
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
File: yPWXElLMBM4--LZy7nTid7LM1hU.mft (raw, json)
Hash identifier: vcetA0WBitaq4+t6Pq4omYhA3KtluRgxVuK/huxVx7o=
Subject key identifier: 93:5A:7C:6E:5B:B7:F9:5C:D2:05:12:67:47:56:72:E7:8B:E1:4D:B8
Authority key identifier: C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
Certificate issuer: /CN=A91F72E2/serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
Manifest number: C3
Signing time: Mon 21 Sep 2026 06:48:24 +0000
Manifest this update: Mon 21 Sep 2026 06:48:24 +0000
Manifest next update: Mon 28 Sep 2026 06:48:24 +0000
Files and hashes: 1: yPWXElLMBM4--LZy7nTid7LM1hU.crl (hash: 7jEqpZuI+oQ8wQRBtU8TcGXmTeNBOkNXEtorWmZBp8w=)
2: 13542BE28C9311F099562747C4F9AE02.roa (hash: JS4YDmzQqNEbFfTm3FOsel4f0nz+lGfh7ZTshSRqhkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl
rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F72E2, serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Validity
Not Before: Sep 21 06:48:24 2026 GMT
Not After : Sep 28 06:48:24 2026 GMT
Subject: CN=6ab0d338-44bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:99:40:02:87:a6:83:90:b2:9f:68:29:73:
53:87:08:dc:15:d9:42:d8:ab:a2:0b:7a:9a:f7:14:
12:f3:b9:40:bd:e4:b5:c1:fb:34:53:c7:d5:a3:5b:
06:9e:01:73:fd:a4:21:93:a0:66:44:ce:51:5c:98:
39:38:9e:52:09:31:db:ab:5a:19:b1:fb:6d:12:a0:
3e:3b:57:5b:3a:15:23:2e:23:37:5b:58:be:53:c2:
af:aa:c6:26:6c:ff:ea:ee:11:31:a7:18:c3:dc:01:
ea:8a:25:83:79:48:fa:5d:2f:e0:ad:29:0e:bd:e2:
8d:35:73:c9:6c:a2:55:18:6e:59:2c:91:74:09:db:
2e:ac:4c:8e:cc:a7:5f:44:ef:e2:e8:97:01:47:92:
06:c8:6b:55:fd:73:16:05:7f:2a:3c:6e:2f:8a:c8:
a6:2b:2e:45:7f:88:ce:20:ca:98:aa:42:87:4a:11:
30:b1:62:90:d7:7b:35:10:3e:48:05:2f:10:db:e2:
e8:3f:45:6d:84:b4:84:d1:8a:d9:c0:65:0c:82:4c:
11:d4:0d:51:d3:75:01:8d:03:6e:5c:89:48:7d:fc:
22:47:71:c5:4f:5c:df:b4:8d:c4:11:68:6d:49:e9:
f5:ee:89:fc:9e:bd:f7:bb:da:40:94:d0:6d:b7:d7:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5A:7C:6E:5B:B7:F9:5C:D2:05:12:67:47:56:72:E7:8B:E1:4D:B8
X509v3 Authority Key Identifier:
keyid:C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:24:6f:9b:9b:d3:4f:b0:76:ec:e8:aa:10:76:cf:0d:a2:96:
6d:3e:48:fd:b6:30:45:db:e6:b8:60:f9:1e:21:c5:1c:da:e3:
fa:79:f4:c6:05:ec:7b:c4:b8:ea:ab:dd:d4:77:c9:d6:f0:7d:
48:56:18:ed:9d:fa:a8:f5:62:5b:e2:08:70:e1:cf:eb:ec:a0:
ad:29:11:8e:c4:53:f5:91:21:9f:33:9d:83:ca:f0:20:89:48:
1e:b2:cc:02:54:b3:8b:e8:09:6d:70:dc:99:68:78:1b:d5:1d:
f7:5d:ea:cb:ce:65:cc:ec:bf:1d:36:87:04:00:dc:8d:a7:c2:
79:15:f3:ba:42:85:a4:48:21:8b:90:47:35:4d:92:37:f1:de:
4f:ac:07:d1:24:fa:ed:4f:60:91:f4:e0:bb:d2:1e:83:c7:77:
75:62:09:ee:8d:cc:7c:fb:cf:1e:40:70:64:23:59:b3:d2:42:
e1:e0:2c:ef:9d:72:fd:69:04:26:bc:be:3b:e7:92:bd:da:c6:
24:82:40:80:3e:1c:a3:17:a4:46:de:0a:4f:59:67:47:b0:9a:
47:90:82:5d:4a:8a:83:29:8e:10:7b:2c:bf:25:fc:f6:7a:f3:
70:f6:cb:8d:6e:f0:de:27:40:e6:80:16:fe:c3:c0:fe:71:18:
e5:14:f5:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjcyRTIxMTAvBgNVBAUTKEM4RjU5NzEyNTJDQzA0Q0UzRUY4QjY3MkVFNzRFMjc3
QjJDQ0Q2MTUwHhcNMjYwOTIxMDY0ODI0WhcNMjYwOTI4MDY0ODI0WjAYMRYwFAYD
VQQDEw02YWIwZDMzOC00NGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsIKZQAKHpoOQsp9oKXNThwjcFdlC2KuiC3qa9xQS87lAveS1wfs0U8fVo1sG
ngFz/aQhk6BmRM5RXJg5OJ5SCTHbq1oZsfttEqA+O1dbOhUjLiM3W1i+U8KvqsYm
bP/q7hExpxjD3AHqiiWDeUj6XS/grSkOveKNNXPJbKJVGG5ZLJF0CdsurEyOzKdf
RO/i6JcBR5IGyGtV/XMWBX8qPG4visimKy5Ff4jOIMqYqkKHShEwsWKQ13s1ED5I
BS8Q2+LoP0VthLSE0YrZwGUMgkwR1A1R03UBjQNuXIlIffwiR3HFT1zftI3EEWht
Sen17on8nr33u9pAlNBtt9cMSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNafG5b
t/lc0gUSZ0dWcueL4U24MB8GA1UdIwQYMBaAFMj1lxJSzATOPvi2cu504neyzNYV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzJFMi9DNkExRjIwQThD
OEYxMUYwOTQyM0YxMTlDNEY5QUUwMi95UFdYRWxMTUJNNC0tTFp5N25UaWQ3TE0x
aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lQV1hFbExNQk00LS1MWnk3blRpZDdMTTFoVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzJFMi9DNkExRjIwQThDOEYxMUYwOTQyM0YxMTlDNEY5QUUwMi95UFdYRWxMTUJN
NC0tTFp5N25UaWQ3TE0xaFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALCRvm5vTT7B27OiqEHbPDaKWbT5I/bYwRdvmuGD5HiHFHNrj+nn0xgXse8S4
6qvd1HfJ1vB9SFYY7Z36qPViW+IIcOHP6+ygrSkRjsRT9ZEhnzOdg8rwIIlIHrLM
AlSzi+gJbXDcmWh4G9Ud913qy85lzOy/HTaHBADcjafCeRXzukKFpEghi5BHNU2S
N/HeT6wH0ST67U9gkfTgu9Ieg8d3dWIJ7o3MfPvPHkBwZCNZs9JC4eAs751y/WkE
Jry+O+eSvdrGJIJAgD4coxekRt4KT1lnR7CaR5CCXUqKgymOEHssvyX89nrzcPbL
jW7w3idA5oAW/sPA/nEY5RT1hg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:31:26 2026 by rpki-client