
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json)
Hash identifier: N9xtJvBV7YQNG9GSfLNP9h8S7S3KVCJw8a4XN0256+M=
Subject key identifier: 80:FE:70:07:68:16:DB:F6:3D:C1:C2:EF:84:DA:78:EF:A2:5B:72:BE
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
Manifest number: 021D
Signing time: Sun 21 Jun 2026 02:57:09 +0000
Manifest this update: Sun 21 Jun 2026 02:57:09 +0000
Manifest next update: Sun 28 Jun 2026 02:57:09 +0000
Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: R3c8et2mWwRTpNqUmkA96C2vL+L9ICS/ZQ3A1YC3TeE=)
2: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=)
3: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: QdOS7iNU00Iijfq+HjcB3R6AwPM5RFyiPDu0hct0+KI=)
4: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 02:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Jun 21 02:57:09 2026 GMT
Not After : Jun 28 02:57:09 2026 GMT
Subject: CN=6a375305-f139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a2:1a:74:15:9e:26:14:98:7c:7a:0b:9b:4c:
96:9f:7a:06:d4:cc:c5:e4:3c:58:47:87:64:16:63:
1f:fb:5e:48:c1:ea:ee:72:33:7c:7e:dd:2d:c8:c2:
14:53:a4:3b:70:d7:c2:89:89:14:6f:a1:5d:dc:9f:
e5:b6:5a:94:43:ad:3f:51:47:ec:fb:a3:fd:cf:25:
46:04:4f:78:d2:69:7f:0e:43:d6:83:68:ad:17:80:
49:cf:88:22:c9:20:27:75:c4:0f:d5:7c:2a:57:c5:
3e:4c:42:6e:59:cd:5f:b4:87:92:01:cb:29:27:03:
f3:08:a3:99:57:3a:8e:e3:52:a6:08:e0:c1:aa:01:
cc:6b:2d:14:23:99:4e:1b:83:69:ce:14:fc:18:fe:
35:7f:f4:9e:94:fb:4f:1b:61:56:6e:f4:5a:a6:c0:
cc:b7:b1:b6:c7:a8:78:60:52:2f:12:6a:df:2e:90:
d5:f5:8a:be:79:e6:bf:3b:4a:04:67:38:8f:ce:07:
9d:7b:ca:f8:2b:7e:73:c6:84:2c:cb:1e:7d:73:e1:
eb:6f:bd:3a:0e:74:16:28:85:87:63:d6:79:6d:74:
d2:65:2b:bb:61:b6:d2:88:fa:ed:28:56:96:9f:69:
7b:82:bf:00:e2:f0:96:77:1a:a2:29:d3:cf:b6:74:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FE:70:07:68:16:DB:F6:3D:C1:C2:EF:84:DA:78:EF:A2:5B:72:BE
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f9:2f:2c:b1:2d:40:6f:bf:a4:66:b8:5c:77:5d:cc:38:1c:
62:f5:a5:6e:c5:89:9e:97:89:e3:bd:1c:f4:53:22:46:25:d0:
63:e1:6d:63:94:92:91:da:d2:6e:84:2b:0a:73:2d:e2:59:b1:
6b:e8:2d:95:3c:b5:0a:89:b2:1b:70:09:db:05:9d:84:d1:40:
a4:fe:1b:1d:78:fb:4a:d8:9f:d8:cc:68:fa:1e:62:0f:6b:a5:
9c:58:fb:85:a0:6a:43:db:77:5f:cb:1f:9f:2a:a3:58:ba:f8:
d8:3f:fe:25:f0:5f:56:e4:13:ac:c4:ad:a5:2b:84:17:4d:5e:
3e:ea:d2:df:49:0e:28:58:e3:a5:f5:54:8a:ec:2d:f8:94:2a:
b3:1c:ca:98:43:71:7a:17:50:e3:47:ce:12:5c:ea:31:ec:f6:
bc:80:0e:16:51:7e:2d:55:a0:48:d1:74:95:35:af:cc:78:38:
f8:b8:97:58:da:eb:65:aa:21:3a:5c:f2:46:80:1c:0d:fc:d5:
00:60:81:80:86:b8:80:b4:90:4c:3c:ab:2b:2e:aa:b4:5c:39:
95:7d:11:a5:5e:f1:1b:6e:f4:59:73:83:67:52:f4:18:89:b4:
ba:fe:31:47:e8:8e:60:6c:99:c9:63:0c:e9:26:ba:17:43:b5:
45:65:8b:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE
RjAzRDcyNDcwHhcNMjYwNjIxMDI1NzA5WhcNMjYwNjI4MDI1NzA5WjAYMRYwFAYD
VQQDEw02YTM3NTMwNS1mMTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3KIadBWeJhSYfHoLm0yWn3oG1MzF5DxYR4dkFmMf+15IwerucjN8ft0tyMIU
U6Q7cNfCiYkUb6Fd3J/ltlqUQ60/UUfs+6P9zyVGBE940ml/DkPWg2itF4BJz4gi
ySAndcQP1XwqV8U+TEJuWc1ftIeSAcspJwPzCKOZVzqO41KmCODBqgHMay0UI5lO
G4NpzhT8GP41f/SelPtPG2FWbvRapsDMt7G2x6h4YFIvEmrfLpDV9Yq+eea/O0oE
ZziPzgede8r4K35zxoQsyx59c+Hrb706DnQWKIWHY9Z5bXTSZSu7YbbSiPrtKFaW
n2l7gr8A4vCWdxqiKdPPtnQ70QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFID+cAdo
Ftv2PcHC74TaeO+iW3K+MB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw
MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ
bUVKcFBUaGhHVkxmQTlja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb/kvLLEtQG+/pGa4XHddzDgcYvWlbsWJnpeJ470c9FMiRiXQY+FtY5SSkdrS
boQrCnMt4lmxa+gtlTy1ComyG3AJ2wWdhNFApP4bHXj7Stif2Mxo+h5iD2ulnFj7
haBqQ9t3X8sfnyqjWLr42D/+JfBfVuQTrMStpSuEF01ePurS30kOKFjjpfVUiuwt
+JQqsxzKmENxehdQ40fOElzqMez2vIAOFlF+LVWgSNF0lTWvzHg4+LiXWNrrZaoh
OlzyRoAcDfzVAGCBgIa4gLSQTDyrKy6qtFw5lX0RpV7xG270WXODZ1L0GIm0uv4x
R+iOYGyZyWMM6Sa6F0O1RWWLLw==
-----END CERTIFICATE-----
Generated at Mon Jun 22 15:07:55 2026 by rpki-client