
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
File: yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json)
Hash identifier: RTvh3LUcK1RFRbu7A0BZ0wSrRMEZLiJT2Mx/yQVDWfQ=
Subject key identifier: 6C:CE:50:BF:16:8C:AA:4F:07:91:07:3A:0E:31:71:F2:3D:53:AD:D7
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Certificate issuer: /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
Manifest number: E3
Signing time: Sat 13 Jun 2026 06:38:35 +0000
Manifest this update: Sat 13 Jun 2026 06:38:34 +0000
Manifest next update: Sat 20 Jun 2026 06:38:34 +0000
Files and hashes: 1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: +DdOi+wsagnTP2O+mzbv64cJDcOBcNEuTrwEvX0MZ+g=)
2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: ZgPtES9Kb7/bZDuku74P3oPXELpqML+BgkqSggVYIcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Validity
Not Before: Jun 13 06:38:34 2026 GMT
Not After : Jun 20 06:38:34 2026 GMT
Subject: CN=6a2cfaeb-3382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:bd:02:72:02:72:b9:2c:5a:42:3e:b6:92:
c5:e7:4c:79:ed:a3:25:22:12:8a:77:b3:fc:8b:74:
1c:6c:a9:d2:ad:67:40:d8:4c:2e:bb:e6:22:92:8d:
44:3e:77:54:07:0f:ad:1e:38:a9:5d:7c:7e:8a:17:
fa:81:8a:2b:3b:19:ac:57:d9:10:fd:9d:b3:ef:cf:
23:16:59:06:35:b1:42:e3:0a:cb:45:d6:21:fc:23:
8f:ee:61:6f:d1:60:0d:7d:a0:9d:81:e4:7b:77:88:
15:80:70:e9:5d:ba:a4:9a:86:47:3d:b9:45:67:ef:
55:ed:e4:e9:6e:57:47:bf:d6:49:9c:e6:97:05:4a:
2a:10:2f:d8:47:8a:39:84:7d:63:0d:1d:b3:6c:4a:
87:39:8d:ac:1d:fa:37:69:6f:bf:eb:d8:b1:7c:77:
40:3b:62:72:3b:36:99:8b:07:7d:27:f9:4f:bb:56:
52:c0:05:57:33:2f:ec:4f:65:0e:48:bf:37:ce:fd:
a2:11:ff:2a:41:ca:1c:1b:82:5b:aa:c9:08:85:a9:
d8:b5:18:51:5d:cf:08:c7:c7:cf:cc:39:be:b4:f9:
30:26:f4:03:9b:8f:bd:7b:74:70:18:6b:ca:7f:41:
ce:f2:26:2c:e1:ab:7b:76:19:46:85:29:9a:b0:81:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CE:50:BF:16:8C:AA:4F:07:91:07:3A:0E:31:71:F2:3D:53:AD:D7
X509v3 Authority Key Identifier:
keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:46:ea:59:9e:f6:71:b5:b4:5b:4f:9f:11:b4:de:ab:fb:28:
4f:72:ee:c7:34:c9:6d:c6:e2:bd:09:1c:32:c4:27:0b:f7:8f:
e1:55:00:39:e0:a0:11:18:fe:27:e7:ee:93:ca:39:17:1f:c7:
a1:dc:9f:69:96:83:23:cb:a9:08:19:6e:03:06:3b:9f:5c:69:
39:83:c2:d1:4c:1c:c3:c9:35:06:f2:81:76:39:a8:f2:dd:95:
95:80:d7:38:f5:12:8c:99:a9:38:f0:61:bb:00:cc:9b:c7:fe:
79:87:7e:53:be:9b:dd:59:48:db:a8:92:a7:bb:ab:08:13:b5:
e3:15:e2:58:f7:52:ed:cb:da:b5:63:0a:27:83:13:3c:e9:ea:
da:6f:bd:5d:57:98:53:92:25:16:52:81:74:45:3a:eb:c9:02:
5e:8e:39:6c:29:e2:33:ac:93:a6:34:02:ce:65:95:90:d0:08:
0e:af:1d:eb:6e:00:a4:ad:3e:59:9e:15:c8:b2:03:9c:5f:9e:
9a:6e:8e:4a:43:f4:02:34:03:9c:45:c0:df:f9:b2:99:68:62:
9f:e9:2e:17:9e:65:7f:b5:49:bd:29:33:59:81:2b:b1:9e:0b:
0e:8d:4f:dd:7b:e6:e7:18:3a:4f:1c:d7:99:1b:a2:95:6a:2d:
69:70:01:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg1RjExMTAvBgNVBAUTKEM4QkYwNjVBNzQ4MjJFRjhDQzYyRjRBNTRFNTlENTg3
MTIwQjZGNDcwHhcNMjYwNjEzMDYzODM0WhcNMjYwNjIwMDYzODM0WjAYMRYwFAYD
VQQDEw02YTJjZmFlYi0zMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp4K9AnICcrksWkI+tpLF50x57aMlIhKKd7P8i3QcbKnSrWdA2Ewuu+Yiko1E
PndUBw+tHjipXXx+ihf6gYorOxmsV9kQ/Z2z788jFlkGNbFC4wrLRdYh/COP7mFv
0WANfaCdgeR7d4gVgHDpXbqkmoZHPblFZ+9V7eTpbldHv9ZJnOaXBUoqEC/YR4o5
hH1jDR2zbEqHOY2sHfo3aW+/69ixfHdAO2JyOzaZiwd9J/lPu1ZSwAVXMy/sT2UO
SL83zv2iEf8qQcocG4JbqskIhanYtRhRXc8Ix8fPzDm+tPkwJvQDm4+9e3RwGGvK
f0HO8iYs4at7dhlGhSmasIHikwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzOUL8W
jKpPB5EHOg4xcfI9U63XMB8GA1UdIwQYMBaAFMi/Blp0gi74zGL0pU5Z1YcSC29H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82QUE0RDYwQTBE
RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi95TDhHV25TQ0x2ak1ZdlNsVGxuVmh4SUxi
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lMOEdXblNDTHZqTVl2U2xUbG5WaHhJTGIwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODVGMS82QUE0RDYwQTBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi95TDhHV25TQ0x2
ak1ZdlNsVGxuVmh4SUxiMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWkbqWZ72cbW0W0+fEbTeq/soT3LuxzTJbcbivQkcMsQnC/eP4VUAOeCgERj+
J+fuk8o5Fx/HodyfaZaDI8upCBluAwY7n1xpOYPC0Uwcw8k1BvKBdjmo8t2VlYDX
OPUSjJmpOPBhuwDMm8f+eYd+U76b3VlI26iSp7urCBO14xXiWPdS7cvatWMKJ4MT
POnq2m+9XVeYU5IlFlKBdEU668kCXo45bCniM6yTpjQCzmWVkNAIDq8d624ApK0+
WZ4VyLIDnF+emm6OSkP0AjQDnEXA3/mymWhin+kuF55lf7VJvSkzWYErsZ4LDo1P
3Xvm5xg6TxzXmRuilWotaXABSg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:42 2026 by rpki-client