
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
File: _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json)
Hash identifier: jpBy/FJkd53KWx8n+Y4GRgaQ0+eaCkoXdmJMNLQN3gA=
Subject key identifier: 39:2A:2B:E8:F8:A3:2A:1E:6A:7F:10:96:36:02:46:72:50:E4:D3:33
Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
Manifest number: 0126
Signing time: Tue 11 Aug 2026 05:18:22 +0000
Manifest this update: Tue 11 Aug 2026 05:18:22 +0000
Manifest next update: Tue 18 Aug 2026 05:18:22 +0000
Files and hashes: 1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: y9ZZ0xn0JN40Im8evesRuuNHtpTwkqefJeR82de5gW8=)
2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: aRva8pGWfYj5DsMq3R40rv0MUtezzZywAbZ+BrpHCAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 05:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Validity
Not Before: Aug 11 05:18:22 2026 GMT
Not After : Aug 18 05:18:22 2026 GMT
Subject: CN=6a7ab09e-9c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:f2:a8:b5:0f:f3:15:73:a1:52:ac:95:36:
50:1e:02:95:0f:34:b6:92:95:cd:37:fe:be:ec:13:
5d:f5:1d:10:17:52:a5:32:5a:c5:8c:6e:3f:d9:70:
07:8f:04:8a:39:fb:25:a1:6e:57:cb:fb:6e:d8:48:
d2:d7:25:86:f2:cc:39:c8:54:fd:66:2c:a8:5f:78:
81:21:99:44:c9:78:b8:b8:62:e7:42:0a:1a:48:60:
05:86:8f:e3:45:6a:2f:96:c4:88:8c:1d:11:25:5f:
8d:54:7f:56:c3:ba:f0:8a:59:34:5c:90:21:55:4e:
0e:ba:11:91:53:08:16:ee:d5:dd:a0:4e:1a:08:d0:
97:d0:06:8c:c5:19:70:f9:e2:eb:cb:f2:c5:37:44:
88:f2:91:fb:41:84:d2:61:e3:f1:8e:ad:03:24:1d:
53:d4:24:25:2f:cf:78:70:56:a0:9a:e9:a8:a2:e1:
45:7c:89:dc:fd:b3:f5:28:95:e9:d3:94:60:03:b6:
b3:1b:1d:c8:b4:27:5f:cf:f3:28:bf:7f:6b:c1:da:
8e:b0:f4:36:10:d4:86:59:a7:0c:da:3a:6d:fa:fb:
22:1a:7b:bf:95:78:0a:bb:ee:65:77:0e:99:60:c9:
8b:5f:e1:8c:7b:f1:f5:7f:60:e8:ab:02:d1:5c:50:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:2B:E8:F8:A3:2A:1E:6A:7F:10:96:36:02:46:72:50:E4:D3:33
X509v3 Authority Key Identifier:
keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2a:21:d9:40:75:4b:7e:f0:fd:9f:f4:26:e1:79:68:ee:ff:
4f:74:f5:8a:a4:a2:e3:78:6f:11:96:59:86:88:79:39:53:e6:
30:b9:fb:60:48:24:46:e0:8e:2d:da:59:72:86:53:c6:71:9a:
7e:32:ca:84:25:29:ca:b1:d6:16:6e:89:ed:eb:06:f5:ff:d1:
fc:ac:b4:08:7b:7b:82:43:fc:ac:60:ab:68:5c:e4:e4:4d:9d:
cc:b4:e5:de:94:4b:0c:61:57:01:43:08:4a:28:39:72:28:d4:
df:7f:a0:21:16:47:8d:57:c3:e3:35:54:b7:f4:b6:c1:0f:68:
1f:86:fd:b7:87:ff:36:d5:26:f3:0a:82:a0:1a:86:ac:13:8d:
15:f0:62:6d:90:62:bb:78:4d:31:bb:ee:76:07:9c:0e:cb:80:
0b:66:fa:20:36:56:13:1d:ac:e5:61:70:80:4c:21:42:43:81:
7e:54:4a:4b:97:2e:43:e7:b7:5d:22:69:44:94:74:5b:8b:78:
83:9a:11:5a:56:64:22:5b:21:1c:2b:36:7c:de:25:71:0a:5b:
a0:aa:d7:49:11:e2:3d:25:99:3b:cd:d6:16:64:67:da:67:f7:
4b:fc:38:a6:72:fc:eb:ab:c1:fb:18:10:90:25:f4:b4:87:13:
a2:1e:7a:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM0RkIxMTAvBgNVBAUTKEZGMjBCQzM3OUQ4OUEwREIzQkU2RkNGMjkwRkEzREQ1
MkVCN0ZBMjAwHhcNMjYwODExMDUxODIyWhcNMjYwODE4MDUxODIyWjAYMRYwFAYD
VQQDEw02YTdhYjA5ZS05YzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwO7yqLUP8xVzoVKslTZQHgKVDzS2kpXNN/6+7BNd9R0QF1KlMlrFjG4/2XAH
jwSKOfsloW5Xy/tu2EjS1yWG8sw5yFT9ZiyoX3iBIZlEyXi4uGLnQgoaSGAFho/j
RWovlsSIjB0RJV+NVH9Ww7rwilk0XJAhVU4OuhGRUwgW7tXdoE4aCNCX0AaMxRlw
+eLry/LFN0SI8pH7QYTSYePxjq0DJB1T1CQlL894cFagmumoouFFfInc/bP1KJXp
05RgA7azGx3ItCdfz/Mov39rwdqOsPQ2ENSGWacM2jpt+vsiGnu/lXgKu+5ldw6Z
YMmLX+GMe/H1f2DoqwLRXFBZUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkqK+j4
oyoean8QljYCRnJQ5NMzMB8GA1UdIwQYMBaAFP8gvDediaDbO+b88pD6PdUut/og
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzRGQi8wOThGRTJFOERD
REMxMUVGOEUyOTE4NDRDNEY5QUUwMi9feUM4TjUySm9Oczc1dnp5a1BvOTFTNjMt
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL195QzhONTJKb05zNzV2enlrUG85MVM2My1pQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzRGQi8wOThGRTJFOERDREMxMUVGOEUyOTE4NDRDNEY5QUUwMi9feUM4TjUySm9O
czc1dnp5a1BvOTFTNjMtaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbCoh2UB1S37w/Z/0JuF5aO7/T3T1iqSi43hvEZZZhoh5OVPmMLn7YEgkRuCO
LdpZcoZTxnGafjLKhCUpyrHWFm6J7esG9f/R/Ky0CHt7gkP8rGCraFzk5E2dzLTl
3pRLDGFXAUMISig5cijU33+gIRZHjVfD4zVUt/S2wQ9oH4b9t4f/NtUm8wqCoBqG
rBONFfBibZBiu3hNMbvudgecDsuAC2b6IDZWEx2s5WFwgEwhQkOBflRKS5cuQ+e3
XSJpRJR0W4t4g5oRWlZkIlshHCs2fN4lcQpboKrXSRHiPSWZO83WFmRn2mf3S/w4
pnL866vB+xgQkCX0tIcToh561g==
-----END CERTIFICATE-----
Generated at Wed Aug 12 07:19:54 2026 by rpki-client