
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json)
Hash identifier: qxPNWkaNCsxEcvn5JfShnl97I9qKcVcfvA7gpkGH+Oc=
Subject key identifier: 94:C9:61:86:B2:12:BC:50:31:69:B1:AE:A4:D8:8C:C5:53:E1:85:76
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial: 070E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
Manifest number: 0704
Signing time: Wed 20 May 2026 22:04:29 +0000
Manifest this update: Wed 20 May 2026 22:04:28 +0000
Manifest next update: Wed 27 May 2026 22:04:28 +0000
Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: Hr8BDTwSsTeGWN8r0iTITgJCaeMpC6W1uf0w3nq0/K8=)
2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: GddQF0kXZAYcATo7qq+gH7xwi2gME5La/lz+podnzrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Validity
Not Before: May 20 22:04:28 2026 GMT
Not After : May 27 22:04:28 2026 GMT
Subject: CN=6a0e2fed-2a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:32:ba:41:a5:1b:9f:3e:83:3e:65:84:c3:
1f:8b:b2:7e:d8:f6:e8:17:5b:c1:6a:5a:60:ac:36:
6e:9c:81:7e:39:52:1a:1e:c8:c0:71:14:de:02:75:
11:74:6c:36:2a:65:bf:3a:fc:6a:19:e9:a7:22:81:
b2:88:3d:5f:19:95:22:0f:92:0e:28:3d:10:9f:33:
bb:ad:e1:f9:a9:e1:6a:fb:a2:5d:48:43:57:13:24:
57:b6:15:45:49:08:ea:c6:3f:7e:d6:d5:c0:8b:6d:
6f:75:98:b8:6a:05:c1:79:61:53:e8:3b:36:5b:7a:
d2:05:30:b6:bb:0e:2d:27:46:55:2e:c0:be:9d:ed:
fd:fc:c2:b8:38:45:fd:52:e7:c7:fd:07:98:44:8f:
5b:cf:8b:78:25:49:73:d2:48:47:4a:fe:6b:11:a1:
40:e0:73:9e:15:ca:d4:f8:cb:e7:f1:0b:d2:9b:22:
ff:77:b2:dc:93:59:91:c2:c1:f1:f8:d3:d9:50:2e:
64:fe:41:47:9e:0f:90:ad:20:60:59:46:38:ad:42:
bf:64:a1:e1:9b:dc:b5:85:fb:4d:75:bd:04:26:24:
92:5f:0e:e8:ac:8a:c6:b3:ce:8b:38:b9:b4:3a:35:
e7:96:ea:2a:5a:ac:7d:aa:51:81:00:67:53:c4:2e:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C9:61:86:B2:12:BC:50:31:69:B1:AE:A4:D8:8C:C5:53:E1:85:76
X509v3 Authority Key Identifier:
keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:0f:80:3e:aa:0c:48:82:9c:fd:2d:e8:3f:66:bb:7c:c7:54:
25:18:d2:c2:6b:0c:3a:79:77:52:aa:2f:38:92:ac:e7:68:7c:
9c:ee:ec:d2:de:dc:d0:9e:c9:18:f3:36:9e:35:62:a3:64:a1:
7a:09:32:e0:9e:02:d1:8b:04:a7:a1:48:68:1e:1e:d4:86:a2:
00:b9:13:78:55:0f:40:6f:98:b6:84:a3:56:3e:68:6a:6e:00:
9c:19:66:af:f2:5b:11:c7:aa:d6:ed:d2:d2:b0:7b:9a:15:11:
c7:9f:0c:02:11:36:45:6f:b9:fc:b5:79:f2:69:08:89:d8:1c:
5d:50:a8:5b:27:e8:58:28:2c:3a:82:bd:28:04:3f:aa:7e:56:
a2:c9:f4:a5:a4:30:05:a1:0f:fa:20:9d:b6:10:d9:01:3b:f1:
e4:2b:86:be:b5:58:08:3e:04:ab:56:ef:ec:59:cc:2c:6c:8c:
e7:be:5c:bf:39:ed:99:19:aa:5c:f5:ad:10:99:79:51:3f:7d:
a4:c6:7c:c6:d8:67:cb:fe:1c:2b:cf:36:f2:cb:e4:e8:6f:4f:
d7:7b:92:92:d6:67:70:dc:f6:b6:39:d0:46:a3:3f:7c:e9:c7:
07:f6:90:3e:47:14:c0:e5:bd:0a:80:f4:23:b1:e5:c6:05:37:
ca:a4:13:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1
QzZFRkMzN0IwHhcNMjYwNTIwMjIwNDI4WhcNMjYwNTI3MjIwNDI4WjAYMRYwFAYD
VQQDEw02YTBlMmZlZC0yYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTwyukGlG58+gz5lhMMfi7J+2PboF1vBalpgrDZunIF+OVIaHsjAcRTeAnUR
dGw2KmW/OvxqGemnIoGyiD1fGZUiD5IOKD0QnzO7reH5qeFq+6JdSENXEyRXthVF
SQjqxj9+1tXAi21vdZi4agXBeWFT6Ds2W3rSBTC2uw4tJ0ZVLsC+ne39/MK4OEX9
UufH/QeYRI9bz4t4JUlz0khHSv5rEaFA4HOeFcrU+Mvn8QvSmyL/d7Lck1mRwsHx
+NPZUC5k/kFHng+QrSBgWUY4rUK/ZKHhm9y1hftNdb0EJiSSXw7orIrGs86LOLm0
OjXnluoqWqx9qlGBAGdTxC7LIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTJYYay
ErxQMWmxrqTYjMVT4YV2MB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB
QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG
OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIA+APqoMSIKc/S3oP2a7fMdUJRjSwmsMOnl3UqovOJKs52h8nO7s0t7c0J7J
GPM2njVio2Shegky4J4C0YsEp6FIaB4e1IaiALkTeFUPQG+YtoSjVj5oam4AnBlm
r/JbEceq1u3S0rB7mhURx58MAhE2RW+5/LV58mkIidgcXVCoWyfoWCgsOoK9KAQ/
qn5Wosn0paQwBaEP+iCdthDZATvx5CuGvrVYCD4Eq1bv7FnMLGyM575cvzntmRmq
XPWtEJl5UT99pMZ8xthny/4cK8828svk6G9P13uSktZncNz2tjnQRqM/fOnHB/aQ
PkcUwOW9CoD0I7HlxgU3yqQT+Q==
-----END CERTIFICATE-----
Generated at Thu May 21 11:39:37 2026 by rpki-client