
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json)
Hash identifier: jIleirB+R1jHVwk9NDTgjExDk7ror+g3VcpEAuPZqms=
Subject key identifier: 29:1F:F6:E4:C8:58:DE:73:4D:C8:EB:3E:2F:5F:02:39:8C:EA:E9:73
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
Manifest number: 013D
Signing time: Sun 05 Apr 2026 04:48:49 +0000
Manifest this update: Sun 05 Apr 2026 04:48:49 +0000
Manifest next update: Sun 12 Apr 2026 04:48:49 +0000
Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: 8CE3TNIJsHUpOGi6tAtqI8LKJu1h6BD90OpA0c9i6+w=)
2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: HZDNvMXF2Ddy6vd2h5W5yFnu+C+QnMlW7ipSlMoj5As=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Validity
Not Before: Apr 5 04:48:49 2026 GMT
Not After : Apr 12 04:48:49 2026 GMT
Subject: CN=69d1e9b1-88b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:ff:88:3a:32:70:3b:de:0a:e1:c6:3b:82:
36:e2:7f:25:99:51:ff:f6:f3:68:8c:86:a0:2c:30:
e1:2c:dc:5c:a3:19:fd:6d:dc:8a:bf:38:44:ab:1d:
da:8e:55:9e:72:fa:77:9c:dd:16:fa:e5:1c:71:54:
76:3e:50:28:61:b0:4f:8c:dc:b2:73:f7:e7:e4:2c:
f6:4c:21:c6:00:1c:e1:82:76:df:81:67:91:b7:4c:
a9:5d:49:35:95:1a:a9:10:dd:32:ca:af:0b:2c:0d:
e2:9b:b6:c0:b4:84:ec:60:b8:db:04:c2:1d:ec:c4:
c2:bc:63:86:6c:6a:d1:f4:a7:91:13:80:f2:89:8a:
37:9e:2f:b1:ea:f0:6d:f0:00:72:3c:d2:dc:f9:e4:
2f:cc:fa:70:d1:ba:c4:75:fd:c3:3c:fc:70:77:e5:
59:73:f2:4c:08:76:98:6b:cf:b0:4b:04:3f:63:68:
fc:6d:7d:ee:32:4d:6a:35:8d:3f:6f:95:ed:04:0e:
cd:9d:00:48:e8:29:f5:eb:e0:cc:a6:06:55:a8:74:
87:f8:28:83:ee:ae:e2:2b:17:ad:34:4b:9a:37:7c:
2c:e3:55:22:67:b1:00:ef:68:c9:24:44:3a:e7:31:
50:61:0e:16:e9:93:08:bf:ee:c9:60:a4:26:34:c4:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1F:F6:E4:C8:58:DE:73:4D:C8:EB:3E:2F:5F:02:39:8C:EA:E9:73
X509v3 Authority Key Identifier:
keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:4a:c3:ca:14:1d:23:99:17:33:e6:59:04:06:c0:9e:55:67:
f1:bc:69:c5:1c:23:01:31:eb:64:db:6b:6d:4b:bd:b0:ec:fe:
c8:7a:18:b5:fd:f7:0b:38:4d:81:f7:f5:08:9d:3b:77:50:74:
62:7f:6d:4c:66:4e:e8:33:2e:9a:88:90:05:a6:b7:b9:49:0a:
e1:66:02:b1:f0:bd:30:b2:1a:78:c0:3c:1a:ec:37:bc:1b:c0:
00:2c:cf:05:1f:e2:4f:a1:db:c1:8f:30:5b:7c:4e:ee:f3:b7:
a2:82:18:46:d4:8e:4a:77:6d:e2:d6:5a:78:bd:15:15:2f:73:
fa:74:69:78:ad:e5:2e:d1:5f:50:28:d1:02:48:51:b5:15:06:
7f:4e:30:29:70:04:e7:46:3d:2f:79:40:02:97:1e:f6:74:90:
06:38:82:67:c1:2c:d5:d0:96:b0:ed:dd:18:d8:3b:d3:13:f3:
ec:88:94:92:b1:1f:d1:95:17:2d:ac:95:3d:61:cb:ca:13:e2:
14:1a:3f:6f:81:95:f8:44:1d:59:72:00:d1:2c:d5:bc:9e:e2:
44:f6:62:a9:0a:e8:0f:f0:8d:ae:12:fb:b1:20:69:5d:7f:6b:
21:e0:65:4c:4e:89:f4:09:03:e7:ec:6e:f8:76:48:86:d6:0f:
72:47:99:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY3RjAxMTAvBgNVBAUTKDYxMUNCNTU2Qzg3QkMwNDlBNUE0M0VCMUYyOTcxMDdF
RkYxQjc5NDAwHhcNMjYwNDA1MDQ0ODQ5WhcNMjYwNDEyMDQ0ODQ5WjAYMRYwFAYD
VQQDEw02OWQxZTliMS04OGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoo//iDoycDveCuHGO4I24n8lmVH/9vNojIagLDDhLNxcoxn9bdyKvzhEqx3a
jlWecvp3nN0W+uUccVR2PlAoYbBPjNyyc/fn5Cz2TCHGABzhgnbfgWeRt0ypXUk1
lRqpEN0yyq8LLA3im7bAtITsYLjbBMId7MTCvGOGbGrR9KeRE4DyiYo3ni+x6vBt
8AByPNLc+eQvzPpw0brEdf3DPPxwd+VZc/JMCHaYa8+wSwQ/Y2j8bX3uMk1qNY0/
b5XtBA7NnQBI6Cn16+DMpgZVqHSH+CiD7q7iKxetNEuaN3ws41UiZ7EA72jJJEQ6
5zFQYQ4W6ZMIv+7JYKQmNMRT/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkf9uTI
WN5zTcjrPi9fAjmM6ulzMB8GA1UdIwQYMBaAFGEctVbIe8BJpaQ+sfKXEH7/G3lA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjdGMC9DNzRFQjY5QTU5
RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dFbWxwRDZ4OHBjUWZ2OGJl
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSeTFWc2g3d0VtbHBENng4cGNRZnY4YmVVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjdGMC9DNzRFQjY5QTU5RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dF
bWxwRDZ4OHBjUWZ2OGJlVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMUrDyhQdI5kXM+ZZBAbAnlVn8bxpxRwjATHrZNtrbUu9sOz+yHoYtf33CzhN
gff1CJ07d1B0Yn9tTGZO6DMumoiQBaa3uUkK4WYCsfC9MLIaeMA8Guw3vBvAACzP
BR/iT6HbwY8wW3xO7vO3ooIYRtSOSndt4tZaeL0VFS9z+nRpeK3lLtFfUCjRAkhR
tRUGf04wKXAE50Y9L3lAApce9nSQBjiCZ8Es1dCWsO3dGNg70xPz7IiUkrEf0ZUX
LayVPWHLyhPiFBo/b4GV+EQdWXIA0SzVvJ7iRPZiqQroD/CNrhL7sSBpXX9rIeBl
TE6J9AkD5+xu+HZIhtYPckeZuw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:51 2026 by rpki-client