
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json)
Hash identifier: KVclgvfSBYG8Eu2ZzGHvK0jIl3AVyqFysOFUG97RRDA=
Subject key identifier: CA:96:23:69:C7:B1:81:4C:52:F0:D5:69:35:1D:89:3D:5B:0B:F0:F5
Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
Manifest number: 0267
Signing time: Sat 03 Oct 2026 02:47:00 +0000
Manifest this update: Sat 03 Oct 2026 02:47:00 +0000
Manifest next update: Sat 10 Oct 2026 02:47:00 +0000
Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: rG22hVhIM8GSPgDReP7Owdjaztea/HEt4E2OaqQ+g/Y=)
2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: eUUNKS3leO4SuCkzwOPZ3F1oSC29MK69H4eqF/HLvjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Validity
Not Before: Oct 3 02:47:00 2026 GMT
Not After : Oct 10 02:47:00 2026 GMT
Subject: CN=6ac06ca4-6964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:c8:3f:93:e4:34:d8:05:ac:ad:e6:d0:b4:
3e:82:19:b0:f6:1d:b1:c4:57:1a:3a:51:f4:f6:89:
63:06:94:30:e2:e5:db:07:7e:b9:aa:95:62:0c:9e:
d0:7f:79:d5:e6:39:37:4d:90:a7:fa:7e:5c:09:e7:
7c:66:15:c2:fc:d8:0d:2c:bd:54:47:90:8e:57:9f:
4d:d4:63:39:6e:22:72:78:9c:43:ce:06:0b:70:7c:
91:5e:1b:bd:e4:65:d1:86:e3:cb:ec:a1:e5:3a:0f:
bd:19:7e:81:6e:f5:82:3e:50:09:d9:1f:07:c2:51:
a0:92:3c:4d:b4:3c:90:28:32:69:ff:af:e8:59:34:
8c:f6:f0:a9:35:6d:9e:52:ef:37:29:f1:5c:ab:55:
c7:76:da:ec:92:8f:5f:ec:bf:ea:54:c0:ea:0c:bd:
1a:ef:50:9d:90:6a:dc:2d:34:88:ce:34:fe:15:74:
f7:4e:81:45:29:06:c3:3e:ec:c8:6e:0f:d9:2f:ab:
40:c2:95:04:73:28:45:e2:c1:f1:d9:e5:50:21:4d:
74:24:b3:17:bf:52:51:4f:fa:31:f5:d4:c4:bc:1e:
c6:79:fe:a0:82:b2:07:ae:79:6b:c3:b2:3e:49:08:
61:7d:87:63:95:ae:b1:8a:5d:d4:9c:6d:47:c1:7f:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:23:69:C7:B1:81:4C:52:F0:D5:69:35:1D:89:3D:5B:0B:F0:F5
X509v3 Authority Key Identifier:
keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:4d:b5:db:c2:f3:04:35:c1:b7:b8:a1:0d:c4:15:7a:89:81:
f5:79:4b:c7:5d:48:3c:76:41:68:9a:59:7f:45:3b:a3:b2:cf:
49:78:cb:0b:c5:57:08:77:3f:69:08:cc:a2:67:3b:79:88:70:
c4:ab:1b:42:f6:01:a3:5f:4e:c9:b8:a4:f4:0c:ae:2f:2d:85:
b6:ee:35:23:3d:e4:0e:77:c3:59:a4:8d:81:66:ab:e0:bf:ae:
11:7b:06:c9:5b:e5:9d:b0:c1:4f:fa:79:35:4d:d8:f6:67:38:
31:20:b0:82:8d:06:86:4e:fc:07:a9:24:06:d4:e5:b1:66:d9:
7f:81:f1:90:e2:be:34:45:b0:75:b4:ff:70:d8:e8:43:bd:bf:
59:18:3e:f6:89:e8:57:d2:8c:56:ce:1a:c2:20:15:92:6a:80:
6a:6a:98:5b:c6:04:3e:27:d2:fb:9c:54:e9:1a:21:f3:5f:5e:
eb:a5:87:5e:67:b9:00:cc:43:95:c5:bb:5d:f3:c6:48:74:9d:
82:0e:fe:19:78:04:a4:d7:56:d1:1c:2c:d0:d4:c2:34:11:e2:
b5:96:4b:ee:63:e2:9b:2f:77:2f:99:0a:bd:a8:34:f1:7e:16:
a7:5a:79:5b:e6:7b:10:41:bb:be:b8:16:aa:7e:08:bd:67:bb:
87:e8:9a:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx
MDNERkQ1RTMwHhcNMjYxMDAzMDI0NzAwWhcNMjYxMDEwMDI0NzAwWjAYMRYwFAYD
VQQDEw02YWMwNmNhNC02OTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu67IP5PkNNgFrK3m0LQ+ghmw9h2xxFcaOlH09oljBpQw4uXbB365qpViDJ7Q
f3nV5jk3TZCn+n5cCed8ZhXC/NgNLL1UR5COV59N1GM5biJyeJxDzgYLcHyRXhu9
5GXRhuPL7KHlOg+9GX6BbvWCPlAJ2R8HwlGgkjxNtDyQKDJp/6/oWTSM9vCpNW2e
Uu83KfFcq1XHdtrsko9f7L/qVMDqDL0a71CdkGrcLTSIzjT+FXT3ToFFKQbDPuzI
bg/ZL6tAwpUEcyhF4sHx2eVQIU10JLMXv1JRT/ox9dTEvB7Gef6ggrIHrnlrw7I+
SQhhfYdjla6xil3UnG1HwX/BuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqWI2nH
sYFMUvDVaTUdiT1bC/D1MB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC
RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTgzQi81QUYwNDE5QzFCRTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZt
Y2JGaVRtT3JiMmdRUGYxZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY02128LzBDXBt7ihDcQVeomB9XlLx11IPHZBaJpZf0U7o7LPSXjLC8VXCHc/
aQjMomc7eYhwxKsbQvYBo19Oybik9AyuLy2Ftu41Iz3kDnfDWaSNgWar4L+uEXsG
yVvlnbDBT/p5NU3Y9mc4MSCwgo0Ghk78B6kkBtTlsWbZf4HxkOK+NEWwdbT/cNjo
Q72/WRg+9onoV9KMVs4awiAVkmqAamqYW8YEPifS+5xU6Roh819e66WHXme5AMxD
lcW7XfPGSHSdgg7+GXgEpNdW0Rws0NTCNBHitZZL7mPimy93L5kKvag08X4Wp1p5
W+Z7EEG7vrgWqn4IvWe7h+ia7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:11:58 2026 by rpki-client