
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json)
Hash identifier: DdnHBKNXLyMkSW3CT9T2InPQ8V7Er3dtN6D/PWX9D2M=
Subject key identifier: DE:B2:D5:94:94:2B:9A:37:B4:1B:F2:60:B9:F0:58:9E:48:9C:D7:2C
Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Certificate serial: 0BED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
Manifest number: 0BDF
Signing time: Thu 16 Apr 2026 18:49:46 +0000
Manifest this update: Thu 16 Apr 2026 18:49:45 +0000
Manifest next update: Thu 23 Apr 2026 18:49:45 +0000
Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: 6yvG0eV9i4rTqYraJ/dO8LBkb5S5HDK/syVMCVtDmzw=)
2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: 9vfMSvXUgFAWrMwGngY+4Eec7WyIf24UFnNt67nkKsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Validity
Not Before: Apr 16 18:49:45 2026 GMT
Not After : Apr 23 18:49:45 2026 GMT
Subject: CN=69e12f4a-57c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:f8:f5:a8:99:83:9d:67:50:7b:88:b1:d0:
9d:db:31:5b:ad:1c:3a:9d:ef:76:ef:39:b7:31:c2:
fb:1f:32:59:64:47:f5:19:7c:cb:4e:ab:e6:20:58:
2d:74:b0:ba:28:8e:55:87:8d:fe:e5:80:67:52:75:
33:4d:de:30:98:a2:c2:df:40:c0:f2:e7:da:f1:20:
93:40:2e:b1:60:af:ad:c0:2f:40:9b:90:43:2d:c1:
36:18:a2:4c:2c:f0:33:84:e9:11:f1:98:9b:8e:f0:
f2:50:dc:98:63:a2:71:3c:d5:aa:18:d0:d8:ed:99:
fb:ff:d0:d8:5f:65:6b:66:94:bf:2a:74:3f:cc:73:
99:19:61:7c:8e:d1:25:1b:62:36:5d:2e:44:3f:22:
fd:4f:8c:34:e7:b1:7e:04:22:3a:e7:53:0f:a2:d7:
4a:8e:11:49:cd:9e:90:fa:f8:2f:bf:e8:b6:8f:b7:
f9:1f:59:a8:f3:b2:7c:12:11:ec:8e:9e:f6:aa:1c:
b6:4d:bd:70:cc:19:d9:ea:a0:7b:56:89:fa:f0:9c:
ce:45:3c:54:26:e6:13:08:2d:75:98:97:f7:ca:32:
88:9c:cf:ec:4c:04:51:64:9a:ef:b4:09:44:0e:35:
2f:3e:17:9e:47:21:c5:db:24:13:c5:72:9a:f8:c3:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:D5:94:94:2B:9A:37:B4:1B:F2:60:B9:F0:58:9E:48:9C:D7:2C
X509v3 Authority Key Identifier:
keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:dd:ff:89:e0:6d:cd:96:fa:f8:78:1e:05:67:55:9e:c3:5e:
be:95:53:70:b1:65:1c:6b:45:1a:c8:0b:73:3f:5d:65:d5:c1:
2c:b9:16:61:9b:e3:76:52:d9:29:88:3e:53:ec:aa:43:aa:9f:
9c:e8:dc:eb:92:22:ea:b2:31:4f:4f:35:81:fe:e2:2c:e7:3e:
bd:b6:5d:5b:c9:55:06:11:8f:c8:69:3c:72:8a:8c:15:dd:fe:
fe:c0:0c:67:2f:2c:25:ab:1c:43:46:37:5a:81:86:6f:9c:75:
55:a9:0e:88:12:35:dd:67:da:30:9c:30:ca:e7:3e:65:6d:8c:
f3:49:49:7b:48:0f:b9:8a:fc:85:4c:f4:ed:05:36:b4:48:56:
be:dd:57:93:9e:9f:b6:b7:d5:e4:63:9e:b5:e9:a8:f7:30:69:
7a:94:54:47:c4:8b:fe:f5:98:64:24:ec:24:9e:b4:33:6e:50:
2c:2d:19:5e:57:7d:e5:4e:6f:f5:57:e5:49:0c:fb:a3:b5:5e:
99:9c:43:92:19:63:b7:61:b3:83:16:4a:18:75:a0:0a:4b:a3:
c1:b0:47:98:20:6f:35:b8:a4:94:47:a6:cc:8e:e6:31:45:22:
df:c4:32:e9:6b:cf:1a:cd:36:1f:85:27:56:9f:eb:2b:d5:a4:
8b:c2:41:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY4QjYxMTAvBgNVBAUTKEFEODRGNEJDQkVCM0M5MzY1RjI4MjcxNTNCQTY5Q0VE
MkE5OTEyRTIwHhcNMjYwNDE2MTg0OTQ1WhcNMjYwNDIzMTg0OTQ1WjAYMRYwFAYD
VQQDEw02OWUxMmY0YS01N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAok/49aiZg51nUHuIsdCd2zFbrRw6ne927zm3McL7HzJZZEf1GXzLTqvmIFgt
dLC6KI5Vh43+5YBnUnUzTd4wmKLC30DA8ufa8SCTQC6xYK+twC9Am5BDLcE2GKJM
LPAzhOkR8ZibjvDyUNyYY6JxPNWqGNDY7Zn7/9DYX2VrZpS/KnQ/zHOZGWF8jtEl
G2I2XS5EPyL9T4w057F+BCI651MPotdKjhFJzZ6Q+vgvv+i2j7f5H1mo87J8EhHs
jp72qhy2Tb1wzBnZ6qB7Von68JzORTxUJuYTCC11mJf3yjKInM/sTARRZJrvtAlE
DjUvPheeRyHF2yQTxXKa+MPolwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6y1ZSU
K5o3tBvyYLnwWJ5InNcsMB8GA1UdIwQYMBaAFK2E9Ly+s8k2XygnFTumnO0qmRLi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhCNi80MEU3RkFCQTNB
QTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlUWmZLQ2NWTzZhYzdTcVpF
dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JZVDB2TDZ6eVRaZktDY1ZPNmFjN1NxWkV1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjhCNi80MEU3RkFCQTNBQTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlU
WmZLQ2NWTzZhYzdTcVpFdUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaN3/ieBtzZb6+HgeBWdVnsNevpVTcLFlHGtFGsgLcz9dZdXBLLkWYZvjdlLZ
KYg+U+yqQ6qfnOjc65Ii6rIxT081gf7iLOc+vbZdW8lVBhGPyGk8coqMFd3+/sAM
Zy8sJascQ0Y3WoGGb5x1VakOiBI13WfaMJwwyuc+ZW2M80lJe0gPuYr8hUz07QU2
tEhWvt1Xk56ftrfV5GOetemo9zBpepRUR8SL/vWYZCTsJJ60M25QLC0ZXld95U5v
9VflSQz7o7VemZxDkhljt2GzgxZKGHWgCkujwbBHmCBvNbiklEemzI7mMUUi38Qy
6WvPGs02H4UnVp/rK9Wki8JBtg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:59 2026 by rpki-client