
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json)
Hash identifier: rBGb1GP6A4720BWbjAyQif/JQVbRFf/Ue0y3Oag5dOs=
Subject key identifier: DB:6C:A9:F8:FC:67:A4:8D:E5:6C:81:90:89:00:16:11:91:A7:BB:DC
Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Certificate serial: 0CC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
Manifest number: 0CB7
Signing time: Fri 12 Jun 2026 18:31:04 +0000
Manifest this update: Fri 12 Jun 2026 18:31:04 +0000
Manifest next update: Fri 19 Jun 2026 18:31:04 +0000
Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: TdZ6SwHwMYZNeCxNhWC/m9rkXbzB3D9VD3RyaSC740s=)
2: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: +veuE7uroMOvZaLX4YYQUXIUo7kDv0lS8n9ppMEUfBU=)
3: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: RqF3cRBG8AaHKTEnB008C+GD7GzGFEY6SVWZ6TQ/56s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3271 (0xcc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Validity
Not Before: Jun 12 18:31:04 2026 GMT
Not After : Jun 19 18:31:04 2026 GMT
Subject: CN=6a2c5068-f78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:9d:14:7e:2f:42:68:e9:9a:20:d7:b3:02:
96:65:20:9b:fd:fe:f6:64:7b:36:ec:71:5e:ed:d0:
a6:c7:6a:42:9b:f6:90:82:1e:1e:80:3e:c3:b7:2a:
53:bd:ba:18:4a:24:d8:29:3e:69:76:eb:a2:55:61:
02:2e:4b:45:61:38:39:8b:b7:66:57:81:d8:d5:ce:
07:48:90:a1:ad:b5:31:63:4f:00:bb:57:46:7e:80:
b6:fa:be:6e:f5:dd:cc:35:1b:12:aa:00:f4:c2:29:
65:1e:1c:f6:95:ec:1f:03:3b:06:df:0b:40:af:af:
d2:f2:61:a3:a3:74:c0:45:aa:e6:fc:a1:e1:43:98:
d0:c6:04:36:45:6d:31:9b:81:7e:f6:e9:c1:4d:b6:
d2:78:8c:f1:94:77:d0:8c:7b:69:19:0c:d1:17:5a:
8c:84:02:41:a8:46:87:3e:36:ed:05:7a:6f:62:83:
81:48:90:96:3a:11:22:5f:32:a6:9f:3e:d5:31:c8:
fe:f2:0b:77:dd:fc:3f:6c:8c:6b:4c:08:a2:7a:ef:
4b:e8:a7:65:78:d7:16:24:11:ce:24:ee:24:58:b7:
3c:c9:a5:d5:92:a4:8e:75:75:56:d8:e1:e4:2a:c4:
fe:38:24:ee:6e:5a:2f:1e:51:3b:9a:e7:e3:ea:0f:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:A9:F8:FC:67:A4:8D:E5:6C:81:90:89:00:16:11:91:A7:BB:DC
X509v3 Authority Key Identifier:
keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:6f:ba:4a:54:ce:46:b4:a3:7f:71:07:79:61:89:0a:31:
cb:3e:ba:bb:37:65:26:a1:e2:2f:6e:bd:ba:a6:38:d1:59:96:
95:42:1e:0d:ee:a4:e3:a4:91:e9:42:3f:cc:d2:bf:b4:00:35:
5b:a9:8b:1c:41:41:07:31:ba:31:8c:27:11:96:f0:0b:23:1a:
60:a3:3d:64:8b:2f:2f:1f:95:9a:db:01:7d:38:51:8c:18:27:
e8:db:a1:2c:fa:8d:35:ef:b1:b0:ee:1d:f0:88:f7:79:82:c4:
1d:bb:c0:b3:05:a5:65:a5:bb:d4:28:e9:6f:91:be:62:ad:90:
0b:48:1e:de:1d:72:8c:46:ff:33:88:55:59:a4:a2:a7:bb:db:
98:76:9e:9b:31:7e:9e:5b:50:16:ee:ba:bd:24:a6:79:06:2b:
01:4a:0a:55:f9:53:54:6a:49:b4:e6:6e:5b:50:42:ec:37:78:
07:10:ba:c5:6a:37:8a:4c:04:af:bf:69:cb:af:c3:59:a9:5a:
76:64:76:b9:76:24:ac:07:b7:9c:64:c7:e1:8d:70:4d:ac:4a:
c5:ae:3b:37:8d:db:d0:f8:d5:9e:51:02:f0:73:96:48:db:99:
b9:5a:89:c8:c6:35:62:27:fe:80:a7:d4:15:b8:5c:ad:81:97:
2f:2f:e2:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey
N0RFQTkyMUEwHhcNMjYwNjEyMTgzMTA0WhcNMjYwNjE5MTgzMTA0WjAYMRYwFAYD
VQQDEw02YTJjNTA2OC1mNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqPKdFH4vQmjpmiDXswKWZSCb/f72ZHs27HFe7dCmx2pCm/aQgh4egD7DtypT
vboYSiTYKT5pduuiVWECLktFYTg5i7dmV4HY1c4HSJChrbUxY08Au1dGfoC2+r5u
9d3MNRsSqgD0willHhz2lewfAzsG3wtAr6/S8mGjo3TARarm/KHhQ5jQxgQ2RW0x
m4F+9unBTbbSeIzxlHfQjHtpGQzRF1qMhAJBqEaHPjbtBXpvYoOBSJCWOhEiXzKm
nz7VMcj+8gt33fw/bIxrTAiieu9L6KdleNcWJBHOJO4kWLc8yaXVkqSOdXVW2OHk
KsT+OCTublovHlE7mufj6g/DoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNtsqfj8
Z6SN5WyBkIkAFhGRp7vcMB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1
RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP
b1d0ckNvbE1kem9uM3FraG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARhJvukpUzka0o39xB3lhiQoxyz66uzdlJqHiL269uqY40VmWlUIeDe6k46SR
6UI/zNK/tAA1W6mLHEFBBzG6MYwnEZbwCyMaYKM9ZIsvLx+VmtsBfThRjBgn6Nuh
LPqNNe+xsO4d8Ij3eYLEHbvAswWlZaW71Cjpb5G+Yq2QC0ge3h1yjEb/M4hVWaSi
p7vbmHaemzF+nltQFu66vSSmeQYrAUoKVflTVGpJtOZuW1BC7Dd4BxC6xWo3ikwE
r79py6/DWaladmR2uXYkrAe3nGTH4Y1wTaxKxa47N43b0PjVnlEC8HOWSNuZuVqJ
yMY1Yif+gKfUFbhcrYGXLy/iBg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:14:48 2026 by rpki-client