
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json)
Hash identifier: QXEA4T/kLZhiFNkwcfc21mCwlz88NP7jvppZuwvPRJU=
Subject key identifier: B9:1A:E9:C4:43:B5:6A:75:58:96:C3:F2:95:50:0D:29:A9:F1:D9:EA
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
Manifest number: DD
Signing time: Sat 07 Mar 2026 05:59:24 +0000
Manifest this update: Sat 07 Mar 2026 05:59:23 +0000
Manifest next update: Sat 14 Mar 2026 05:59:23 +0000
Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: AQvnwaDDnIxQE//6B/F7ntRS/zWC1xIL1FnZv8OAtmE=)
2: 5CBA651212B211F19AC313AEB5EE528E.roa (hash: OY4Fet8xm/rFRe8wVg+u3YFnbkKRJHlvjCIrVFg7MQ4=)
3: 5DB76F8212B211F19AC313AEB5EE528E.roa (hash: 2NaYNjJ6qjcaM0sXuJIClT+/B4+Xci+4D5hsnMlJddw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 05:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Validity
Not Before: Mar 7 05:59:23 2026 GMT
Not After : Mar 14 05:59:23 2026 GMT
Subject: CN=69abbebc-0fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:d0:b1:46:39:06:c5:f9:2d:10:ba:be:d6:
9f:fd:81:04:44:c2:23:36:4b:f4:05:b1:fc:b7:76:
cb:50:f5:2a:de:fa:4b:4e:a9:b5:a5:39:93:99:7c:
d4:77:84:04:4f:10:3e:23:08:4d:0d:a7:56:1f:00:
de:d8:f5:45:5d:a1:6f:8c:56:d2:8c:25:44:d0:0e:
e1:74:f7:a4:f2:59:f6:ec:50:07:58:c5:80:34:d7:
e8:f0:3e:56:05:3e:c6:97:40:7b:92:4a:73:3f:dc:
22:b4:03:cf:19:6d:7b:bb:7b:10:ad:6d:72:ee:7e:
1a:c7:31:73:d9:a7:ba:44:38:57:39:95:0a:d2:1b:
3a:c8:8c:00:41:8f:62:72:aa:41:9b:08:90:ad:3e:
e6:c1:76:41:5b:8b:db:8d:99:53:e3:dc:d2:ba:c6:
06:5b:db:c2:db:80:0e:33:82:9e:9a:c1:5a:97:7d:
56:fc:25:72:71:0c:75:ef:bb:48:38:91:51:2e:9a:
3f:79:6d:ad:73:b5:db:1b:cb:5e:74:04:6e:d9:81:
69:f0:58:96:b4:9c:21:13:fa:d4:f2:94:ac:0e:f2:
cb:95:cf:5d:ed:fa:86:bc:0a:79:5f:a7:46:ed:00:
e2:52:30:21:5c:dc:0e:29:a1:0a:da:df:9c:9e:00:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1A:E9:C4:43:B5:6A:75:58:96:C3:F2:95:50:0D:29:A9:F1:D9:EA
X509v3 Authority Key Identifier:
keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c9:43:5d:45:08:c3:2c:3a:35:a2:15:74:6c:4c:e0:d1:5a:
02:f9:d9:9a:e5:1c:38:2b:aa:1d:0b:49:b7:3d:11:3c:54:d2:
2b:2e:76:f4:83:e2:ce:3f:72:3e:4f:d1:25:17:c9:a4:41:0d:
da:9f:a3:4c:be:7c:01:f7:de:82:99:c4:83:91:61:2d:ae:aa:
8e:77:a8:cf:20:f0:5f:fb:f5:60:f2:cf:be:2b:51:40:3c:86:
3c:a6:27:8a:2e:6d:7e:d5:28:c0:98:dd:d8:e5:22:cc:53:52:
a7:93:dc:37:b1:e9:26:4c:3d:e3:03:fa:88:2a:d5:68:f1:ae:
fd:39:73:7f:64:a6:38:ea:a5:fc:8b:74:b7:c1:95:ed:67:b5:
1e:a9:7f:48:ea:49:33:39:99:dc:7c:e9:ec:42:71:6d:0d:4e:
fc:84:76:bb:39:2b:57:01:ea:d1:11:7b:f6:53:50:5e:32:fd:
22:07:c6:e6:97:5d:02:87:44:4d:61:9f:ad:a4:9e:0c:d3:c1:
7e:e0:ed:99:c0:19:d5:34:ec:68:49:c6:3f:9e:7b:47:65:25:
cf:a0:86:8c:de:65:64:0c:38:7f:d3:c9:0f:ff:c8:82:77:22:
b4:d6:e4:37:f4:90:73:7a:9f:41:16:2c:f6:3d:d7:f6:ce:84:
d9:46:10:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxMDMxMTAvBgNVBAUTKDYwMzFEMDYwMUQ1QzJEODdBRDY2MjM2MUU2M0JGRkQ5
MUUwNDA3MzMwHhcNMjYwMzA3MDU1OTIzWhcNMjYwMzE0MDU1OTIzWjAYMRYwFAYD
VQQDEw02OWFiYmViYy0wZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXfQsUY5BsX5LRC6vtaf/YEERMIjNkv0BbH8t3bLUPUq3vpLTqm1pTmTmXzU
d4QETxA+IwhNDadWHwDe2PVFXaFvjFbSjCVE0A7hdPek8ln27FAHWMWANNfo8D5W
BT7Gl0B7kkpzP9witAPPGW17u3sQrW1y7n4axzFz2ae6RDhXOZUK0hs6yIwAQY9i
cqpBmwiQrT7mwXZBW4vbjZlT49zSusYGW9vC24AOM4KemsFal31W/CVycQx177tI
OJFRLpo/eW2tc7XbG8tedARu2YFp8FiWtJwhE/rU8pSsDvLLlc9d7fqGvAp5X6dG
7QDiUjAhXNwOKaEK2t+cngC9xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLka6cRD
tWp1WJbD8pVQDSmp8dnqMB8GA1UdIwQYMBaAFGAx0GAdXC2HrWYjYeY7/9keBAcz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODEwMy85M0RDNzU0RURF
MDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZZXRaaU5oNWp2XzJSNEVC
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODEwMy85M0RDNzU0RURFMDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZ
ZXRaaU5oNWp2XzJSNEVCek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATslDXUUIwyw6NaIVdGxM4NFaAvnZmuUcOCuqHQtJtz0RPFTSKy529IPizj9y
Pk/RJRfJpEEN2p+jTL58AffegpnEg5FhLa6qjneozyDwX/v1YPLPvitRQDyGPKYn
ii5tftUowJjd2OUizFNSp5PcN7HpJkw94wP6iCrVaPGu/Tlzf2SmOOql/It0t8GV
7We1Hql/SOpJMzmZ3Hzp7EJxbQ1O/IR2uzkrVwHq0RF79lNQXjL9IgfG5pddAodE
TWGfraSeDNPBfuDtmcAZ1TTsaEnGP557R2Ulz6CGjN5lZAw4f9PJD//IgncitNbk
N/SQc3qfQRYs9j3X9s6E2UYQgw==
-----END CERTIFICATE-----
Generated at Sun Mar 8 01:35:31 2026 by rpki-client