
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json)
Hash identifier: bWNcykPUWguyC5kso3OfJkdiyrwSrbc5QLftezeCN4k=
Subject key identifier: F5:77:A6:36:43:C5:EB:9B:AD:42:4D:1C:CF:70:65:86:61:0E:D7:7C
Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Certificate serial: 096C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
Manifest number: 0966
Signing time: Sat 28 Feb 2026 20:22:39 +0000
Manifest this update: Sat 28 Feb 2026 20:22:38 +0000
Manifest next update: Sat 07 Mar 2026 20:22:38 +0000
Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: ftS8mpT8tdW/EybwndZemIFyNakMietxN/t7XmB6kS0=)
2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2412 (0x96c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Validity
Not Before: Feb 28 20:22:38 2026 GMT
Not After : Mar 7 20:22:38 2026 GMT
Subject: CN=69a34e8f-11ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:19:37:f9:f5:5f:b6:14:28:b4:02:a3:1e:
20:73:41:8c:4c:20:20:7e:23:10:22:a1:fc:3e:c1:
04:65:e9:48:86:d8:e3:a2:60:de:64:78:d2:22:99:
21:ed:ae:96:3c:50:43:25:c6:14:a9:7d:98:81:4e:
3a:64:f6:c8:6d:28:74:43:62:d9:94:49:5b:4b:ed:
7d:3a:06:a5:6c:a5:f5:23:7b:9d:e2:f0:6c:95:76:
fe:a8:c7:0e:1c:d1:88:8f:e4:69:74:1d:cb:51:20:
f2:12:c2:e5:c7:4b:c3:02:18:1a:3e:19:17:55:48:
6f:8a:10:1d:1f:5d:12:dc:45:b1:23:6d:53:dd:b8:
9e:ad:8f:5c:b1:23:e8:58:39:54:7c:26:25:ce:cc:
db:59:56:1e:a0:70:47:36:ba:27:f0:2b:7a:ee:ca:
7d:e4:04:90:26:84:4d:05:48:8b:c0:9b:b8:ff:41:
d2:4d:1c:38:ff:0b:86:2f:be:5b:5e:4c:68:04:1d:
9d:70:6f:e6:44:41:ff:b6:bd:9c:3b:06:b1:88:67:
64:ce:06:d4:5c:c1:29:45:13:a9:4d:04:43:6e:31:
6c:b4:50:98:fe:2a:90:ec:3f:6f:2c:72:19:ef:10:
b0:96:8c:bd:16:dd:ee:05:2d:7a:d8:4a:04:cc:5b:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:A6:36:43:C5:EB:9B:AD:42:4D:1C:CF:70:65:86:61:0E:D7:7C
X509v3 Authority Key Identifier:
keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:93:16:c3:bb:80:58:bb:49:bd:dd:26:03:fd:37:8d:7a:8f:
09:7b:a1:bb:6d:cd:b3:6c:bb:d3:6a:57:ba:74:d3:3e:e8:d4:
6c:b6:92:27:5c:4b:00:44:d3:56:e1:bf:6c:c3:1e:86:5f:1b:
99:95:9e:e9:85:0c:50:4f:cc:f1:e8:77:fd:55:0b:78:a7:e4:
f3:20:31:b6:83:15:a7:1b:a2:da:05:c4:cd:d2:6c:52:84:9b:
40:af:8c:60:d8:e9:68:ba:a2:53:fa:00:f3:5d:f2:8e:70:02:
eb:4d:cf:ae:c7:ab:7e:56:4e:ad:10:a1:f2:e1:f1:0f:ff:bc:
38:dc:e4:4f:e7:ef:1c:7f:37:33:56:3d:09:7e:5f:a9:8c:c8:
05:b1:f2:74:5a:7d:90:5c:3b:fc:b2:e3:20:ab:5e:81:16:57:
cf:5e:78:16:1f:bb:5b:43:77:b5:99:85:82:88:6f:40:15:5e:
85:ac:50:07:8d:40:ab:5f:d1:f0:08:13:b2:58:76:9f:34:ef:
ef:91:fe:e2:52:e6:4e:96:88:21:be:50:0c:20:14:cf:e1:6b:
ba:68:b1:38:46:c2:0a:42:e7:ff:91:1c:11:ef:0c:8c:d3:16:
74:5d:6e:bf:a3:11:9f:82:8c:53:a4:57:46:5d:dc:d7:4f:e2:
40:f7:31:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF
NTRBQzA1RUYwHhcNMjYwMjI4MjAyMjM4WhcNMjYwMzA3MjAyMjM4WjAYMRYwFAYD
VQQDDA02OWEzNGU4Zi0xMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmQZN/n1X7YUKLQCox4gc0GMTCAgfiMQIqH8PsEEZelIhtjjomDeZHjSIpkh
7a6WPFBDJcYUqX2YgU46ZPbIbSh0Q2LZlElbS+19OgalbKX1I3ud4vBslXb+qMcO
HNGIj+RpdB3LUSDyEsLlx0vDAhgaPhkXVUhvihAdH10S3EWxI21T3bierY9csSPo
WDlUfCYlzszbWVYeoHBHNron8Ct67sp95ASQJoRNBUiLwJu4/0HSTRw4/wuGL75b
XkxoBB2dcG/mREH/tr2cOwaxiGdkzgbUXMEpRROpTQRDbjFstFCY/iqQ7D9vLHIZ
7xCwloy9Ft3uBS162EoEzFs8VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPV3pjZD
xeubrUJNHM9wZYZhDtd8MB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG
NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC
ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju
WmxPZ3ByTktCdWpsU3NCZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv5MWw7uAWLtJvd0mA/03jXqPCXuhu23Ns2y702pXunTTPujUbLaSJ1xLAETT
VuG/bMMehl8bmZWe6YUMUE/M8eh3/VULeKfk8yAxtoMVpxui2gXEzdJsUoSbQK+M
YNjpaLqiU/oA813yjnAC603PrserflZOrRCh8uHxD/+8ONzkT+fvHH83M1Y9CX5f
qYzIBbHydFp9kFw7/LLjIKtegRZXz154Fh+7W0N3tZmFgohvQBVehaxQB41Aq1/R
8AgTslh2nzTv75H+4lLmTpaIIb5QDCAUz+FrumixOEbCCkLn/5EcEe8MjNMWdF1u
v6MRn4KMU6RXRl3c10/iQPcx+w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:42 2026 by rpki-client