
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json)
Hash identifier: 56hyH8cqxiBT60CItbocwbdM/F21R3iBlVMO2xIcDkU=
Subject key identifier: 27:6C:32:62:36:10:EC:44:AB:9C:C3:08:27:3D:89:FE:21:AD:F0:CF
Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Certificate serial: 0D1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
Manifest number: 0D0A
Signing time: Sat 04 Apr 2026 18:00:43 +0000
Manifest this update: Sat 04 Apr 2026 18:00:43 +0000
Manifest next update: Sat 11 Apr 2026 18:00:43 +0000
Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: V5TalBiknx1zq4Td0HMDcqxBpa5UyySa6H829KknTZo=)
2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: r6NMGYsxb0CTrW+33MllDccXL4xyxMC+FjKpakw8GUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3356 (0xd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Validity
Not Before: Apr 4 18:00:43 2026 GMT
Not After : Apr 11 18:00:43 2026 GMT
Subject: CN=69d151cb-5e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:b0:90:c0:ee:7a:77:01:20:bf:95:f4:ae:
69:a7:ae:5e:67:51:39:1b:e2:70:81:f5:f1:1a:8c:
67:8c:a4:ab:bc:95:b9:6c:22:4a:a8:bc:67:db:14:
1d:b4:21:db:b2:3f:3b:dd:78:bd:a5:30:30:d6:5c:
1f:ac:9c:1f:c7:90:af:d1:93:7c:3b:07:c5:97:16:
c1:70:53:70:7e:d2:4f:32:76:53:06:ea:61:17:6d:
8e:95:ce:ed:88:ce:80:69:40:a7:11:31:73:92:6d:
37:7c:d2:ce:4c:ba:19:0c:d6:0b:67:a4:e6:f6:29:
03:4a:ac:cf:f1:c2:20:96:d4:e3:bd:cd:4c:e0:dd:
8f:e1:b5:52:26:80:e6:5d:a3:12:ca:fa:5d:57:4e:
64:d0:4b:85:f4:9d:9a:e5:aa:f3:a5:cc:05:fd:ac:
3f:8a:17:45:25:f6:a7:0c:a6:94:f4:52:7b:f0:cb:
a8:35:d7:b7:8a:00:12:c3:94:d4:de:2f:a8:13:a4:
01:70:9c:8f:e3:28:54:3b:ff:ee:4d:e5:cf:6f:64:
56:4b:5c:47:49:30:af:c1:92:ea:38:dc:0b:c9:a9:
f2:3a:fe:74:b8:46:c1:06:73:cf:e6:aa:33:a2:ea:
b0:42:c8:f6:01:b7:22:16:20:82:06:36:1e:8c:47:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:32:62:36:10:EC:44:AB:9C:C3:08:27:3D:89:FE:21:AD:F0:CF
X509v3 Authority Key Identifier:
keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:c2:c3:f7:18:d5:ae:ff:f8:04:36:04:fb:59:dc:ec:41:be:
5f:65:a5:0e:ac:e2:5d:22:63:ad:bb:75:bb:d4:c1:3d:94:d7:
bb:1b:42:60:24:96:12:89:0f:4b:af:47:a6:65:af:de:6e:82:
a5:a4:27:ab:79:4b:46:de:49:98:c1:9c:67:00:bd:70:c7:fc:
d0:b5:ae:41:cf:71:38:37:48:a3:40:38:0c:a0:0b:88:77:1b:
5a:a4:b1:7a:77:7b:ee:2f:f2:04:68:8f:11:ed:de:9c:78:51:
ac:b3:ba:e0:c2:bd:c1:a2:f0:e1:47:19:fd:5b:20:87:ec:d5:
c2:2c:a1:70:f5:20:3a:ca:48:84:ca:d0:2c:fd:73:06:e2:37:
85:c2:4b:90:82:1d:4e:d4:92:3f:ea:33:7e:70:e1:19:92:ca:
06:ae:8e:59:21:50:45:0c:9f:21:d8:0a:cc:8d:47:cb:d0:10:
1c:bb:ac:85:f8:75:02:62:a4:7d:0f:f4:b6:49:49:1c:d6:6a:
e0:8b:3c:5c:af:40:0d:61:48:92:21:73:1a:0b:9c:ee:fc:84:
85:4b:1e:bb:b5:88:2f:68:3f:8d:aa:85:dd:c3:b9:bd:b1:0f:
1d:d8:35:f1:74:6a:7d:fb:68:25:75:f8:1b:52:c9:18:13:a7:
fc:a1:3a:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx
ODQ1NzNERkUwHhcNMjYwNDA0MTgwMDQzWhcNMjYwNDExMTgwMDQzWjAYMRYwFAYD
VQQDEw02OWQxNTFjYi01ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0l6wkMDuencBIL+V9K5pp65eZ1E5G+JwgfXxGoxnjKSrvJW5bCJKqLxn2xQd
tCHbsj873Xi9pTAw1lwfrJwfx5Cv0ZN8OwfFlxbBcFNwftJPMnZTBuphF22Olc7t
iM6AaUCnETFzkm03fNLOTLoZDNYLZ6Tm9ikDSqzP8cIgltTjvc1M4N2P4bVSJoDm
XaMSyvpdV05k0EuF9J2a5arzpcwF/aw/ihdFJfanDKaU9FJ78MuoNde3igASw5TU
3i+oE6QBcJyP4yhUO//uTeXPb2RWS1xHSTCvwZLqONwLyanyOv50uEbBBnPP5qoz
ouqwQsj2AbciFiCCBjYejEc/YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdsMmI2
EOxEq5zDCCc9if4hrfDPMB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw
N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2
T2ZzajBzNnlJemNZUlhQZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJcLD9xjVrv/4BDYE+1nc7EG+X2WlDqziXSJjrbt1u9TBPZTXuxtCYCSWEokP
S69HpmWv3m6CpaQnq3lLRt5JmMGcZwC9cMf80LWuQc9xODdIo0A4DKALiHcbWqSx
end77i/yBGiPEe3enHhRrLO64MK9waLw4UcZ/Vsgh+zVwiyhcPUgOspIhMrQLP1z
BuI3hcJLkIIdTtSSP+ozfnDhGZLKBq6OWSFQRQyfIdgKzI1Hy9AQHLushfh1AmKk
fQ/0tklJHNZq4Is8XK9ADWFIkiFzGguc7vyEhUseu7WIL2g/jaqF3cO5vbEPHdg1
8XRqfftoJXX4G1LJGBOn/KE6Jw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:25 2026 by rpki-client