
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
File: _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json)
Hash identifier: qSR6iHbItYyhwwLCJkKQQ7qi+wHRDaZQQkHVkl1Io4k=
Subject key identifier: 02:93:27:41:88:4C:BB:6B:2E:E2:E3:03:85:CB:96:00:84:A0:6E:84
Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
Manifest number: 013B
Signing time: Mon 21 Sep 2026 05:34:19 +0000
Manifest this update: Mon 21 Sep 2026 05:34:18 +0000
Manifest next update: Mon 28 Sep 2026 05:34:18 +0000
Files and hashes: 1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: WdoV0OsyznULJOiDkTg2yKoUxOXaRly8L8X0O81ATRk=)
2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: aRva8pGWfYj5DsMq3R40rv0MUtezzZywAbZ+BrpHCAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Validity
Not Before: Sep 21 05:34:18 2026 GMT
Not After : Sep 28 05:34:18 2026 GMT
Subject: CN=6ab0c1da-61ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:8b:3f:aa:20:93:eb:1d:74:75:3d:42:2e:
c7:f9:ac:5a:db:11:ce:3d:7e:a1:c2:eb:4c:41:83:
38:24:2c:3c:9e:de:e8:c7:30:35:fc:37:6a:cf:a9:
1d:67:64:36:00:98:aa:83:7d:3c:66:17:87:5f:03:
bf:0f:39:58:90:0b:fa:c3:7c:da:a5:22:78:63:0c:
d4:95:87:8f:9a:dc:86:18:8a:d9:f3:be:21:5a:0b:
ed:64:ef:7a:96:45:30:d1:65:30:a9:8b:c6:26:01:
9d:b6:ad:c4:27:f9:b1:6f:f8:7f:af:aa:ec:22:60:
c2:43:3d:dc:8e:79:92:76:40:7b:47:43:e0:2f:e5:
65:55:c9:d0:8b:1a:4d:40:fd:ca:9d:53:e7:ab:7f:
71:e8:f5:c9:6f:c3:44:db:d8:c1:5c:c8:fe:53:63:
78:f2:10:b2:55:4f:65:07:2b:8d:82:70:dd:26:8e:
65:e2:29:a9:fb:bb:0b:fe:49:1f:ef:d1:71:30:76:
b3:82:d8:11:2a:84:f3:9c:34:a3:61:e1:a1:18:b6:
47:20:64:dd:fd:07:37:87:80:f9:9b:3a:c4:53:c8:
7f:18:31:29:2c:80:40:54:78:b2:e7:f4:8a:09:2b:
ec:44:f3:e2:b1:87:09:d3:f0:1c:d5:34:15:62:09:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:93:27:41:88:4C:BB:6B:2E:E2:E3:03:85:CB:96:00:84:A0:6E:84
X509v3 Authority Key Identifier:
keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:9d:25:72:16:97:23:21:26:f7:58:84:73:93:f2:5a:ec:27:
1c:7d:3a:fd:63:58:2a:9d:01:a6:8f:f0:20:54:71:dd:2a:d0:
2c:2f:67:ac:e7:6e:25:e4:dd:4c:e3:73:5a:73:e9:3a:fa:4a:
1a:dd:73:04:2e:34:39:56:b8:7a:1a:da:89:18:67:a5:5f:90:
82:c4:12:46:61:16:bb:d8:9d:b3:85:7a:7e:20:04:e1:50:0f:
dc:65:fa:f6:43:58:0a:48:98:95:1f:3a:b0:22:e6:18:ad:16:
ca:86:7d:f6:bb:29:75:6d:4d:0a:eb:c9:23:77:21:7a:63:d2:
72:1e:66:22:36:0f:da:5d:6b:c2:e9:84:40:cb:ee:45:36:dd:
aa:e7:1d:b8:90:a0:10:ac:8c:93:96:df:4f:81:da:12:f6:77:
d0:f0:de:d4:06:ed:da:6d:7d:ea:5e:05:67:8d:4b:46:6d:a9:
90:55:f4:61:10:d4:9f:c2:f4:13:a5:0c:2d:80:f6:80:f6:f5:
46:b1:5f:e4:47:7a:04:bd:57:8c:32:42:e9:3c:1c:a1:2a:a9:
77:b2:b4:64:e4:c8:59:ce:15:23:d6:cd:4a:04:50:a2:15:32:
9d:0f:f2:25:68:99:f4:cd:d5:74:a4:31:5f:de:e2:c2:dc:91:
25:ac:18:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM0RkIxMTAvBgNVBAUTKEZGMjBCQzM3OUQ4OUEwREIzQkU2RkNGMjkwRkEzREQ1
MkVCN0ZBMjAwHhcNMjYwOTIxMDUzNDE4WhcNMjYwOTI4MDUzNDE4WjAYMRYwFAYD
VQQDEw02YWIwYzFkYS02MWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMSLP6ogk+sddHU9Qi7H+axa2xHOPX6hwutMQYM4JCw8nt7oxzA1/Ddqz6kd
Z2Q2AJiqg308ZheHXwO/DzlYkAv6w3zapSJ4YwzUlYePmtyGGIrZ874hWgvtZO96
lkUw0WUwqYvGJgGdtq3EJ/mxb/h/r6rsImDCQz3cjnmSdkB7R0PgL+VlVcnQixpN
QP3KnVPnq39x6PXJb8NE29jBXMj+U2N48hCyVU9lByuNgnDdJo5l4imp+7sL/kkf
79FxMHazgtgRKoTznDSjYeGhGLZHIGTd/Qc3h4D5mzrEU8h/GDEpLIBAVHiy5/SK
CSvsRPPisYcJ0/Ac1TQVYglO0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKTJ0GI
TLtrLuLjA4XLlgCEoG6EMB8GA1UdIwQYMBaAFP8gvDediaDbO+b88pD6PdUut/og
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzRGQi8wOThGRTJFOERD
REMxMUVGOEUyOTE4NDRDNEY5QUUwMi9feUM4TjUySm9Oczc1dnp5a1BvOTFTNjMt
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL195QzhONTJKb05zNzV2enlrUG85MVM2My1pQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzRGQi8wOThGRTJFOERDREMxMUVGOEUyOTE4NDRDNEY5QUUwMi9feUM4TjUySm9O
czc1dnp5a1BvOTFTNjMtaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd50lchaXIyEm91iEc5PyWuwnHH06/WNYKp0Bpo/wIFRx3SrQLC9nrOduJeTd
TONzWnPpOvpKGt1zBC40OVa4ehraiRhnpV+QgsQSRmEWu9ids4V6fiAE4VAP3GX6
9kNYCkiYlR86sCLmGK0WyoZ99rspdW1NCuvJI3chemPSch5mIjYP2l1rwumEQMvu
RTbdqucduJCgEKyMk5bfT4HaEvZ30PDe1Abt2m196l4FZ41LRm2pkFX0YRDUn8L0
E6UMLYD2gPb1RrFf5Ed6BL1XjDJC6TwcoSqpd7K0ZOTIWc4VI9bNSgRQohUynQ/y
JWiZ9M3VdKQxX97iwtyRJawY/Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:20:28 2026 by rpki-client