
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json)
Hash identifier: 3wCqPyQNsWqs4EEuud2w0NkkygAP8bYuIMnbEtlECmM=
Subject key identifier: 15:0E:4C:73:A9:91:7A:9A:32:E0:74:52:23:9F:DA:C7:CC:FF:B1:B8
Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
Manifest number: 0183
Signing time: Tue 03 Mar 2026 04:12:38 +0000
Manifest this update: Tue 03 Mar 2026 04:12:38 +0000
Manifest next update: Tue 10 Mar 2026 04:12:38 +0000
Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: oEdY4U26bQGo6nM891Y8kIhjgp1DEG62nOFttxjkGQw=)
2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: bftdBso1mml0Q1/+cWJpkSjMix1VwOHFqUWRrzEzQoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Validity
Not Before: Mar 3 04:12:38 2026 GMT
Not After : Mar 10 04:12:38 2026 GMT
Subject: CN=69a65fb6-e8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:d6:9d:0b:ab:fd:2b:d5:34:12:ab:2d:cb:
50:20:d1:2d:c0:2f:21:d1:2a:25:e0:5a:ff:cc:b0:
25:62:cd:9e:af:74:6a:88:84:78:bc:2c:35:9d:34:
8b:fd:b3:57:2e:9c:ee:45:74:15:56:4b:fc:e9:1f:
b9:a7:22:5f:7d:fe:7b:db:26:b9:53:f6:cc:7a:3d:
8f:c3:83:50:40:5b:64:c0:62:91:47:ef:94:21:26:
1c:fa:71:01:33:56:60:6e:e6:ed:ce:35:27:f6:41:
b7:49:aa:e9:f5:e0:be:b3:c4:00:b2:2e:db:ee:56:
91:fe:99:06:d2:87:84:c6:91:81:d8:c6:f2:08:2b:
53:6f:b1:f5:99:8c:8a:df:40:b7:d5:c3:c5:ab:b1:
c6:d6:53:d0:43:b8:b3:0a:7b:9a:cc:b5:87:23:a9:
6d:5d:0a:49:99:e9:b4:0a:ab:82:7c:64:e3:b1:c5:
14:7c:6b:45:f3:61:29:2e:f5:3d:c3:87:50:c8:39:
45:95:01:0b:39:b3:54:15:2e:85:52:92:c5:14:13:
a4:04:77:08:b2:ba:b5:79:37:e1:37:c7:58:aa:01:
7b:1e:96:d3:cc:16:49:ec:a5:c9:51:59:5d:d9:15:
34:2d:32:fe:04:70:d3:ce:9f:35:13:55:a3:b9:9b:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:4C:73:A9:91:7A:9A:32:E0:74:52:23:9F:DA:C7:CC:FF:B1:B8
X509v3 Authority Key Identifier:
keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a7:20:44:0d:c0:76:a4:27:d6:c2:79:2a:65:57:5f:ae:d0:
20:b1:71:b8:dd:99:02:17:69:de:65:be:a3:6c:25:c2:8a:73:
16:dd:c1:ab:a4:e6:f2:b1:0e:bb:8b:30:80:a8:06:5d:de:df:
ac:4c:97:99:b8:2f:be:26:cb:bb:f4:2b:53:fd:c6:0d:f2:55:
81:5f:20:b1:0a:80:f0:29:e7:fd:95:3e:e1:4a:ae:ea:ea:b6:
91:5d:90:b0:a4:c5:a4:22:60:52:06:52:a8:ae:30:85:06:b9:
73:8e:31:5a:62:3c:83:0c:27:25:fc:ed:ce:0d:d8:cb:d8:59:
b7:c5:eb:de:ee:98:8c:37:1a:68:b2:d3:d4:a1:48:37:c1:4b:
2e:c5:db:5e:93:69:1e:aa:97:e6:bc:88:cd:97:11:8d:ff:1e:
3b:bb:7b:ba:48:67:8c:8f:cd:b7:19:44:06:60:b9:97:e4:d5:
4d:cb:84:bd:ee:b8:43:20:0e:f9:66:cb:c5:51:24:b4:9a:ff:
55:ad:52:12:67:19:88:fd:8a:d9:2a:a0:ef:3f:c7:d4:89:ca:
ac:e2:28:3c:53:2f:02:70:ba:27:de:d1:be:f6:9b:1f:13:e7:
76:86:80:40:28:c0:54:95:1b:84:c5:99:7c:f4:b4:96:65:dc:
13:42:83:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFCRUYxMTAvBgNVBAUTKDYxOTA0MEU4MzVCQUQzRENGNUMyMDEzOTZEODU3MTk5
NUE3QUNDNTAwHhcNMjYwMzAzMDQxMjM4WhcNMjYwMzEwMDQxMjM4WjAYMRYwFAYD
VQQDEw02OWE2NWZiNi1lOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvujWnQur/SvVNBKrLctQINEtwC8h0Sol4Fr/zLAlYs2er3RqiIR4vCw1nTSL
/bNXLpzuRXQVVkv86R+5pyJfff572ya5U/bMej2Pw4NQQFtkwGKRR++UISYc+nEB
M1ZgbubtzjUn9kG3Sarp9eC+s8QAsi7b7laR/pkG0oeExpGB2MbyCCtTb7H1mYyK
30C31cPFq7HG1lPQQ7izCnuazLWHI6ltXQpJmem0CquCfGTjscUUfGtF82EpLvU9
w4dQyDlFlQELObNUFS6FUpLFFBOkBHcIsrq1eTfhN8dYqgF7HpbTzBZJ7KXJUVld
2RU0LTL+BHDTzp81E1WjuZvSlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUOTHOp
kXqaMuB0UiOf2sfM/7G4MB8GA1UdIwQYMBaAFGGQQOg1utPc9cIBOW2FcZlaesxQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DMDc2NDU3MkNC
MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5ejF3Z0U1YllWeG1WcDZ6
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUJFRi9DMDc2NDU3MkNCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5
ejF3Z0U1YllWeG1WcDZ6RkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACacgRA3AdqQn1sJ5KmVXX67QILFxuN2ZAhdp3mW+o2wlwopzFt3Bq6Tm8rEO
u4swgKgGXd7frEyXmbgvvibLu/QrU/3GDfJVgV8gsQqA8Cnn/ZU+4Uqu6uq2kV2Q
sKTFpCJgUgZSqK4whQa5c44xWmI8gwwnJfztzg3Yy9hZt8Xr3u6YjDcaaLLT1KFI
N8FLLsXbXpNpHqqX5ryIzZcRjf8eO7t7ukhnjI/NtxlEBmC5l+TVTcuEve64QyAO
+WbLxVEktJr/Va1SEmcZiP2K2Sqg7z/H1InKrOIoPFMvAnC6J97RvvabHxPndoaA
QCjAVJUbhMWZfPS0lmXcE0KD7A==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:39:59 2026 by rpki-client