
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json)
Hash identifier: qhCSXAXvT+YfzENIZtsPYjrhGj8IGcGtOFQ7uGm8AyI=
Subject key identifier: 59:61:EF:9D:B4:AA:83:64:7A:8C:7F:F3:CD:D2:62:78:5A:63:D2:FC
Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Certificate serial: 0C8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
Manifest number: 0C80
Signing time: Sat 28 Feb 2026 18:46:11 +0000
Manifest this update: Sat 28 Feb 2026 18:46:10 +0000
Manifest next update: Sat 07 Mar 2026 18:46:10 +0000
Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: QZ8CIMA0pSvHKIL7oCEwo44Y3X8t9tfVWdrlxSWSZSI=)
2: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: ZFtw4XBtaTpuG8av6eiIxdbFne0HCTx0F5yxqFrmuwo=)
3: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: kCzsbEF39NBIXCfKWCP2b6ON/1+GtsTI4dW3uYXN/og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Validity
Not Before: Feb 28 18:46:10 2026 GMT
Not After : Mar 7 18:46:10 2026 GMT
Subject: CN=69a337f3-406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:db:6b:a7:ea:a4:9c:d5:4c:0f:ab:6f:8b:
fc:73:02:4d:d0:7d:a7:93:be:90:34:e7:77:f8:c4:
d8:a0:1f:71:d8:27:dd:f8:8f:25:0d:8c:2d:6b:8a:
de:8d:e8:f3:2f:23:2d:09:ae:7f:56:44:6f:7e:60:
9e:63:f7:8d:4d:f7:56:0b:8c:1f:08:03:d1:4e:5e:
d2:2e:d5:34:5e:51:a9:79:cc:08:61:1a:56:cb:66:
70:fd:1c:e1:f7:0b:55:83:8a:6d:d6:75:8f:62:f1:
f1:6b:8a:0d:50:07:12:c5:b3:7d:84:a7:cf:7d:1c:
ee:8c:b0:20:34:c8:b8:17:7c:65:65:f8:af:47:b1:
31:03:dd:ba:81:66:69:87:eb:d7:e0:a0:2d:be:0e:
ca:1f:58:63:39:2f:9d:d9:e1:b6:36:0e:ce:08:be:
03:31:c9:70:dc:e2:b6:02:73:cc:47:7c:c8:31:24:
56:4c:e1:b8:b3:0b:00:14:ac:aa:18:ee:89:b1:15:
31:fd:56:4d:3b:c9:50:0e:9c:f8:25:30:4d:f3:4c:
7a:41:50:b8:0c:30:36:0c:e8:61:d9:63:18:1f:b3:
db:a2:e9:e1:a8:d5:17:42:24:8b:85:d9:d0:d3:4a:
d8:03:15:e8:55:43:c0:2c:b3:8e:47:37:d6:70:3d:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:EF:9D:B4:AA:83:64:7A:8C:7F:F3:CD:D2:62:78:5A:63:D2:FC
X509v3 Authority Key Identifier:
keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6b:7d:4d:73:3e:c8:58:55:2d:6c:19:f6:43:14:d9:97:87:
3e:09:b6:4f:af:64:95:e6:73:84:04:38:de:90:d3:fb:82:a8:
01:bd:06:ca:94:74:7e:3b:de:91:ca:08:ba:25:9c:c5:1f:02:
2c:a0:26:f7:10:c7:05:5a:d1:e0:4e:44:67:93:92:d6:86:25:
a0:ce:44:3c:dc:29:98:a1:03:13:18:2b:9a:7a:97:f3:2e:5f:
be:86:21:b6:32:b9:39:04:db:5c:55:41:b6:91:51:fa:6e:1a:
2b:9a:57:3d:8e:73:61:3e:6f:1c:08:6d:bb:0b:58:7b:6c:d6:
eb:61:f2:32:7a:ad:3f:27:10:82:c1:d3:f1:07:c5:a9:b7:e9:
8e:58:90:8f:ac:35:e5:ab:f1:c4:c3:5b:d2:00:38:ad:09:2b:
6c:df:32:14:f6:e4:85:73:98:87:9e:ac:30:48:e1:f7:11:bd:
f9:7c:df:c0:ad:42:36:dc:87:4f:e0:2f:8f:e1:27:c7:12:51:
98:62:4a:9f:ae:b4:c2:c3:ea:7f:63:8d:52:a9:2c:ee:f1:5f:
ed:e1:8b:64:ee:1f:f9:5f:4d:64:d6:f9:78:c8:eb:ef:2a:1b:
d9:11:36:6f:9c:b2:cd:80:5e:24:0a:04:d3:4b:cd:c3:6a:05:
9f:f5:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:44 2026 by rpki-client