
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft
File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json)
Hash identifier: h69lzWGwLNvdEqHuF3t8E5QL3e9rRnkOzd2kLzVt7HU=
Subject key identifier: 6C:39:CF:80:9C:30:1A:00:7E:A7:2D:4E:3F:7A:0F:82:E9:59:58:A7
Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4
Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4
Certificate serial: 1031
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft
Manifest number: 1029
Signing time: Mon 02 Mar 2026 02:54:10 +0000
Manifest this update: Mon 02 Mar 2026 02:54:08 +0000
Manifest next update: Mon 09 Mar 2026 02:54:08 +0000
Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: qsKWYyOfXe0yNzF8hbCe1qHxdaosJ5LB1fVCDo/79Z8=)
2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: zU0MbtIC/sni815VV780GyqRI85ejF71hmoOHkbu31Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl
rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4145 (0x1031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4
Validity
Not Before: Mar 2 02:54:08 2026 GMT
Not After : Mar 9 02:54:08 2026 GMT
Subject: CN=69a4fbd2-807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:12:15:25:f4:6b:ce:6e:bb:cb:60:48:5e:
a7:27:ed:91:55:99:c6:a8:f0:66:db:a3:22:85:8a:
74:bc:42:66:91:e5:b4:bb:55:39:1a:99:1b:69:1b:
f7:bb:57:83:16:23:94:c1:75:03:75:f2:9d:d7:3b:
64:e1:5a:b3:2d:a4:3a:38:fc:9a:53:c8:08:30:8b:
9f:90:44:62:61:ad:b9:ad:2a:2b:ab:65:4e:01:fd:
41:d0:01:ec:ee:82:62:22:44:1c:1d:57:79:7d:f8:
fc:bd:1c:20:7f:0a:75:dc:70:f8:26:e5:e0:6f:4f:
a1:e9:bb:c1:25:2d:19:f3:6d:63:ab:d2:ed:6c:a8:
14:4e:f5:44:15:74:c2:54:d8:ae:85:09:07:4b:c5:
a7:36:b7:76:b4:95:60:58:6a:08:d4:55:38:65:f9:
c2:3e:80:60:a2:2d:ef:97:da:2e:d7:06:7d:48:64:
7c:6f:67:af:fd:a0:43:48:bf:86:ee:2e:45:7c:21:
55:1d:be:bc:74:0e:98:ac:39:27:f0:30:b0:e3:73:
ff:93:af:aa:bb:f5:94:67:76:fc:ed:ae:98:48:d9:
fb:fd:5c:f0:de:27:36:b9:da:d3:ea:52:5b:68:6d:
46:ea:24:04:14:a9:10:63:24:cf:19:e6:31:89:c5:
e7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:39:CF:80:9C:30:1A:00:7E:A7:2D:4E:3F:7A:0F:82:E9:59:58:A7
X509v3 Authority Key Identifier:
keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:6a:6c:a4:46:98:59:59:2e:a2:f6:0d:9d:f1:39:a5:ce:49:
2f:17:0f:c5:00:a3:eb:20:eb:98:1b:12:86:80:f6:34:40:ed:
78:26:a7:20:00:72:f8:71:b1:77:92:e5:19:6f:00:4a:e5:2e:
73:b3:96:65:9b:fa:7c:21:a0:c3:e4:18:de:30:6a:37:e9:dc:
6e:2f:aa:32:bd:6c:6b:12:7e:0f:ad:5c:80:24:b5:34:8b:37:
51:3f:5b:13:1c:43:49:4c:bf:7b:0c:2d:1c:55:75:ac:27:a4:
b0:4a:80:0b:2a:22:89:c6:f6:42:b0:b2:72:71:20:6a:7d:2d:
4d:22:32:ac:4c:4b:f5:7c:6b:fb:cf:cf:0c:e2:19:a0:a0:8f:
5d:5e:6e:06:d9:12:ec:cb:24:b4:f9:b3:20:76:1b:70:22:93:
03:a4:61:d3:16:6e:06:66:a8:32:34:d2:97:43:c0:ef:1f:42:
6d:fc:37:42:c9:aa:56:d8:a5:c3:f5:87:49:52:8f:73:2a:80:
5b:29:8b:70:91:9b:c9:3a:ac:bd:48:9c:43:33:2f:9c:65:32:
14:74:2c:a8:21:69:f6:aa:24:18:0d:8d:e9:be:6c:3a:c6:34:
ce:c2:5b:ce:80:f8:51:19:56:21:62:bc:84:d5:4c:e1:9c:5e:
9f:17:78:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3
NjA1Qzg4QTQwHhcNMjYwMzAyMDI1NDA4WhcNMjYwMzA5MDI1NDA4WjAYMRYwFAYD
VQQDEw02OWE0ZmJkMi04MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoOASFSX0a85uu8tgSF6nJ+2RVZnGqPBm26MihYp0vEJmkeW0u1U5GpkbaRv3
u1eDFiOUwXUDdfKd1ztk4VqzLaQ6OPyaU8gIMIufkERiYa25rSorq2VOAf1B0AHs
7oJiIkQcHVd5ffj8vRwgfwp13HD4JuXgb0+h6bvBJS0Z821jq9LtbKgUTvVEFXTC
VNiuhQkHS8WnNrd2tJVgWGoI1FU4ZfnCPoBgoi3vl9ou1wZ9SGR8b2ev/aBDSL+G
7i5FfCFVHb68dA6YrDkn8DCw43P/k6+qu/WUZ3b87a6YSNn7/Vzw3ic2udrT6lJb
aG1G6iQEFKkQYyTPGeYxicXntwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGw5z4Cc
MBoAfqctTj96D4LpWVinMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD
MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz
a090Y3N5UUF4cTUyQmNpS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlGpspEaYWVkuovYNnfE5pc5JLxcPxQCj6yDrmBsShoD2NEDteCanIABy+HGx
d5LlGW8ASuUuc7OWZZv6fCGgw+QY3jBqN+ncbi+qMr1saxJ+D61cgCS1NIs3UT9b
ExxDSUy/ewwtHFV1rCeksEqACyoiicb2QrCycnEgan0tTSIyrExL9Xxr+8/PDOIZ
oKCPXV5uBtkS7MsktPmzIHYbcCKTA6Rh0xZuBmaoMjTSl0PA7x9Cbfw3QsmqVtil
w/WHSVKPcyqAWymLcJGbyTqsvUicQzMvnGUyFHQsqCFp9qokGA2N6b5sOsY0zsJb
zoD4URlWIWK8hNVM4Zxenxd4uA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:41 2026 by rpki-client