
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier: HmUvxdSDSMkGOKP1pk1Naa0oKWZ+5WzsgN/qct+L7yM=
Subject key identifier: CD:3A:1D:F5:6B:6F:B1:FD:5E:6C:66:85:47:F9:2E:5B:CE:CC:C5:48
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number: 01B5
Signing time: Sat 17 Oct 2026 04:34:35 +0000
Manifest this update: Sat 17 Oct 2026 04:34:34 +0000
Manifest next update: Sat 24 Oct 2026 04:34:34 +0000
Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: Oh3rDP98QQGJlHEiPk73wG024sAAG3/D1pWhW3YyTpQ=)
2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: 05nFnz6le7/gfCsII6bmMAMlQ4HFGQxS/gFaNZcGMLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 04:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Validity
Not Before: Oct 17 04:34:34 2026 GMT
Not After : Oct 24 04:34:34 2026 GMT
Subject: CN=6ad2fadb-d1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:b6:6e:3e:77:19:c4:2d:4a:37:46:af:ce:
8b:bf:67:50:23:b0:6c:29:36:8d:1a:d1:f8:64:3f:
18:04:34:2f:60:b3:bd:9f:a4:2a:94:ed:3d:d4:5b:
99:c5:88:95:85:65:e7:0c:d5:44:9c:3b:8f:9d:84:
24:47:20:b7:24:ef:3a:6a:e6:ea:95:72:22:05:c0:
e7:77:68:df:47:1f:3b:a8:60:04:64:8e:af:05:47:
15:14:f9:b3:66:6e:68:32:21:bc:75:c3:cd:37:d3:
bc:9e:7b:7a:a5:39:7f:35:a1:22:69:22:ad:4f:81:
15:7b:9a:ea:6d:1b:f0:87:96:00:19:12:8e:bc:09:
b9:df:3d:db:72:af:8b:af:0e:24:dd:f3:36:18:e9:
ef:d1:b9:7d:3a:5e:60:5c:04:a5:dc:f8:95:d1:59:
23:65:86:51:c3:21:e2:6b:c1:f0:bb:b7:7d:7f:ad:
11:d7:5b:c7:22:f6:e6:cc:53:43:e7:86:c3:7c:13:
f2:b0:97:da:4e:27:d5:91:fe:d6:57:2f:52:da:f2:
fc:68:bf:1a:0d:d0:29:e3:8a:b4:e6:ea:85:62:74:
17:aa:10:f1:22:78:16:51:4d:33:fd:85:fa:96:a0:
d6:23:5b:b0:ae:45:42:a0:2f:65:79:60:1a:dc:90:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:1D:F5:6B:6F:B1:FD:5E:6C:66:85:47:F9:2E:5B:CE:CC:C5:48
X509v3 Authority Key Identifier:
keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:4b:f9:a6:58:e9:94:43:e5:2c:51:bd:58:2b:14:de:52:4c:
32:55:97:09:85:bd:6c:93:96:ab:f7:98:5e:09:20:ff:b2:10:
b9:10:05:ce:df:e7:40:03:6f:e7:8e:2c:45:9d:4b:5e:7f:55:
3b:aa:4c:85:34:b7:a0:48:3c:67:75:f3:c0:fc:98:5c:7b:33:
de:91:62:ad:d7:7c:66:5d:46:3c:e7:9a:a6:17:2f:6e:7e:98:
48:2c:39:6a:95:58:87:ca:f3:bb:2c:ea:d2:d8:53:7d:b4:01:
6f:2d:15:c0:a0:03:c9:68:96:82:ba:bd:fe:6c:62:d9:b3:d0:
18:62:1e:eb:b0:69:55:f6:2c:c0:40:32:22:48:a7:c3:fc:fb:
d6:6d:b5:19:58:89:8b:1d:6e:8d:cc:51:2c:fd:b0:65:d3:45:
82:26:5a:66:e1:d6:fa:7a:5c:fd:52:2a:c4:ae:e2:ae:0e:f8:
a5:77:f3:2f:fc:e8:e2:8c:e9:78:d1:ca:52:6f:88:37:61:e4:
73:cd:cc:be:de:4b:5a:89:7b:b1:7a:8d:71:49:8e:6c:fd:44:
ea:9d:af:26:67:38:c0:a2:0d:05:3e:b9:e1:09:ef:28:d8:a0:
d7:83:3d:c1:b2:01:32:7a:98:f5:a4:43:cf:19:1a:55:76:e4:
17:5a:9d:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0
REQ2NzdGRUEwHhcNMjYxMDE3MDQzNDM0WhcNMjYxMDI0MDQzNDM0WjAYMRYwFAYD
VQQDEw02YWQyZmFkYi1kMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2i+2bj53GcQtSjdGr86Lv2dQI7BsKTaNGtH4ZD8YBDQvYLO9n6QqlO091FuZ
xYiVhWXnDNVEnDuPnYQkRyC3JO86aubqlXIiBcDnd2jfRx87qGAEZI6vBUcVFPmz
Zm5oMiG8dcPNN9O8nnt6pTl/NaEiaSKtT4EVe5rqbRvwh5YAGRKOvAm53z3bcq+L
rw4k3fM2GOnv0bl9Ol5gXASl3PiV0VkjZYZRwyHia8Hwu7d9f60R11vHIvbmzFND
54bDfBPysJfaTifVkf7WVy9S2vL8aL8aDdAp44q05uqFYnQXqhDxIngWUU0z/YX6
lqDWI1uwrkVCoC9leWAa3JBQ+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM06HfVr
b7H9XmxmhUf5LlvOzMVIMB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE
RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m
LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG
YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQUv5pljplEPlLFG9WCsU3lJMMlWXCYW9bJOWq/eYXgkg/7IQuRAFzt/nQANv
544sRZ1LXn9VO6pMhTS3oEg8Z3XzwPyYXHsz3pFirdd8Zl1GPOeaphcvbn6YSCw5
apVYh8rzuyzq0thTfbQBby0VwKADyWiWgrq9/mxi2bPQGGIe67BpVfYswEAyIkin
w/z71m21GViJix1ujcxRLP2wZdNFgiZaZuHW+npc/VIqxK7irg74pXfzL/zo4ozp
eNHKUm+IN2Hkc83Mvt5LWol7sXqNcUmObP1E6p2vJmc4wKINBT654QnvKNig14M9
wbIBMnqY9aRDzxkaVXbkF1qdBQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:00:11 2026 by rpki-client