1dmdlV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqWGDD738XQsmPLR4MMmeLy2aRrTWfi6dknviYeQdNOAQo/LHiOCroKU65k1G
7n7mSnCaSBTiuXfDSy1ojZXPCv/7pzIEtfPPg41vUoQmnGiY2ODUkdXeR35HqzE9
e9sPVmjgmoBuM8gEuSGHRpjnezzDJDpdlHsCkxHMcQ2tdP/CJfgIzG2m9CF4PnN6
D2XmWMKdoOJAlb9PI2bZiQqPdBwRY4e+XQQzaOWlboZIDQofB7gPRKalSeai6DAB
mUdq5jzXfYHtrdVVErf2Lz+fKoaTFVRek0XSA+ekJR804D2OodZt0xT6Enb09CVm
97dWq9Y0rJB141/uRJkGpFXLmw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:08 2026 by rpki-client