
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
File: yPWXElLMBM4--LZy7nTid7LM1hU.mft (raw, json)
Hash identifier: e4jioYW1g0yBrns5oXZtWy5GZZdgiJzqvl9mpM+3fd0=
Subject key identifier: 3D:0B:C6:79:2A:89:37:89:9D:03:1F:65:5D:E9:C6:1F:E0:CE:FA:58
Authority key identifier: C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
Certificate issuer: /CN=A91F72E2/serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
Manifest number: CC
Signing time: Mon 05 Oct 2026 07:09:40 +0000
Manifest this update: Mon 05 Oct 2026 07:09:39 +0000
Manifest next update: Mon 12 Oct 2026 07:09:39 +0000
Files and hashes: 1: yPWXElLMBM4--LZy7nTid7LM1hU.crl (hash: 5TkpyZWb61R9e2ZPnvR3Jsm+IfMmei1wTpm+Ad3SDyI=)
2: 13542BE28C9311F099562747C4F9AE02.roa (hash: g3qHGchC2MRE6maT5MMTBcDZRfr2ovCWYxvhahEPRjk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl
rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F72E2, serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Validity
Not Before: Oct 5 07:09:39 2026 GMT
Not After : Oct 12 07:09:39 2026 GMT
Subject: CN=6ac34d34-b749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:1f:2f:89:32:0d:27:dd:f6:48:ec:34:7c:
06:be:df:36:84:e7:2c:fd:11:dc:b1:7f:69:5e:fc:
8b:9f:74:0c:f4:da:37:60:0a:32:8e:a5:df:83:79:
50:b7:91:9a:2d:b1:81:14:63:49:4d:70:8a:49:68:
3f:a5:5f:cd:29:57:be:b9:6d:89:0b:b2:d8:74:f6:
a0:9d:e2:a5:0d:b5:02:56:58:cc:84:df:b1:50:36:
bd:b2:54:56:b8:ec:a8:29:1f:30:8d:3e:ce:71:d0:
94:50:25:23:fe:84:1f:08:77:35:44:e5:d7:14:7b:
bd:87:71:f9:88:95:c4:08:5e:09:fd:cb:5f:2d:7b:
c8:5c:cb:8d:6d:4f:ed:cf:e8:92:e4:f3:42:10:8f:
d8:3c:3b:38:4d:f4:4b:cb:ed:33:cb:70:ca:05:74:
36:1d:7f:b3:4d:48:4e:5a:af:89:8c:99:ed:0d:5e:
5f:23:ab:54:aa:11:08:b5:82:c9:24:43:c1:ed:ab:
ad:af:5a:98:3e:86:77:a7:02:30:ae:c2:37:a5:6b:
be:64:76:1a:d8:76:2f:9f:54:f4:61:c0:8d:2d:da:
3e:22:81:7a:41:2f:27:88:6c:3d:87:1f:b7:84:d1:
fe:2f:fb:cb:3a:92:cc:fe:c9:4a:71:78:bd:a3:47:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0B:C6:79:2A:89:37:89:9D:03:1F:65:5D:E9:C6:1F:E0:CE:FA:58
X509v3 Authority Key Identifier:
keyid:C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4b:2e:46:12:e3:bb:be:47:34:08:ce:af:68:57:74:2a:9a:
08:80:d7:ac:75:77:f1:99:7c:86:40:45:28:8f:fc:c3:c7:3a:
63:c0:bf:e7:21:40:37:44:6b:1f:1d:77:7a:cb:99:55:b7:4c:
a4:3b:18:d8:94:3c:43:9b:3f:11:81:1e:75:f3:55:08:7d:03:
b6:2e:8d:f2:e4:44:90:85:1a:e4:60:b3:12:02:85:69:28:ba:
e3:bc:b0:7c:ff:59:4a:72:55:c5:65:1c:70:66:ec:3b:ff:81:
10:ec:3a:8c:bc:36:75:95:4d:f0:93:45:60:25:37:5a:67:ce:
58:f2:c6:f8:90:00:c1:cf:0d:71:64:a7:5a:1f:3c:ac:3c:da:
3d:7d:fc:0f:e4:f1:0f:3b:8f:99:ce:e0:c6:77:a7:b2:24:90:
80:c1:ee:11:a2:2a:e6:45:d6:e9:9a:40:7f:a1:a5:b0:0b:0f:
74:bf:57:89:b8:d7:53:cd:86:9b:4c:f9:1e:15:cb:04:b6:dd:
0f:af:e3:af:06:61:f8:8d:e0:93:b6:00:cc:18:cf:01:b6:8e:
d1:f5:ba:63:b7:79:37:39:d0:0b:72:13:01:f4:33:ac:da:18:
f2:97:97:7d:a7:66:c0:ae:5a:84:14:77:03:cf:f0:83:20:40:
d7:a4:59:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjcyRTIxMTAvBgNVBAUTKEM4RjU5NzEyNTJDQzA0Q0UzRUY4QjY3MkVFNzRFMjc3
QjJDQ0Q2MTUwHhcNMjYxMDA1MDcwOTM5WhcNMjYxMDEyMDcwOTM5WjAYMRYwFAYD
VQQDEw02YWMzNGQzNC1iNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCgfL4kyDSfd9kjsNHwGvt82hOcs/RHcsX9pXvyLn3QM9No3YAoyjqXfg3lQ
t5GaLbGBFGNJTXCKSWg/pV/NKVe+uW2JC7LYdPagneKlDbUCVljMhN+xUDa9slRW
uOyoKR8wjT7OcdCUUCUj/oQfCHc1ROXXFHu9h3H5iJXECF4J/ctfLXvIXMuNbU/t
z+iS5PNCEI/YPDs4TfRLy+0zy3DKBXQ2HX+zTUhOWq+JjJntDV5fI6tUqhEItYLJ
JEPB7autr1qYPoZ3pwIwrsI3pWu+ZHYa2HYvn1T0YcCNLdo+IoF6QS8niGw9hx+3
hNH+L/vLOpLM/slKcXi9o0dGuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0Lxnkq
iTeJnQMfZV3pxh/gzvpYMB8GA1UdIwQYMBaAFMj1lxJSzATOPvi2cu504neyzNYV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzJFMi9DNkExRjIwQThD
OEYxMUYwOTQyM0YxMTlDNEY5QUUwMi95UFdYRWxMTUJNNC0tTFp5N25UaWQ3TE0x
aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lQV1hFbExNQk00LS1MWnk3blRpZDdMTTFoVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzJFMi9DNkExRjIwQThDOEYxMUYwOTQyM0YxMTlDNEY5QUUwMi95UFdYRWxMTUJN
NC0tTFp5N25UaWQ3TE0xaFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbUsuRhLju75HNAjOr2hXdCqaCIDXrHV38Zl8hkBFKI/8w8c6Y8C/5yFAN0Rr
Hx13esuZVbdMpDsY2JQ8Q5s/EYEedfNVCH0Dti6N8uREkIUa5GCzEgKFaSi647yw
fP9ZSnJVxWUccGbsO/+BEOw6jLw2dZVN8JNFYCU3WmfOWPLG+JAAwc8NcWSnWh88
rDzaPX38D+TxDzuPmc7gxnensiSQgMHuEaIq5kXW6ZpAf6GlsAsPdL9XibjXU82G
m0z5HhXLBLbdD6/jrwZh+I3gk7YAzBjPAbaO0fW6Y7d5NznQC3ITAfQzrNoY8peX
fadmwK5ahBR3A8/wgyBA16RZwQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:56 2026 by rpki-client