
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier: 3m+ERgi3whCykFwXU8YZd1W8GUiuYynUU7LftLVFrfA=
Subject key identifier: 52:4D:1D:EA:2F:B1:24:57:2C:4B:AC:05:61:41:7D:17:AD:D7:FD:63
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number: 0103
Signing time: Mon 02 Mar 2026 01:51:39 +0000
Manifest this update: Mon 02 Mar 2026 01:51:36 +0000
Manifest next update: Mon 09 Mar 2026 01:51:36 +0000
Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: 8c3Ez5w/Ttlbb8Q16AH8IzllTGEtTfy+zDVOGt+pNp8=)
2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: 5oMhHK5GexMn6Fihs/+IOJ93dC15hw4lCqu3Gtv/Uc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Validity
Not Before: Mar 2 01:51:36 2026 GMT
Not After : Mar 9 01:51:36 2026 GMT
Subject: CN=69a4ed2a-e05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:7d:e1:4c:0f:7e:ac:a2:b6:ea:35:94:9e:
e4:b7:58:74:3a:38:f2:29:9f:13:cf:23:e2:14:08:
d0:85:de:73:68:b5:58:8a:68:15:dc:5b:96:b3:3d:
8a:dc:be:94:f3:76:a3:e0:4b:17:32:63:4c:cf:91:
fb:5d:88:ec:e0:ee:9d:dc:2d:f2:f5:dc:1f:3d:e2:
5a:e5:cd:14:81:16:0d:a2:fe:a1:d0:a9:c7:77:05:
95:cb:a8:6c:c5:69:66:af:4f:ce:2b:0d:f9:36:90:
73:c4:9c:93:38:ef:5d:11:fe:e5:60:1e:b9:6c:4a:
ac:6e:87:59:0e:6d:be:38:d4:09:45:ea:ec:be:bc:
26:5f:f8:9c:25:5c:ab:f4:ce:28:e5:04:ce:29:39:
6b:07:4f:02:60:c1:b9:1b:2d:78:f4:3f:88:f1:c4:
8f:ab:ea:5e:25:cd:25:81:87:16:11:4e:8a:ef:27:
0a:2e:67:46:ec:5c:52:a1:f6:9d:b7:11:bd:88:de:
53:69:14:cf:38:d4:20:4d:e7:d3:a5:b7:81:54:d8:
bd:0f:25:ba:8a:4e:74:d3:c1:4d:5a:09:55:81:92:
47:9a:ca:d5:6b:b6:05:1f:35:a4:02:50:24:30:f7:
5a:1b:6c:2c:ba:56:52:a9:de:6d:dc:c6:09:16:a7:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:1D:EA:2F:B1:24:57:2C:4B:AC:05:61:41:7D:17:AD:D7:FD:63
X509v3 Authority Key Identifier:
keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:73:b2:c0:76:42:10:6e:72:45:13:82:27:32:0b:d1:42:d0:
9c:0e:73:50:f1:cc:9a:9d:a2:37:ee:cd:c7:68:2f:46:62:e5:
a7:20:75:06:2e:07:69:b0:45:39:71:09:56:b7:7a:90:59:ca:
25:41:de:03:08:97:e4:dd:5f:d9:88:02:80:4e:97:62:11:30:
28:cd:85:33:02:ad:31:92:15:8a:15:2e:f7:9a:db:e7:4f:6a:
57:c9:e2:9b:ce:bb:6d:36:60:ec:36:c0:92:00:c0:45:88:2d:
ae:e3:d9:80:9f:48:07:ef:1b:ed:04:7f:58:04:c5:f3:98:b9:
be:75:91:f3:a9:52:cf:0b:d6:83:ad:95:db:ac:b0:5a:9c:c8:
69:ae:dc:b6:ec:71:7e:67:9d:89:40:47:aa:e5:f9:b0:9c:d6:
11:04:8b:54:46:51:62:a9:e3:33:b3:81:90:9f:87:55:67:ac:
6d:ca:ee:b1:f7:33:e6:0c:30:d4:77:c4:a2:20:51:4d:80:3e:
1a:ba:de:79:69:ca:2f:8a:15:bd:76:e2:e2:76:73:b2:f5:59:
f6:57:2c:ea:3b:ce:04:6f:74:f3:37:96:b6:3a:17:4d:87:4b:
35:aa:d4:f8:9f:f8:23:8a:19:0b:e2:1c:d7:5d:e7:1b:b4:4b:
5b:be:fa:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy
NENERjVFNkIwHhcNMjYwMzAyMDE1MTM2WhcNMjYwMzA5MDE1MTM2WjAYMRYwFAYD
VQQDEw02OWE0ZWQyYS1lMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+R94UwPfqyituo1lJ7kt1h0OjjyKZ8TzyPiFAjQhd5zaLVYimgV3FuWsz2K
3L6U83aj4EsXMmNMz5H7XYjs4O6d3C3y9dwfPeJa5c0UgRYNov6h0KnHdwWVy6hs
xWlmr0/OKw35NpBzxJyTOO9dEf7lYB65bEqsbodZDm2+ONQJRersvrwmX/icJVyr
9M4o5QTOKTlrB08CYMG5Gy149D+I8cSPq+peJc0lgYcWEU6K7ycKLmdG7FxSofad
txG9iN5TaRTPONQgTefTpbeBVNi9DyW6ik5008FNWglVgZJHmsrVa7YFHzWkAlAk
MPdaG2wsulZSqd5t3MYJFqcA+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJNHeov
sSRXLEusBWFBfRet1/1jMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD
RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5
QlJzb2FYS2JSbUVremZYbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkHOywHZCEG5yRROCJzIL0ULQnA5zUPHMmp2iN+7Nx2gvRmLlpyB1Bi4HabBF
OXEJVrd6kFnKJUHeAwiX5N1f2YgCgE6XYhEwKM2FMwKtMZIVihUu95rb509qV8ni
m867bTZg7DbAkgDARYgtruPZgJ9IB+8b7QR/WATF85i5vnWR86lSzwvWg62V26yw
WpzIaa7ctuxxfmediUBHquX5sJzWEQSLVEZRYqnjM7OBkJ+HVWesbcrusfcz5gww
1HfEoiBRTYA+GrreeWnKL4oVvXbi4nZzsvVZ9lcs6jvOBG908zeWtjoXTYdLNarU
+J/4I4oZC+Ic113nG7RLW776eA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:11 2026 by rpki-client