
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
File: YBqj_Udwv8aa8kBvLoDtCOfca0M.mft (raw, json)
Hash identifier: kHu0D2ouO8gLpgVJ6DVkHHzr+oUH+MghDVWZjzfW0PU=
Subject key identifier: 71:22:8C:85:2A:BF:65:90:88:24:02:99:E7:E7:34:95:EB:A2:4D:A4
Authority key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43
Certificate issuer: /CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
Manifest number: 014F
Signing time: Sun 05 Apr 2026 04:34:07 +0000
Manifest this update: Sun 05 Apr 2026 04:34:07 +0000
Manifest next update: Sun 12 Apr 2026 04:34:07 +0000
Files and hashes: 1: YBqj_Udwv8aa8kBvLoDtCOfca0M.crl (hash: 6nWanhJI/XvRUhqzgrL/98F6ZuGLyth7A4wYelz/36Q=)
2: CC8E710C347011EF9F04CE66C4F9AE02.roa (hash: X1FdTZreaYzPMLMjzCOoJBeITWWNKAQhsJsRuSe7wy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl
rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954E2, serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43
Validity
Not Before: Apr 5 04:34:07 2026 GMT
Not After : Apr 12 04:34:07 2026 GMT
Subject: CN=69d1e63f-6eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:02:2d:d7:a0:05:60:84:60:aa:0f:71:be:
31:a9:fd:83:24:eb:de:29:57:ab:02:28:ac:bd:47:
b3:aa:7e:68:ce:a5:01:20:b2:8c:9c:b0:a2:aa:c9:
42:cf:d7:0d:1a:5f:e5:29:cf:f7:54:a5:58:02:20:
a2:c4:86:ee:ca:2b:27:60:ef:72:f0:f3:6e:89:f5:
77:32:ad:f8:93:1c:80:d2:8c:c7:dc:59:f5:00:76:
09:3c:fd:be:ff:0f:cf:12:29:ed:6c:32:c9:b7:f1:
7c:2f:f6:30:98:40:96:13:36:62:21:73:ac:f2:b0:
7c:e5:32:73:74:92:83:59:7d:90:09:95:42:a7:88:
86:51:3b:21:42:32:3d:dc:87:cf:72:cf:be:89:29:
13:37:0a:d9:b0:b5:39:1b:6a:7c:26:22:79:31:c4:
c4:94:03:7a:c3:8e:07:0b:57:eb:21:51:65:ee:2e:
19:94:60:63:63:0a:7c:1a:bb:78:3e:ae:dd:b1:b7:
71:0c:ae:75:bf:31:8c:8e:07:ea:8a:fe:cb:72:e4:
84:a0:0e:f7:2d:7e:1d:cf:b5:7c:a8:d1:e8:06:f3:
a2:a6:8c:71:74:a7:88:7d:ec:77:ae:ed:55:51:7d:
b6:63:e8:05:d5:9e:47:21:46:2c:9e:7b:bd:7c:30:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:8C:85:2A:BF:65:90:88:24:02:99:E7:E7:34:95:EB:A2:4D:A4
X509v3 Authority Key Identifier:
keyid:60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:74:b4:ac:22:3b:af:46:28:8e:69:ed:87:0a:01:b1:26:1d:
fa:8d:9a:b9:67:08:69:6e:71:b2:2b:63:1d:7e:1d:23:eb:1f:
4e:b9:e9:3a:ce:b6:42:33:f9:41:09:29:71:63:5b:70:8f:6b:
5f:2a:49:35:8d:30:98:5d:12:3c:39:63:ca:34:6f:89:64:a0:
19:48:cf:7e:35:fe:86:57:42:1f:9a:2a:3d:16:b0:5c:14:96:
08:6b:17:ea:cf:5d:50:a3:a8:d4:b8:af:72:d1:d4:83:40:99:
eb:9a:35:ef:97:4a:f8:23:01:b4:7a:20:f9:d4:82:85:f6:3a:
df:10:9f:bd:74:21:61:45:2f:9d:b0:66:a5:67:8c:20:8c:8e:
42:ae:00:b1:7d:d4:b7:db:b6:85:73:e2:30:73:7c:87:f2:3c:
7a:02:9c:43:a3:d1:ac:6b:85:20:58:7b:f9:dc:72:da:e0:4e:
6b:c6:f2:b6:af:6f:e3:48:74:01:b8:e7:30:bc:62:c6:ab:c4:
6b:e9:06:b8:fc:8d:49:94:64:75:44:a6:55:6a:62:eb:f5:c6:
f7:e0:04:bd:d8:55:bc:10:24:37:5d:fb:93:6b:fc:ed:c6:a2:
a4:56:de:25:0d:72:74:60:48:fc:be:de:c6:84:25:c9:8d:02:
4b:f1:a2:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU0RTIxMTAvBgNVBAUTKDYwMUFBM0ZENDc3MEJGQzY5QUYyNDA2RjJFODBFRDA4
RTdEQzZCNDMwHhcNMjYwNDA1MDQzNDA3WhcNMjYwNDEyMDQzNDA3WjAYMRYwFAYD
VQQDEw02OWQxZTYzZi02ZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnooCLdegBWCEYKoPcb4xqf2DJOveKVerAiisvUezqn5ozqUBILKMnLCiqslC
z9cNGl/lKc/3VKVYAiCixIbuyisnYO9y8PNuifV3Mq34kxyA0ozH3Fn1AHYJPP2+
/w/PEintbDLJt/F8L/YwmECWEzZiIXOs8rB85TJzdJKDWX2QCZVCp4iGUTshQjI9
3IfPcs++iSkTNwrZsLU5G2p8JiJ5McTElAN6w44HC1frIVFl7i4ZlGBjYwp8Grt4
Pq7dsbdxDK51vzGMjgfqiv7LcuSEoA73LX4dz7V8qNHoBvOipoxxdKeIfex3ru1V
UX22Y+gF1Z5HIUYsnnu9fDA+ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEijIUq
v2WQiCQCmefnNJXrok2kMB8GA1UdIwQYMBaAFGAao/1HcL/GmvJAby6A7Qjn3GtD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRFMi83M0VCRTZBMjM0
NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4YWE4a0J2TG9EdENPZmNh
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lCcWpfVWR3djhhYThrQnZMb0R0Q09mY2EwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTRFMi83M0VCRTZBMjM0NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4
YWE4a0J2TG9EdENPZmNhME0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp3S0rCI7r0YojmnthwoBsSYd+o2auWcIaW5xsitjHX4dI+sfTrnpOs62QjP5
QQkpcWNbcI9rXypJNY0wmF0SPDljyjRviWSgGUjPfjX+hldCH5oqPRawXBSWCGsX
6s9dUKOo1LivctHUg0CZ65o175dK+CMBtHog+dSChfY63xCfvXQhYUUvnbBmpWeM
IIyOQq4AsX3Ut9u2hXPiMHN8h/I8egKcQ6PRrGuFIFh7+dxy2uBOa8bytq9v40h0
AbjnMLxixqvEa+kGuPyNSZRkdUSmVWpi6/XG9+AEvdhVvBAkN137k2v87caipFbe
JQ1ydGBI/L7exoQlyY0CS/GikA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:05 2026 by rpki-client