
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier: h5c3EkReRVGA0OdRZOTJKQWDMLzJnbL2OX732XMF5Ic=
Subject key identifier: 66:B0:07:D5:98:B1:6A:39:F8:02:5A:B4:15:82:A9:9B:76:67:58:F8
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial: 0EED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number: 0EE1
Signing time: Tue 18 Aug 2026 17:52:59 +0000
Manifest this update: Tue 18 Aug 2026 17:52:58 +0000
Manifest next update: Tue 25 Aug 2026 17:52:58 +0000
Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: WxItH/Dwfp3h6C/sTZKBysnW3gQeaNqs1L3+Qzxu6qg=)
2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: UPi+EXP3M++eU/SlCZMA1QlfPjsM5dTJBEKasdPEKHs=)
3: BA55D63C415311F1A8AAFB3BCA833773.roa (hash: 5c6lk8zZg9JDdCtbr0MwnxF7u7fQcm0RumOai6GNeD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3821 (0xeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Validity
Not Before: Aug 18 17:52:58 2026 GMT
Not After : Aug 25 17:52:58 2026 GMT
Subject: CN=6a849bfb-7aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:59:31:ad:8b:c9:bc:1b:89:71:9c:bc:90:
1d:36:2f:80:9c:19:21:6b:bf:cd:10:c9:37:24:d8:
1c:79:2e:9b:84:29:ef:16:1e:ee:6f:3b:a3:10:ea:
56:d8:46:08:88:cd:80:35:80:e9:20:23:c4:97:94:
70:fe:25:fa:a8:2e:44:06:4a:e1:a2:76:59:a3:b6:
aa:79:83:2d:b5:2b:23:dd:3b:89:ec:22:8f:bb:59:
a5:5b:de:6a:87:fd:02:c7:81:c7:62:3a:81:66:18:
06:bc:df:00:14:d6:9c:f7:38:db:90:d1:01:e5:a7:
8c:e9:7f:fe:2e:aa:ce:74:c9:20:8e:7c:89:c8:47:
62:5e:ea:6e:29:aa:a5:17:2f:47:6f:8f:51:eb:9a:
f7:1c:7f:66:45:64:7a:bf:e0:9a:83:2a:8a:60:cc:
fb:04:b9:5a:8c:96:7b:f2:c6:46:69:b7:6f:68:72:
bd:da:8a:7b:aa:11:dd:4e:3e:02:0c:8a:1e:f4:8b:
d7:19:17:da:7e:d5:63:87:af:86:11:26:56:ba:31:
ec:62:4a:56:7e:eb:da:b4:ca:2a:fe:83:5a:48:06:
4c:f5:36:2b:45:18:8a:1d:b7:5e:e0:68:1c:1f:a4:
d1:96:28:b5:38:42:3b:f1:d3:3e:fb:81:6b:f9:75:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:07:D5:98:B1:6A:39:F8:02:5A:B4:15:82:A9:9B:76:67:58:F8
X509v3 Authority Key Identifier:
keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:95:4e:29:98:31:00:db:17:44:96:f5:9c:50:28:77:5d:71:
74:f0:45:9b:6b:da:c2:40:59:7d:9d:d3:16:72:0b:f4:58:69:
7f:fb:cf:5c:13:dc:48:b9:77:e0:4f:43:43:59:af:a3:ae:54:
2e:95:d9:56:0d:e8:93:36:e7:86:a0:e1:9c:5f:ee:71:1c:1e:
66:a2:91:27:b5:b3:19:36:53:55:f1:be:d3:98:08:73:f5:b9:
de:52:ad:79:c6:e9:ce:d0:c8:e8:0f:0f:8a:83:04:38:95:24:
7e:17:1c:3a:32:86:d6:6a:c6:eb:46:30:f6:83:f2:17:a7:3f:
c6:e1:f6:82:3c:a7:ab:f1:9d:bd:9d:3d:5d:6e:99:74:59:fe:
d5:9d:b9:77:4d:94:19:37:90:0c:7a:9a:8e:3e:09:42:2a:92:
33:f3:89:a4:3f:70:ef:d5:e2:da:59:b2:74:ed:11:f1:73:e1:
da:ad:cf:92:94:cf:bc:6a:7e:80:de:f8:b2:00:9d:34:05:21:
0f:45:a4:2d:13:6a:8e:06:bd:53:ee:17:43:bf:4c:e5:81:1d:
fa:18:42:0a:52:0d:4c:6f:26:4b:f7:6b:e5:00:f2:b4:a2:5e:
11:3c:68:72:b5:e7:d7:76:1d:a8:d4:89:f7:bb:76:7b:c8:fe:
54:76:0b:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF
M0UyMjc4ODcwHhcNMjYwODE4MTc1MjU4WhcNMjYwODI1MTc1MjU4WjAYMRYwFAYD
VQQDEw02YTg0OWJmYi03YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0S5ZMa2LybwbiXGcvJAdNi+AnBkha7/NEMk3JNgceS6bhCnvFh7ubzujEOpW
2EYIiM2ANYDpICPEl5Rw/iX6qC5EBkrhonZZo7aqeYMttSsj3TuJ7CKPu1mlW95q
h/0Cx4HHYjqBZhgGvN8AFNac9zjbkNEB5aeM6X/+LqrOdMkgjnyJyEdiXupuKaql
Fy9Hb49R65r3HH9mRWR6v+CagyqKYMz7BLlajJZ78sZGabdvaHK92op7qhHdTj4C
DIoe9IvXGRfaftVjh6+GESZWujHsYkpWfuvatMoq/oNaSAZM9TYrRRiKHbde4Ggc
H6TRlii1OEI78dM++4Fr+XUOkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGawB9WY
sWo5+AJatBWCqZt2Z1j4MB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF
QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3
NEJvY08zZFFJY2pqNGllSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtZVOKZgxANsXRJb1nFAod11xdPBFm2vawkBZfZ3TFnIL9Fhpf/vPXBPcSLl3
4E9DQ1mvo65ULpXZVg3okzbnhqDhnF/ucRweZqKRJ7WzGTZTVfG+05gIc/W53lKt
ecbpztDI6A8PioMEOJUkfhccOjKG1mrG60Yw9oPyF6c/xuH2gjynq/GdvZ09XW6Z
dFn+1Z25d02UGTeQDHqajj4JQiqSM/OJpD9w79Xi2lmydO0R8XPh2q3PkpTPvGp+
gN74sgCdNAUhD0WkLRNqjga9U+4XQ79M5YEd+hhCClINTG8mS/dr5QDytKJeETxo
crXn13YdqNSJ97t2e8j+VHYLBg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:17 2026 by rpki-client