
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json)
Hash identifier: rGuJNwZPqEG675vspz6sWCaQbra1A1GoZkeBqxa3Xq4=
Subject key identifier: 05:CB:E6:FC:AA:E5:68:B8:DA:EC:A1:83:F6:CF:72:EF:1C:7F:84:CF
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial: 327E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
Manifest number: 3253
Signing time: Fri 04 Sep 2026 15:22:42 +0000
Manifest this update: Fri 04 Sep 2026 15:22:42 +0000
Manifest next update: Fri 11 Sep 2026 15:22:42 +0000
Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: j4IrymPMqaAuG/AF1d0qnPDVY9PrtLW7GkeUqCNaJ+k=)
2: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: MdDzMLI4SVTxhDtydILyjc8VZa9vktRLqWXwp+LVEtE=)
3: 858F2428399511F18707CD8AA2833773.roa (hash: cUr0clqCyCkiUIq/VycqLhOHK0HYu8G+EZ7N59Y9lRQ=)
4: 8952805A8D7811F1A80E34DA3311F970.roa (hash: jjgBEIUdIis7R6NqXuQTMTwt421DRMenCtuYpNqdCJA=)
5: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: l4FF/86A72/pQWVDtqFOaJrDc/AFvwdU+PSOUvI8AEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12926 (0x327e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Validity
Not Before: Sep 4 15:22:42 2026 GMT
Not After : Sep 11 15:22:42 2026 GMT
Subject: CN=6a9ae242-fd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:cf:83:ac:a8:df:10:b0:4f:c3:f8:65:fd:
67:4f:67:e3:64:49:c4:7b:08:7c:50:21:13:83:6e:
32:bc:19:12:f7:2d:77:41:85:0d:f2:84:39:67:e1:
33:fa:ee:ba:8a:b4:8a:b1:a1:87:b6:58:5a:38:f3:
56:66:bf:bb:e8:d3:55:c2:3a:85:12:60:a8:18:6b:
ee:cb:bd:d9:4d:3f:5a:9e:7c:5b:7d:3d:5e:7a:3b:
a7:98:db:ee:bc:ef:b9:ee:52:4f:78:ad:3c:75:5f:
03:a8:7d:79:8e:05:ca:5e:c0:2f:9c:87:e3:41:f5:
7d:c2:b9:4e:0c:89:27:c6:cf:7a:78:11:50:33:38:
0c:25:b0:a7:cf:02:3d:3d:e1:44:48:ff:01:41:63:
c3:53:32:ea:ad:1a:cc:f9:c3:fa:be:c5:2d:1d:55:
21:4e:1b:f0:ee:d9:c8:23:48:2f:b8:c9:51:41:1f:
e7:d4:db:7f:50:f5:fc:d5:e7:31:00:df:18:2a:45:
ed:48:b1:98:da:e1:64:8e:b6:92:df:bc:95:36:df:
46:c0:78:1c:87:78:72:38:ff:7e:07:08:58:45:51:
a3:83:87:05:c2:00:7b:de:3a:82:61:45:7b:01:73:
49:af:3b:f3:05:bd:3f:14:fb:2e:94:ce:a7:ac:f2:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:E6:FC:AA:E5:68:B8:DA:EC:A1:83:F6:CF:72:EF:1C:7F:84:CF
X509v3 Authority Key Identifier:
keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:bc:c8:d0:0e:a8:bb:34:fe:da:10:d5:2e:d2:d5:8d:c5:6f:
79:6d:de:e8:b9:18:1c:c3:95:a6:b6:b1:ba:c4:c7:7b:a5:ee:
6b:b3:76:7c:3a:40:b8:34:71:27:04:70:18:97:89:3d:93:ce:
06:44:87:43:d7:b2:97:c0:33:49:4b:94:a7:bc:67:0c:98:ff:
dc:f3:20:e8:d5:64:95:11:35:c6:8b:04:52:79:50:b9:b9:4a:
5e:b6:0e:ed:b9:3e:50:cc:ed:2e:35:00:4d:ec:de:2a:3a:14:
ed:b5:48:b6:b5:1d:1c:2c:58:a0:59:89:74:1e:ad:fd:e5:9b:
c9:ed:51:5d:f8:6e:b1:44:a0:61:29:99:c2:ff:22:18:b6:45:
af:c0:ed:3a:3b:38:f3:32:2a:dd:cf:8a:83:32:0f:00:8f:b5:
72:e0:38:b9:51:1c:a8:8a:ed:64:0f:18:b0:99:9c:db:1b:a9:
fd:f4:ba:c4:b9:26:2d:8f:41:98:08:11:7f:49:53:0d:00:2b:
e5:81:36:c9:9c:94:65:ca:60:02:5f:aa:3a:db:0c:96:b9:58:
0f:7c:11:8e:b1:c2:da:31:b0:d2:b5:3b:1e:c3:52:70:b0:0e:
90:fe:cb:fa:0f:c4:9c:55:c9:03:64:d8:05:c7:4f:b4:31:ee:
03:c0:cf:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG
OEJEMEY1QzkwHhcNMjYwOTA0MTUyMjQyWhcNMjYwOTExMTUyMjQyWjAYMRYwFAYD
VQQDEw02YTlhZTI0Mi1mZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqwPPg6yo3xCwT8P4Zf1nT2fjZEnEewh8UCETg24yvBkS9y13QYUN8oQ5Z+Ez
+u66irSKsaGHtlhaOPNWZr+76NNVwjqFEmCoGGvuy73ZTT9annxbfT1eejunmNvu
vO+57lJPeK08dV8DqH15jgXKXsAvnIfjQfV9wrlODIknxs96eBFQMzgMJbCnzwI9
PeFESP8BQWPDUzLqrRrM+cP6vsUtHVUhThvw7tnII0gvuMlRQR/n1Nt/UPX81ecx
AN8YKkXtSLGY2uFkjraS37yVNt9GwHgch3hyOP9+BwhYRVGjg4cFwgB73jqCYUV7
AXNJrzvzBb0/FPsulM6nrPIeKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXL5vyq
5Wi42uyhg/bPcu8cf4TPMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE
RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm
MEZHWlJjN1VqblQ0dlE5Y2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYbzI0A6ouzT+2hDVLtLVjcVveW3e6LkYHMOVpraxusTHe6Xua7N2fDpAuDRx
JwRwGJeJPZPOBkSHQ9eyl8AzSUuUp7xnDJj/3PMg6NVklRE1xosEUnlQublKXrYO
7bk+UMztLjUATezeKjoU7bVItrUdHCxYoFmJdB6t/eWbye1RXfhusUSgYSmZwv8i
GLZFr8DtOjs48zIq3c+KgzIPAI+1cuA4uVEcqIrtZA8YsJmc2xup/fS6xLkmLY9B
mAgRf0lTDQAr5YE2yZyUZcpgAl+qOtsMlrlYD3wRjrHC2jGw0rU7HsNScLAOkP7L
+g/EnFXJA2TYBcdPtDHuA8DPTQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:09:15 2026 by rpki-client