
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json)
Hash identifier: EskVnoT69bWI2v2GJ8nhse1iPwU4k5rNlfUvI3eSCb0=
Subject key identifier: BC:8D:00:A6:E2:BB:B5:53:5F:DB:03:E8:77:71:1A:3E:9B:5A:DD:3D
Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Certificate serial: 0845
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
Manifest number: 0845
Signing time: Sun 31 May 2026 21:28:49 +0000
Manifest this update: Sun 31 May 2026 21:28:49 +0000
Manifest next update: Sun 07 Jun 2026 21:28:49 +0000
Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: K8gxcVPAEkafS7iSl2zYPpoXEQVTGmRpUIMRBDDoucA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 21:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Validity
Not Before: May 31 21:28:49 2026 GMT
Not After : Jun 7 21:28:49 2026 GMT
Subject: CN=6a1ca811-32a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:0a:9a:cb:bb:0e:69:e4:c1:5a:91:42:7d:
98:09:25:b6:3c:70:96:5b:b0:59:6a:f5:a7:2c:cf:
e3:70:b8:d8:7f:c8:03:97:49:4b:42:b6:24:72:b4:
7f:4c:80:73:5b:39:5c:f3:25:37:35:c3:a2:40:f5:
f3:09:11:cc:b7:3d:1f:cc:0a:ac:13:60:09:fa:cc:
22:05:78:b9:62:ba:0a:dd:17:74:fa:cb:59:27:ae:
b3:b6:23:0a:7e:18:44:df:9f:ea:81:ef:74:99:b6:
12:c2:4c:7c:35:7f:46:e4:ed:8d:78:00:70:23:c0:
b6:aa:d4:11:f9:a8:45:a4:ef:0d:20:33:e1:01:65:
0f:f0:ef:1a:0c:98:bb:12:bd:da:88:c5:38:f3:55:
28:f8:a7:25:6c:03:ce:2a:8f:88:e9:11:d6:86:a2:
62:15:b7:ec:a7:a9:73:b7:2a:96:96:e2:d9:67:93:
9c:8c:1c:df:e5:a9:80:46:3c:15:92:3c:61:56:1f:
c9:6a:ed:45:c1:06:3e:97:f9:37:62:27:69:01:24:
92:6f:31:29:28:f3:06:32:2e:e9:c5:b1:fc:80:fb:
b8:50:a1:d7:cd:30:30:22:ce:bb:8a:7b:07:d6:e4:
1b:33:e1:4c:b9:1a:58:37:05:34:96:b4:00:07:0c:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:00:A6:E2:BB:B5:53:5F:DB:03:E8:77:71:1A:3E:9B:5A:DD:3D
X509v3 Authority Key Identifier:
keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:12:8f:3f:8e:9a:6a:b6:b2:54:a0:d1:71:d5:18:ef:6c:91:
f3:52:ef:4d:4c:4a:0e:56:64:64:16:a3:ba:b9:2e:8f:5e:fc:
80:36:c9:29:14:bb:a4:ae:bc:4d:5d:00:70:5f:18:e5:7d:08:
ba:29:07:d4:75:a7:2b:f4:81:42:2b:ce:ba:4c:9b:0b:0f:32:
25:cc:68:a2:16:d2:87:e6:79:50:cd:ea:40:d0:84:86:23:26:
b5:0c:30:75:e0:de:74:ec:57:07:46:51:02:9c:1f:fc:68:4a:
ed:29:68:be:2f:85:03:5e:b3:74:84:15:1d:c9:71:ab:cf:2c:
12:26:e8:ee:69:d2:19:3c:a3:98:ad:2a:27:a4:d5:b6:44:04:
a9:ad:d0:2e:e5:08:18:eb:93:76:ff:ad:89:86:6b:8b:af:a9:
29:2b:da:42:03:a6:83:e6:89:26:91:bb:a6:11:1d:64:cf:07:
85:5f:7a:80:cf:40:43:bb:55:94:f1:e2:86:22:3d:ef:fc:0c:
87:8d:8d:e3:64:56:81:7e:e1:a6:08:37:ba:69:a8:f0:c2:af:
72:99:aa:e5:ed:0e:3e:b0:cc:73:63:80:1f:e3:3f:ee:7f:fc:
41:17:48:28:74:79:75:f2:39:8a:f4:7b:c2:58:54:8f:a4:b1:
cb:b9:c2:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF
OUYzODFGMTIwHhcNMjYwNTMxMjEyODQ5WhcNMjYwNjA3MjEyODQ5WjAYMRYwFAYD
VQQDEw02YTFjYTgxMS0zMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvMIKmsu7DmnkwVqRQn2YCSW2PHCWW7BZavWnLM/jcLjYf8gDl0lLQrYkcrR/
TIBzWzlc8yU3NcOiQPXzCRHMtz0fzAqsE2AJ+swiBXi5YroK3Rd0+stZJ66ztiMK
fhhE35/qge90mbYSwkx8NX9G5O2NeABwI8C2qtQR+ahFpO8NIDPhAWUP8O8aDJi7
Er3aiMU481Uo+KclbAPOKo+I6RHWhqJiFbfsp6lztyqWluLZZ5OcjBzf5amARjwV
kjxhVh/Jau1FwQY+l/k3YidpASSSbzEpKPMGMi7pxbH8gPu4UKHXzTAwIs67insH
1uQbM+FMuRpYNwU0lrQABwzQpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLyNAKbi
u7VTX9sD6HdxGj6bWt09MB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE
NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt
NmU1SHEyLXViZkRwODRIeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABBKPP46aarayVKDRcdUY72yR81LvTUxKDlZkZBajurkuj178gDbJKRS7pK68
TV0AcF8Y5X0IuikH1HWnK/SBQivOukybCw8yJcxoohbSh+Z5UM3qQNCEhiMmtQww
deDedOxXB0ZRApwf/GhK7Slovi+FA16zdIQVHclxq88sEibo7mnSGTyjmK0qJ6TV
tkQEqa3QLuUIGOuTdv+tiYZri6+pKSvaQgOmg+aJJpG7phEdZM8HhV96gM9AQ7tV
lPHihiI97/wMh42N42RWgX7hpgg3ummo8MKvcpmq5e0OPrDMc2OAH+M/7n/8QRdI
KHR5dfI5ivR7wlhUj6Sxy7nCsQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:46 2026 by rpki-client