
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json)
Hash identifier: mdCGw1cjF0shSGq2d0/Lr8PVDcNyXPVYpGyb1vil/tc=
Subject key identifier: EE:50:2A:78:7E:CB:6E:31:BA:34:FC:07:3A:6F:0C:CA:C4:52:16:A6
Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80
Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
Manifest number: 01DB
Signing time: Wed 19 Aug 2026 04:18:56 +0000
Manifest this update: Wed 19 Aug 2026 04:18:55 +0000
Manifest next update: Wed 26 Aug 2026 04:18:55 +0000
Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: NP2u5vnAdUIztQzEWfUCew+tOoEw9DKVAtHrfF18BJw=)
2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: yIHsiGXUbr4yiSWIbyeH/+lnd1LO5enPoNYE+CObcWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl
rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
Validity
Not Before: Aug 19 04:18:55 2026 GMT
Not After : Aug 26 04:18:55 2026 GMT
Subject: CN=6a852eaf-dd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:9f:8d:fb:e5:3a:52:b1:5d:e1:3a:ba:46:
05:47:98:a3:e5:11:a4:cd:54:f3:6c:9b:0d:0b:38:
0d:d3:03:72:8d:ea:e7:9a:dc:21:28:a2:fa:4b:f9:
0e:b7:93:54:a9:ab:a1:b1:57:eb:aa:f7:75:03:c4:
c2:76:81:19:c2:22:99:95:29:fd:69:ae:71:8c:9e:
b8:53:1a:f8:e8:12:9f:bc:0a:43:b0:2a:23:96:c6:
df:c2:85:c6:71:d5:89:06:7a:86:b0:cd:fb:8f:5b:
92:4d:dd:0b:98:6a:7f:0f:4a:b7:82:96:c3:4b:12:
0d:ce:d1:66:46:67:b9:e6:ef:2a:77:86:2c:a7:b8:
dd:fc:1a:d0:2c:2f:13:1c:6b:e5:7b:a1:a1:1c:ae:
01:da:75:78:a4:45:70:e3:61:7b:c7:d9:9b:00:a1:
d6:63:10:b5:06:c7:b0:a9:81:b6:5e:e0:17:c9:da:
94:9c:f2:86:9b:94:19:87:46:0b:3d:df:82:fd:5f:
1d:41:63:e3:e0:7e:0a:be:03:de:03:5a:40:0e:79:
1e:97:76:ba:4a:06:9c:59:15:0f:cb:98:7c:eb:45:
bd:5c:49:42:61:02:44:e7:0a:09:32:1a:49:80:99:
11:53:15:6e:d1:1f:cb:6f:3b:8a:a8:dc:1b:3e:cf:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:50:2A:78:7E:CB:6E:31:BA:34:FC:07:3A:6F:0C:CA:C4:52:16:A6
X509v3 Authority Key Identifier:
keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:30:3f:97:de:76:3a:75:1b:75:7f:c5:6d:a6:dc:e0:78:
b3:19:c3:e3:0d:32:c5:58:59:7a:3e:f1:0c:c5:a4:86:59:50:
fb:83:db:71:81:f3:7b:34:4e:ad:18:91:28:0e:45:6c:a5:79:
98:1d:85:9e:2c:7c:40:4f:3f:aa:f7:de:97:5d:ce:ad:d1:1b:
f4:79:61:83:50:1b:dd:fe:07:cc:a0:d7:86:fc:12:f4:60:7a:
b7:d1:b0:12:ba:97:43:f9:74:20:cb:58:44:54:5b:39:6c:35:
39:b8:c1:05:04:57:16:b5:80:c7:98:47:24:24:c4:fd:81:5a:
4a:a6:7f:b4:9f:6b:92:3e:86:9c:52:e9:dd:86:7a:cf:f5:c1:
fa:86:5f:7c:13:20:80:48:58:e2:73:11:9a:a1:14:8e:76:8a:
fa:a7:68:47:e4:44:f2:ad:ae:0b:00:a9:0c:f8:92:13:be:1f:
4e:29:e7:37:a9:e7:64:bc:7c:4f:32:cb:1b:93:e5:1f:d9:35:
f5:18:f8:50:da:7c:2e:cf:78:fb:67:4f:53:ae:8c:a4:65:47:
99:69:20:36:52:43:e6:f9:73:8c:ab:5f:7d:6e:cc:01:ca:77:
f3:c8:f4:02:2b:c5:2d:b2:5d:d8:24:48:4e:a0:04:a6:3c:92:
a0:fe:27:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4
QTlCOUVEODAwHhcNMjYwODE5MDQxODU1WhcNMjYwODI2MDQxODU1WjAYMRYwFAYD
VQQDEw02YTg1MmVhZi1kZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAntufjfvlOlKxXeE6ukYFR5ij5RGkzVTzbJsNCzgN0wNyjernmtwhKKL6S/kO
t5NUqauhsVfrqvd1A8TCdoEZwiKZlSn9aa5xjJ64Uxr46BKfvApDsCojlsbfwoXG
cdWJBnqGsM37j1uSTd0LmGp/D0q3gpbDSxINztFmRme55u8qd4Ysp7jd/BrQLC8T
HGvle6GhHK4B2nV4pEVw42F7x9mbAKHWYxC1BsewqYG2XuAXydqUnPKGm5QZh0YL
Pd+C/V8dQWPj4H4KvgPeA1pADnkel3a6SgacWRUPy5h860W9XElCYQJE5woJMhpJ
gJkRUxVu0R/LbzuKqNwbPs/z2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5QKnh+
y24xujT8BzpvDMrEUhamMB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1
RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZr
SDJZUkhvNHBBbW1LbTU3WUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAemwwP5fedjp1G3V/xW2m3OB4sxnD4w0yxVhZej7xDMWkhllQ+4PbcYHzezRO
rRiRKA5FbKV5mB2Fnix8QE8/qvfel13OrdEb9Hlhg1Ab3f4HzKDXhvwS9GB6t9Gw
ErqXQ/l0IMtYRFRbOWw1ObjBBQRXFrWAx5hHJCTE/YFaSqZ/tJ9rkj6GnFLp3YZ6
z/XB+oZffBMggEhY4nMRmqEUjnaK+qdoR+RE8q2uCwCpDPiSE74fTinnN6nnZLx8
TzLLG5PlH9k19Rj4UNp8Ls94+2dPU66MpGVHmWkgNlJD5vlzjKtffW7MAcp388j0
AivFLbJd2CRITqAEpjySoP4nmg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:50 2026 by rpki-client