
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json)
Hash identifier: 8KnN2Dx8IoLl5EAFYC7fLR6aW9LWNOjmEQiMfv2emME=
Subject key identifier: D1:E3:19:06:15:AF:59:21:F8:DC:B4:12:3F:59:A6:6A:22:2D:DB:FE
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial: 321D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
Manifest number: 31FC
Signing time: Sat 04 Apr 2026 15:22:56 +0000
Manifest this update: Sat 04 Apr 2026 15:22:56 +0000
Manifest next update: Sat 11 Apr 2026 15:22:56 +0000
Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: +yMG4DbyjMgvRJIOZu3j/J91+du1BLUoMxJ6CylUfjo=)
2: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: QqncPmQ+MTjJkRRgLJA4ctdRvr1q1n2VS0I4uFV/Q7g=)
3: 4B7CAC36F78411F08F54609B4C6F56BC.roa (hash: US+hos1bmco+xwNoQ4VJkFhsWCF6u/dd+loCwDLc9o4=)
4: 4BEF9ED0F78411F08F54609B4C6F56BC.roa (hash: XwB9QjCYwbuRP43YSeYiFY0GoKDk5ANAOxQN+pyPBGM=)
5: 4B019258F78411F08F54609B4C6F56BC.roa (hash: Jv0wj3aaY+NUxNWRmp1eqBldB83wzCf6HePkKdo3y5I=)
6: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: 3U02qvW/25eQgStQpEoEM5rVQKE7UU4Ms9dzjGJT9gA=)
7: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: cyouCRCr7CZPOwDKg7kIiYNdpRMlLTwclgYJQS5JDvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12829 (0x321d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Validity
Not Before: Apr 4 15:22:56 2026 GMT
Not After : Apr 11 15:22:56 2026 GMT
Subject: CN=69d12cd0-d767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:2e:d4:52:1f:bd:8e:f3:ea:34:74:78:24:
37:ad:00:af:25:91:7d:b0:bc:72:5d:77:9f:6e:3d:
10:eb:46:22:3c:71:9b:7a:65:ed:f1:29:91:06:90:
98:ad:9f:ac:a5:4d:35:e2:8b:7b:b3:18:cd:8c:88:
5f:46:bd:bf:19:52:c6:d4:d1:57:60:0a:8c:b4:74:
d0:ba:21:c1:62:d9:13:02:49:4e:54:f6:be:cd:e2:
57:8a:05:f9:97:94:69:18:99:66:a2:be:53:2d:50:
5d:9d:6b:c3:d5:4d:57:ae:93:e1:53:29:a9:18:b3:
d3:c0:b7:76:73:39:61:77:8f:b9:a7:b4:c0:20:bd:
7c:eb:65:5f:4f:c9:0e:1d:77:36:c6:b7:4e:10:50:
3b:03:bc:71:ff:9a:34:16:d2:c4:bb:c0:5a:0a:c5:
c2:ae:2f:41:6b:8d:38:53:18:26:46:2f:f7:b8:83:
32:2b:50:09:ed:c0:e8:76:65:ed:35:83:83:fd:1c:
a1:c3:de:88:1a:d1:e9:02:04:bd:d2:22:88:85:2d:
99:70:5d:ff:3d:0b:7a:2d:3b:df:56:9b:36:95:c6:
1a:4a:47:a6:bc:de:f4:66:33:d1:a7:31:5f:0f:40:
63:3b:93:46:a6:5f:dd:d9:44:22:a8:b2:e0:28:36:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E3:19:06:15:AF:59:21:F8:DC:B4:12:3F:59:A6:6A:22:2D:DB:FE
X509v3 Authority Key Identifier:
keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:bf:28:d1:0e:eb:48:00:48:cb:ee:c6:b4:25:0b:51:91:bb:
88:50:84:89:2a:3a:c5:a9:f3:e1:fe:d8:f3:52:47:63:45:9c:
78:66:1f:38:fd:e7:68:77:ad:17:7a:a8:1c:8b:5a:29:1c:1d:
c5:d4:5d:ea:fd:25:b8:cd:7d:ea:80:42:a6:12:d7:c2:60:45:
b1:f8:75:d1:e0:17:2f:c2:2b:a3:52:c7:43:2e:9b:e4:78:8e:
f6:d2:72:f3:ad:92:e9:60:3e:e4:3a:2d:a7:86:24:60:04:c2:
03:c9:49:38:f9:63:0d:14:74:2d:74:85:01:3f:93:2b:de:cd:
dc:e9:53:94:ac:09:28:fe:7b:e1:4b:0b:98:99:e9:c0:9b:0b:
3e:ee:2c:b5:87:ab:cc:8a:41:1e:43:82:83:1c:fc:cb:2b:ee:
48:37:18:6a:5f:2c:6a:18:88:65:64:86:9c:f3:5a:77:13:98:
56:0c:c4:dc:75:83:05:f3:5d:1a:68:3d:13:3f:dd:7c:29:dd:
99:aa:09:66:45:fd:1d:6c:e2:f5:3f:a3:4b:ca:05:e7:33:c1:
58:4d:1e:ee:2b:d2:81:f4:00:22:2c:3f:f2:5f:82:5f:1a:ed:
c9:7c:34:94:f4:93:fa:e4:9c:36:a7:99:23:a5:86:9f:fd:de:
59:4e:b4:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG
OEJEMEY1QzkwHhcNMjYwNDA0MTUyMjU2WhcNMjYwNDExMTUyMjU2WjAYMRYwFAYD
VQQDEw02OWQxMmNkMC1kNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4n0u1FIfvY7z6jR0eCQ3rQCvJZF9sLxyXXefbj0Q60YiPHGbemXt8SmRBpCY
rZ+spU014ot7sxjNjIhfRr2/GVLG1NFXYAqMtHTQuiHBYtkTAklOVPa+zeJXigX5
l5RpGJlmor5TLVBdnWvD1U1XrpPhUympGLPTwLd2czlhd4+5p7TAIL1862VfT8kO
HXc2xrdOEFA7A7xx/5o0FtLEu8BaCsXCri9Ba404UxgmRi/3uIMyK1AJ7cDodmXt
NYOD/Ryhw96IGtHpAgS90iKIhS2ZcF3/PQt6LTvfVps2lcYaSkemvN70ZjPRpzFf
D0BjO5NGpl/d2UQiqLLgKDatfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHjGQYV
r1kh+Ny0Ej9ZpmoiLdv+MB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE
RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm
MEZHWlJjN1VqblQ0dlE5Y2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeL8o0Q7rSABIy+7GtCULUZG7iFCEiSo6xanz4f7Y81JHY0WceGYfOP3naHet
F3qoHItaKRwdxdRd6v0luM196oBCphLXwmBFsfh10eAXL8Iro1LHQy6b5HiO9tJy
862S6WA+5Dotp4YkYATCA8lJOPljDRR0LXSFAT+TK97N3OlTlKwJKP574UsLmJnp
wJsLPu4stYerzIpBHkOCgxz8yyvuSDcYal8sahiIZWSGnPNadxOYVgzE3HWDBfNd
Gmg9Ez/dfCndmaoJZkX9HWzi9T+jS8oF5zPBWE0e7ivSgfQAIiw/8l+CXxrtyXw0
lPST+uScNqeZI6WGn/3eWU60bQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:29 2026 by rpki-client