
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File: yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier: VXyou/HOXpL6Bud2KPfowdDL88Vl6fQC5dYj+fiGPWQ=
Subject key identifier: E5:44:88:88:1C:00:19:9D:F6:43:CC:F5:B0:B1:89:53:E8:56:2F:CB
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number: 0136
Signing time: Mon 02 Mar 2026 21:13:53 +0000
Manifest this update: Mon 02 Mar 2026 21:13:51 +0000
Manifest next update: Mon 09 Mar 2026 21:13:51 +0000
Files and hashes: 1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: BZp8vJZrifCWJyxGtjXtXJHL64Ks2nnvnsI4WwfX+dQ=)
2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: OPdh+VvdJ8rvY5Hnhte8AjyqGibUOoE1fm+ikF6YCWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 21:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Validity
Not Before: Mar 2 21:13:51 2026 GMT
Not After : Mar 9 21:13:51 2026 GMT
Subject: CN=69a5fd90-894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:22:77:9b:0f:96:f2:b8:7d:ab:68:24:42:
23:fa:da:37:79:a5:ea:c8:f8:fd:d3:2a:12:d2:e0:
e6:38:1d:f8:e1:26:a7:61:6a:56:d0:88:58:19:7a:
00:a8:d9:74:b6:ea:e3:0f:49:57:72:a8:58:32:0e:
0b:ae:8e:47:68:1a:c9:b0:6b:20:ce:b8:81:99:da:
d7:cd:e9:f5:1e:86:2b:aa:90:22:8d:46:c0:ac:27:
34:fa:a9:5a:b7:81:9d:ea:2c:dc:cc:b2:e6:ea:20:
86:09:fb:f7:8e:bd:f5:8b:94:89:93:d4:47:d2:47:
d3:67:b9:33:42:3a:53:bd:79:9e:67:ca:c5:d8:b7:
8e:db:bf:fe:0f:a0:b0:ef:85:e1:d1:90:8a:13:46:
ec:57:1a:f7:45:9c:1e:f9:be:e6:5d:54:f2:0c:5d:
fe:fd:27:64:52:60:18:e8:27:aa:9b:52:42:d2:e4:
77:07:ff:8f:b2:a1:01:2c:ae:c1:7a:5a:27:b5:f4:
0d:33:f6:21:fb:d4:79:31:a6:21:79:73:1d:6c:05:
e9:56:d4:0c:c9:69:a3:5c:fc:0e:9f:17:a4:c8:bd:
17:09:dd:55:97:7b:6d:76:95:64:3e:18:f8:8d:ba:
33:0a:f8:a5:6c:e6:c3:51:61:52:ef:8c:ab:fc:a4:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:44:88:88:1C:00:19:9D:F6:43:CC:F5:B0:B1:89:53:E8:56:2F:CB
X509v3 Authority Key Identifier:
keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:cc:5c:0f:87:1e:69:d9:88:4f:46:35:b9:81:f2:92:7f:f8:
18:d6:67:ad:95:3c:91:4e:a0:91:85:6e:da:8b:d3:c8:eb:3f:
6a:79:8b:24:01:1f:24:c5:b0:47:c9:8b:ff:31:80:06:78:c2:
bb:95:b9:97:d1:98:96:09:25:b4:cd:fe:30:3a:12:b6:f8:61:
ce:75:53:b4:23:0b:41:79:d9:83:d4:2c:0c:67:29:72:d9:9b:
e4:59:ad:1f:a5:c0:76:5c:6b:14:e7:e5:23:b0:09:96:e0:d2:
46:d9:f2:4a:c5:10:a5:dd:38:4a:48:ac:73:57:15:79:93:00:
36:83:4f:d7:37:25:99:e7:ea:f3:e4:31:4c:bf:fd:f6:93:72:
fe:fd:e0:f1:68:73:43:fe:13:cf:37:3a:3f:3a:2c:72:ef:10:
d9:63:e1:17:ce:24:08:cc:bd:88:96:50:55:d5:8c:c8:9c:d7:
8c:b9:79:3a:c4:cb:77:26:46:42:16:40:86:8a:eb:8d:78:6b:
04:b8:64:4a:10:46:01:2d:48:39:7d:17:78:17:cf:46:64:d9:
b1:28:76:b7:83:f0:ca:06:86:99:50:d3:17:85:9e:fc:c6:f8:
20:41:3e:9c:cb:ea:91:88:45:7e:82:80:13:d2:79:61:76:40:
3b:89:5c:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUEwNTMxMTAvBgNVBAUTKENBODc3QTdBRUYxREJCMDQ1NjQ4N0Y2MUZFRTY5OTM2
Mzc1NDFFNUQwHhcNMjYwMzAyMjExMzUxWhcNMjYwMzA5MjExMzUxWjAYMRYwFAYD
VQQDEw02OWE1ZmQ5MC04OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAob0id5sPlvK4fatoJEIj+to3eaXqyPj90yoS0uDmOB344SanYWpW0IhYGXoA
qNl0turjD0lXcqhYMg4Lro5HaBrJsGsgzriBmdrXzen1HoYrqpAijUbArCc0+qla
t4Gd6izczLLm6iCGCfv3jr31i5SJk9RH0kfTZ7kzQjpTvXmeZ8rF2LeO27/+D6Cw
74Xh0ZCKE0bsVxr3RZwe+b7mXVTyDF3+/SdkUmAY6Ceqm1JC0uR3B/+PsqEBLK7B
elontfQNM/Yh+9R5MaYheXMdbAXpVtQMyWmjXPwOnxekyL0XCd1Vl3ttdpVkPhj4
jbozCvilbObDUWFS74yr/KQU8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVEiIgc
ABmd9kPM9bCxiVPoVi/LMB8GA1UdIwQYMBaAFMqHenrvHbsEVkh/Yf7mmTY3VB5d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My84NzIwMzA1RTQ0
OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3UldTSDloX3VhWk5qZFVI
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lvZDZldThkdXdSV1NIOWhfdWFaTmpkVUhsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTA1My84NzIwMzA1RTQ0OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3
UldTSDloX3VhWk5qZFVIbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABMxcD4ceadmIT0Y1uYHykn/4GNZnrZU8kU6gkYVu2ovTyOs/anmLJAEfJMWw
R8mL/zGABnjCu5W5l9GYlgkltM3+MDoStvhhznVTtCMLQXnZg9QsDGcpctmb5Fmt
H6XAdlxrFOflI7AJluDSRtnySsUQpd04Skisc1cVeZMANoNP1zclmefq8+QxTL/9
9pNy/v3g8WhzQ/4Tzzc6Pzoscu8Q2WPhF84kCMy9iJZQVdWMyJzXjLl5OsTLdyZG
QhZAhorrjXhrBLhkShBGAS1IOX0XeBfPRmTZsSh2t4PwygaGmVDTF4We/Mb4IEE+
nMvqkYhFfoKAE9J5YXZAO4lc1w==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:20 2026 by rpki-client