
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier: fc4nF6Z4Q37re+EjGrYBzk8qXn3MGk6NwRbLZFb2rH0=
Subject key identifier: 1F:2D:73:41:F8:47:C2:FB:93:19:05:06:71:13:62:08:9B:AE:70:E0
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number: 0226
Signing time: Mon 05 Oct 2026 03:09:54 +0000
Manifest this update: Mon 05 Oct 2026 03:09:54 +0000
Manifest next update: Mon 12 Oct 2026 03:09:54 +0000
Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: AHj/vQm2ehnS1JbWZ+95eyCMf8TdaMVdcYUJ/2IVMbw=)
2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: NxYGUXPru1ELvBZ6qbFZeX9tHWu2f3PZOepm5U8d3eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Validity
Not Before: Oct 5 03:09:54 2026 GMT
Not After : Oct 12 03:09:54 2026 GMT
Subject: CN=6ac31502-cb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:8e:d9:af:d5:b4:32:72:ce:bb:06:44:56:
4c:7b:f0:17:2f:7a:ce:c7:5c:c6:96:2b:ea:ea:c1:
b1:2a:32:e4:2e:b6:9d:cd:25:00:6b:bc:de:72:7a:
ce:54:da:e3:fa:56:6c:13:f4:8b:3a:b5:bd:cb:99:
66:5b:d2:f8:c9:35:41:1b:a0:92:81:8b:c4:f7:9b:
ed:fa:75:ef:68:32:e9:3c:7e:1a:eb:dc:21:1c:dd:
62:ed:b0:c6:97:84:e7:7d:b8:ca:96:94:2d:f1:ce:
13:98:3f:a3:89:4d:cd:a6:52:1d:7b:ae:1b:67:96:
87:16:25:1a:4d:25:e1:fb:35:15:5f:68:99:6a:66:
ce:30:da:20:71:fb:74:86:dd:9d:34:f9:e8:48:1d:
98:7f:7e:42:6c:6e:f8:cc:4b:eb:b0:6c:10:ad:57:
d0:fb:82:f1:2b:f9:f4:6b:d9:54:ff:2f:e3:d7:e1:
e3:60:d8:d1:2a:0c:dc:ba:8f:5c:91:63:1d:18:6c:
a9:1c:25:5b:5b:a0:3b:31:b0:3b:5b:cd:38:2c:b7:
47:5b:0e:26:5f:b7:b2:c1:88:66:62:f3:b5:f8:e2:
fc:f2:3b:ca:9f:6e:e1:33:d2:4c:c0:65:28:51:86:
f8:bf:91:a0:b2:60:7c:2e:2a:0f:c6:35:11:24:5b:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2D:73:41:F8:47:C2:FB:93:19:05:06:71:13:62:08:9B:AE:70:E0
X509v3 Authority Key Identifier:
keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f3:b9:36:11:65:1f:c4:12:1c:e1:cb:5f:28:eb:bc:92:ff:
d1:94:f8:ad:8f:4f:e7:32:51:da:37:37:ca:8a:e1:b2:ad:c0:
39:29:15:81:d9:ee:eb:6a:fc:4d:8c:b8:e8:21:0a:1f:e3:e6:
14:47:51:18:99:7b:37:77:d6:ac:ea:5a:e0:3f:e1:e8:04:32:
c1:4a:de:71:f6:87:7a:ce:91:4c:00:48:76:29:b6:c9:06:39:
fa:a8:36:03:6a:aa:6b:e3:b8:d1:83:02:0e:38:90:dd:16:e2:
76:f6:ba:00:65:99:f3:45:2b:40:68:b5:a1:5b:06:20:87:6f:
2b:99:eb:8c:0a:79:63:c6:a2:ea:81:c1:dd:15:89:8e:57:9e:
3b:94:9a:01:fb:c9:97:79:d7:db:c6:96:11:15:c9:f3:ac:ac:
93:1b:03:6c:d9:2c:91:72:d2:84:75:4e:c5:e7:4c:df:1a:da:
fc:86:d2:c9:8d:96:2a:a7:d1:27:43:10:38:b7:67:ba:3a:2b:
fa:f3:a5:67:e2:36:fa:7c:41:f7:6b:aa:21:a5:a0:74:dc:00:
d4:c0:79:07:b6:6a:42:00:c0:91:e2:a9:28:77:3d:4f:21:9c:
51:b4:04:5a:94:fb:df:5c:2a:ab:21:90:e5:72:5b:4e:42:a9:
53:0c:34:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENEQjMxMTAvBgNVBAUTKDYzQTI5QUJEODdGNEExRkU1NUNCRjJBMEY0MDk3NTBB
QzM0QUMyMzUwHhcNMjYxMDA1MDMwOTU0WhcNMjYxMDEyMDMwOTU0WjAYMRYwFAYD
VQQDEw02YWMzMTUwMi1jYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDmO2a/VtDJyzrsGRFZMe/AXL3rOx1zGlivq6sGxKjLkLradzSUAa7zecnrO
VNrj+lZsE/SLOrW9y5lmW9L4yTVBG6CSgYvE95vt+nXvaDLpPH4a69whHN1i7bDG
l4TnfbjKlpQt8c4TmD+jiU3NplIde64bZ5aHFiUaTSXh+zUVX2iZambOMNogcft0
ht2dNPnoSB2Yf35CbG74zEvrsGwQrVfQ+4LxK/n0a9lU/y/j1+HjYNjRKgzcuo9c
kWMdGGypHCVbW6A7MbA7W804LLdHWw4mX7eywYhmYvO1+OL88jvKn27hM9JMwGUo
UYb4v5GgsmB8LioPxjURJFsx0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8tc0H4
R8L7kxkFBnETYgibrnDgMB8GA1UdIwQYMBaAFGOimr2H9KH+VcvyoPQJdQrDSsI1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0RCMy85MzA1RDJFMDgy
QUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9mNVZ5X0tnOUFsMUNzTkt3
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0RCMy85MzA1RDJFMDgyQUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9m
NVZ5X0tnOUFsMUNzTkt3alUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe/O5NhFlH8QSHOHLXyjrvJL/0ZT4rY9P5zJR2jc3yorhsq3AOSkVgdnu62r8
TYy46CEKH+PmFEdRGJl7N3fWrOpa4D/h6AQywUrecfaHes6RTABIdim2yQY5+qg2
A2qqa+O40YMCDjiQ3Rbidva6AGWZ80UrQGi1oVsGIIdvK5nrjAp5Y8ai6oHB3RWJ
jleeO5SaAfvJl3nX28aWERXJ86yskxsDbNkskXLShHVOxedM3xra/IbSyY2WKqfR
J0MQOLdnujor+vOlZ+I2+nxB92uqIaWgdNwA1MB5B7ZqQgDAkeKpKHc9TyGcUbQE
WpT731wqqyGQ5XJbTkKpUww0uA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:35:07 2026 by rpki-client